2002

Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 al

Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code.

The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (

Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers

wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to (1) execute arbitrary code or (2)

Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted docume

SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3

Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly

Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera Un

3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restr

Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execu

LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that

Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a

Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (cras

Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB

register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter tha

SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharact

Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote a

Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrar

Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long re

Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as

Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute ar

Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Sq

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated

CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newl

CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via th

CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and met

Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER comm

Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arb

Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to exe

Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remot

Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as

Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary cod

Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitra

Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service (crash) and possibly execute arbit

Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other

Scripts For Educators MakeBook 2.2 CGI program allows remote attackers to execute script as other visitors, or execute s

Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP po

Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary

globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remo

The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited

Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remot

BlackICE Agent 3.1.eal does not always reactivate after a system standby, which could allow remote attackers and local u

Cross-site scripting vulnerability in browse.php for PHP(Reactor) 1.2.7 allows remote attackers to execute script as oth

Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other user

Multiple cross-site scripting vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allows remote attackers to execute a

Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other

Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via

Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users

Buffer overflow in 4D web server 6.7.3 allow remote attackers to cause a denial of service and possibly execute arbitrar