2001

Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption

Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL t

Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows

Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out

Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target

loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data d

The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username

The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or

Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option ena

PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode

in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request

document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of th

Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows re

Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with

The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web

McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.

Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (dot) into the URL for a protec

Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that co

Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that c

Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that

PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that cont

RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service vi

RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via

NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login reques

Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message t

Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files

Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the rema

bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows

Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly c

Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possi

WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number o

telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of s

The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connecti

Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via

The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may

The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the origina

The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows

SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently re

WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, whic

Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malfo

Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Expl

IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.ht

Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request

Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a

BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.

Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which al

rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet wit

Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service vi

gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot