2001

Buffer overflows in Raytheon SilentRunner allow remote attackers to (1) cause a denial of service in the collector (cle.

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the pr

Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to (1) access to

Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote

Buffer overflow in line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to execute arbit

Vulnerability in TrendMicro Virus Control System 1.8 allows a remote attacker to view configuration files and change the

Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allo

SMTP proxy in WatchGuard Firebox (2500 and 4500) 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a

Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack

Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MI

Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code,

tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to discover the full path to the working directory v

Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of

Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code vi

Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remo

admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allo

Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are i

Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear

AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets t

Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP re

CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request

Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an

Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets

PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that s

Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files fr

pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web s

myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from r

Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote

PHP remote file inclusion vulnerability in Actionpoll PHP script before 1.1.2 allows remote attackers to execute arbitra

Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attacker

sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands

The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the method

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the method

Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the lo

The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service

Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack

Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessio

Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via

SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authenticatio

The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code b

A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via

Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HEL

Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers t

Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allo

Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configurat

Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly

CatalogMgr.pl in VirtualCatalog (incorrectly claimed to be in VirtualCart) allows remote attackers to execute arbitrary

Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a passwor

Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..."