2002

wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) pro

The PHP administration script in popper_mod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows re

SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the TH

Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious

Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set bef

Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by

Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass a

Buffer overflow in pioout on AIX 4.3.3.

mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow.

namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow.

Buffer overflow in uucp in AIX 4.3.3.

Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.

Buffer overflow in lsmcode in AIX 4.3.3.

Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long

imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a d

Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gai

Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary cod

Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain

Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root p

Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on

Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitra

Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Ja

Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript

Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascrip

Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript

Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code

Cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies via

KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consu

Vulnerability in PureTLS before 0.9b2 related to injection attacks, which could possibly allow remote attackers to corru

VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that

Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modify

filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the

Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for at

The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout per

Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF

Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Conte

Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file,

Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascr

Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method,

The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records

Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as ot

ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo"

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Loc

The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote atta

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Eng

SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000

Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSD

OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 6

Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary