1999

Buffer overflow in ToxSoft NextFTP client through CWD command.

Buffer overflow in ALMail32 POP3 client via From: or To: headers.

The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote att

Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.

The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumb

Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the us

Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01

Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers

Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag.

A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedd

Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-si

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlie

Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and po

Denial of service in Sendmail 8.6.11 and 8.6.12.

Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of s

Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.

Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of he

IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL

An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol

The netstat service is running, which provides sensitive information to remote attackers.

The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs th

wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.

search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attac

Buffer overflow in Thomas Boutell's cgic library version up to 1.05.

Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.

By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of oth

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read

Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial

Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets

IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.

netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable an

A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.

WS_FTP server remote denial of service through cwd command.

nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.

Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remo

FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by s

Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoo

O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters

Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly exec

Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with a

Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's proc

InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.

Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector S

Denial of service of Ascend routers through port 150 (remote administration).

Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.

Netmanager Chameleon SMTPd has several buffer overflows that cause a crash.

Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read

In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer befor

When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and rep

Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of ser