2001

Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (

Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) att

Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and

ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form paramete

Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary file

Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request

The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary direc

The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via th

iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP G

Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary fi

FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command.

FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including

The Easycom/Safecom Print Server (firmware 404.590) PrintGuide server allows remote attackers to cause a denial of servi

inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which a

IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTT

Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast addres

MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of servic

telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large

Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could all

Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting info

Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to c

Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request wh

banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change

Navision Financials Server 2.60 and earlier allows remote attackers to cause a denial of service by sending a null chara

Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the s

Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before

Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary file

Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet,

BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN

Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. (dot

IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .

Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP r

Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot

Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers

Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly conne

Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename in

Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read serv

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows r

TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows r

FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding t

The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of ser

The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to ca

Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwi

Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary

SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large numbe

Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL r

Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a UR

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *"

Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a ..