Latest Vulnerabilities with Public Exploits

Updated 4h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

371,606 CVEs tracked 55,344 with exploits 5,153 exploited in wild 1,656 CISA KEV 4,275 Nuclei templates 56,400 vendors 49,634 researchers

55,344 results Clear all

CVE-2002-1192 1 PoC Analysis EPSS 0.01

rogue on NetBSD <= 1.6 and FreeBSD 4.6 - Local Privilege Escalation via Malformed Game Save File

Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file.

Oct 28, 2002 STIX 2.1

CVE-2002-1526 1 PoC Analysis EPSS 0.04

EMU Webmail 5.0 - Cross-Site Scripting via Email Address Field

Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field.

Apr 02, 2003 STIX 2.1

CVE-2002-1527 1 PoC Analysis EPSS 0.07

EMU Webmail 5.0 - Information Disclosure via Malformed Script String

emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message.

Apr 02, 2003 STIX 2.1

CVE-2002-1533 1 PoC Analysis EPSS 0.02

Jetty < 4.1.1 - Cross-Site Scripting via JSP Filename with Encoded Linefeed

Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).

Mar 31, 2003 STIX 2.1

CVE-2002-1943 1 PoC Analysis EPSS 0.03

SafeTP 1.46 - Internal IP Address Leak via PASV Response

SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a response to a passive mode (PASV) file transfer request.

Dec 31, 2002 STIX 2.1

CVE-2002-1660 1 PoC Analysis EPSS 0.11

vBulletin < 2.1.9 - Remote Code Execution via Calendar.php Command Parameter

calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.

CWE-78 Dec 31, 2002 STIX 2.1

CVE-2002-0838 2 PoCs Analysis EPSS 0.02

gv 3.5.8 - Buffer Overflow via Malformed PDF or PostScript File

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.

Oct 10, 2002 STIX 2.1

CVE-2002-1513 1 PoC Analysis EPSS 0.01

HP TCP/IP services for OpenVMS <5.3 - Info Disclosure

The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.

Apr 02, 2003 STIX 2.1

CVE-2002-1514 1 PoC Analysis EPSS 0.01

Borland InterBase - Privilege Escalation

gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.

Apr 02, 2003 STIX 2.1

CVE-2002-1803 1 PoC Analysis EPSS 0.02

PHP-Nuke 6.0 - Cross-Site Scripting via IMG Tag Javascript Injection

Cross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.

Dec 31, 2002 STIX 2.1

CVE-2002-1804 1 PoC Analysis EPSS 0.02

NPDS 4.8 - Cross-Site Scripting via IMG Tag

Cross-site scripting (XSS) vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.

Dec 31, 2002 STIX 2.1

CVE-2002-1805 1 PoC Analysis EPSS 0.02

dacode 1.2.0 - Cross-Site Scripting via IMG Tag

Cross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.

Dec 31, 2002 STIX 2.1

CVE-2002-1806 1 PoC Analysis EPSS 0.04

Drupal 4.0.0 - Cross-Site Scripting via IMG Tag Javascript

Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.

Dec 31, 2002 STIX 2.1

CVE-2002-2171 1 PoC Analysis EPSS 0.02

acWEB 1.8 and 1.14 - Cross-Site Scripting via URL Parameter

Cross-site scripting (XSS) vulnerability in acWEB 1.8 and 1.14 allows remote attackers to insert arbitrary HTML and web script via a URL, possibly via a "%db" request in a URL.

Dec 31, 2002 STIX 2.1

CVE-2002-1802 1 PoC Analysis EPSS 0.02

Xoops 1.0 RC3 - Stored Cross-Site Scripting via News Submission IMG Tag

Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when submitting news.

Dec 31, 2002 STIX 2.1

CVE-2002-1850 7.5 HIGH 1 PoC Analysis EPSS 0.15

Apache HTTP Server 2.0.39-2.0.40 - Denial of Service via mod_cgi stderr Deadlock

mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a large amount of data to stderr, which results in a read/write deadlock between httpd and the CGI script.

CWE-667 Dec 31, 2002 STIX 2.1

CVE-2002-1147 1 PoC Analysis EPSS 0.07

HP Procurve Switch 4000M < c.09.15 - Unauthenticated Denial of Service via Device Reset CGI

The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the device_reset CGI program.

Oct 11, 2002 STIX 2.1

CVE-2002-1148 1 PoC Analysis EPSS 0.17

Apache Tomcat < 4.0.5 - Unauthenticated Arbitrary File Read via Default Servlet

The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.

Oct 11, 2002 STIX 2.1

CVE-2002-1495 1 PoC Analysis EPSS 0.02

JAWmail 1.0-rc1 - Cross-Site Scripting via Attached File Names and HTML Mail Attributes

Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via (1) attached file names in the Read Mail feature, (2) text/html mails that are displayed in a pop-up window, and (3) certain malicious attributes within otherwise safe tags, such as onMouseOver.

Apr 02, 2003 STIX 2.1

CVE-2002-1496 1 PoC Analysis EPSS 0.23

Null HTTP Server <0.5.0 - Buffer Overflow

Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in the Content-Length HTTP header.

Apr 02, 2003 STIX 2.1

Latest Vulnerabilities with Public Exploits

Investigate

Ecosystems

Reference Indexes

Recent Blog Posts

CVEForge Labs

KEV Gaps