2002

mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types with

Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to ca

Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and

The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, doe

Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause

Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attacker

Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files

Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitr

Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write

Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndso

The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl direct

The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is pro

Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to comm

The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause

The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) wh

The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of se

Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/

Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the

14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a re

Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Perso

The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary

Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, w

Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow r

Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service

Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to execu

Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading

install.php in phpBB 2.0 through 2.0.1, when "allow_url_fopen" and "register_globals" variables are set to "on", allows

Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of e

Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object o

The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbi

Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1

Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Ex

Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages.

Powerboards 2.2b allows remote attackers to view the full path to the backend database by sending a cookie containing a

phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, whi

askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a requ

ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative scrip

Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input."

Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which

SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent functio

AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file.

Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and d

Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets.

Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions with

csLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary Perl code via the setup pa

tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into

ACDSee 4.0 allows remote attackers to cause a denial of service (crash) via an .ais file with a long file description fi

PHProjekt 2.0 through 3.1 allows remote attackers to view or modify data via requests to certain scripts that do not ver

The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, wh

Directory traversal vulnerability in PHProjekt 2.0 through 3.1 allows remote attackers to read arbitrary files via .. (d