Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Explore Sources Research Browse

Production

Loading current evidence

Loading the latest cvebuzz view.

© 2026 cvebuzz. CVE data courtesy of the National Vulnerability Database.

Subscribe via Atom About Browse CVEs Research Contact Privacy Policy Terms of Service

Search the full CVE archive | cvebuzz

Trending
Browse CVEs

Historical archive search

Search the full CVE archive

Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.

Years with data: 28
Top vendors indexed: 100

FiltersRefine the archive+

Search by CVE ID or description (supports basic regex, e.g. log4j|struts)

Quick date range

Last 7 days Last 30 days Last 90 days

Severity (select multiple)

Critical (43,437)High (124,997)Medium (163,475)Low (17,964)Unrated (2,025)

Attack vector (select multiple)

Results

CVE results

163,475 results · Sorted by Highest Buzz score first

CVE-2002-2352

Published Dec 31, 2002

The NBActiveX.ocx ActiveX control in NeoBook 4 allows remote attackers to install and execute arbitrary programs.

CVSS 5.8 · Medium

Vendor/product tagsBeta · best-effort

neosoft / neobook

CVE-2002-2353

Published Dec 31, 2002

tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests.

Network

Adjacent network

Local

Physical

CVSS minCVSS max

Year

CWEEnter a numeric ID such as 79 or the prefixed form CWE-79.

VendorBetaChoose an indexed vendor suggestion or enter another vendor.ProductBeta

Only show CVEs with KEV evidence

Only show CVEs with public PoC evidence

Only show CVEs with mention evidence

Only show CVEs with AlienVault OTX activity

Sort

CVSS 6.4 · Medium

Vendor/product tagsBeta · best-effort

tftpd32 / tftpd32

CVE-2002-2356

Published Dec 31, 2002

HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct request to hwadmin.cgi.

CVSS 6.4 · Medium

Vendor/product tagsBeta · best-effort

hamweather / hamweather

CVE-2002-2357

Published Dec 31, 2002

MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string, possibly due to a buffer overflow.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

mailenable / mailenable

CVE-2002-2358

Published Dec 31, 2002

Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title ta…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

opera_software / opera_web_browser

CVE-2002-2359

Published Dec 31, 2002

Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

mozilla / mozilla

CVE-2002-2361

Published Dec 31, 2002

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing.

CVSS 5.8 · Medium

Vendor/product tagsBeta · best-effort

yahoo / messenger

CVE-2002-2362

Published Dec 31, 2002

Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

sourceforge / mymarket

CVE-2002-2364

Published Dec 31, 2002

Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

sourceforge / php_ticket

CVE-2002-2366

Published Dec 31, 2002

Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin wi…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

cerulean_studios / trillian

CVE-2002-2369

Published Dec 31, 2002

Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

perception / liteserve

CVE-2002-2370

Published Dec 31, 2002

SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL request that does not end with a newline.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

sws / sws_simple_web_server

CVE-2002-2372

Published Dec 31, 2002

The telnet server in Infoprint 21 running controller software before 1.056007 allows remote attackers to cause a denial of service (crash) via a long username, possibly due to a b…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

ibm / infoprintibm / infoprint_21

CVE-2002-2375

Published Dec 31, 2002

Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent direc…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

stalker / communigate_pro

CVE-2002-2376

Published Dec 31, 2002

Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the (1) full name,…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

leung / e-guest

CVE-2002-2377

Published Dec 31, 2002

Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web script, and HTML via the entry field.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

sephiroth32 / zap_book

CVE-2002-2378

Published Dec 31, 2002

Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted int…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

nakata / an_httpd

CVE-2002-2380

Published Dec 31, 2002

NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from ne…

CVSS 6.4 · Medium

Vendor/product tagsBeta · best-effort

arescom / netdslmicrosoft / network_firmware

CVE-2002-2386

Published Dec 31, 2002

Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attackers to inject arbitrary web script or H…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2002-2387

Published Dec 31, 2002

Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the LS command.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

mollensoft_software / hyperion_ftp_server

CVE-2002-2388

Published Dec 31, 2002

Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service (crash) via a long HELO command.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

inweb / mail_server

CVE-2002-2389

Published Dec 31, 2002

TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain acce…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

fastlink_software / the_server

CVE-2002-2392

Published Dec 31, 2002

Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files…

CVSS 6.4 · Medium

Vendor/product tagsBeta · best-effort

nullsoft / winamp

CVE-2002-2393

Published Dec 31, 2002

Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service (no n…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

solarwinds / serv-u_file_server

CVE-2002-2394

Published Dec 31, 2002

InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encodin…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

trend_micro / interscan_viruswall

Showing 161,551-161,575 of 163,475 CVEsPage 6463 of 6539

Previous 1 6462 6463 6464 6539 Next

About these shareable results+

Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.

Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.