2001

Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands v

Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via

Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges.

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and passwo

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does

The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may

Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messeng

Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier f

The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the origina

The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows

The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to

SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently re

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new serve

SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attacke

MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administra

Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.

WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to

Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.ph

Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an

PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to

Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via

Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database reque

Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applet

HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as passwo

Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and

WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, whic

Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malfo

Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Expl

IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.ht

Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arb

Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request

Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedur

Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a

Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.

Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.

Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which al

Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to t

Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to

simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharact

everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharac

simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacte

ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the

rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet wit

mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, whi

Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute a

Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrar

The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Servic

One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.