Vulnerabilities > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2002-06-25 | CVE-2002-0350 | Denial of Service vulnerability in HP ProCurve Switch HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a port scan of the management IP address, which disables the telnet service. | 7.8 |
2002-06-25 | CVE-2002-0348 | Unspecified vulnerability in SUN Cobalt RAQ 2, Cobalt RAQ 3I and Cobalt RAQ 4 service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument. | 7.5 |
2002-06-25 | CVE-2002-0346 | Unspecified vulnerability in SUN Cobalt RAQ 2, Cobalt RAQ 3I and Cobalt RAQ 4 Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi. | 7.5 |
2002-06-25 | CVE-2002-0345 | Unspecified vulnerability in Symantec Norton Ghost 7.0 Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges. | 7.5 |
2002-06-25 | CVE-2002-0340 | Unspecified vulnerability in Microsoft Windows Media Player Windows Media Player (WMP) 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files containing .wmf content. | 7.5 |
2002-06-25 | CVE-2002-0336 | Remote FTP Denial of Service vulnerability in Galacticomm Worldgroup Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / (slash), * (wildcard), and .. | 7.5 |
2002-06-25 | CVE-2002-0332 | Remote Buffer Overflow vulnerability in Xtell 1.91.1/2.6.1 Buffer overflows in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to execute arbitrary code via (1) a long DNS hostname that is determined using reverse DNS lookups, (2) a long AUTH string, or (3) certain data in the xtell request. | 7.5 |
2002-06-25 | CVE-2002-0330 | Unspecified vulnerability in Openbb 1.0.0Beta1/1.0.0Rc1/1.0.0Rc2 Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to execute arbitrary script and steal cookies via Javascript in the IMG tag. | 7.5 |
2002-06-25 | CVE-2002-0329 | Unspecified vulnerability in Snitz Communications Snitz Forums 2000 Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag. | 7.5 |
2002-06-25 | CVE-2002-0328 | Unspecified vulnerability in Ikonboard.Com Ikonboard 2.17/3.0.1 Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag. | 7.5 |