Latest CVE Feed
-
5.0
MEDIUMCVE-2001-0383
banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication.... Read more
Affected Products : php-nuke- EPSS Score: %0.06
- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0403
/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.... Read more
Affected Products : sunos- EPSS Score: %0.15
- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0397
Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command.... Read more
Affected Products : silent_runner_collector_src- EPSS Score: %0.99
- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0393
Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without providing a username/password combination, which consumes the license limits.... Read more
Affected Products : financials_server- EPSS Score: %0.66
- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0373
The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information.... Read more
- EPSS Score: %1.26
- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0377
Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space followed by a large string.... Read more
Affected Products : inframail- EPSS Score: %0.74
- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0379
Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights.... Read more
Affected Products : hp-ux- EPSS Score: %0.11
- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1160
udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.... Read more
Affected Products : udirectory- EPSS Score: %9.14
- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
6.4
MEDIUMCVE-2001-0380
Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'.... Read more
Affected Products : xlt-f- EPSS Score: %3.22
- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0465
TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obtain sensitive information.... Read more
Affected Products : turbo_tax- EPSS Score: %0.08
- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-1163
Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.... Read more
Affected Products : netsql- EPSS Score: %4.46
- Published: Jun. 16, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-1077
Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument.... Read more
Affected Products : rxvt- EPSS Score: %0.29
- Published: Jun. 15, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-1148
Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh, (4) backupsh, (5) lpsh, (6) sysadm... Read more
Affected Products : openserver- EPSS Score: %0.11
- Published: Jun. 13, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1343
ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.... Read more
- EPSS Score: %9.10
- Published: Jun. 12, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1344
WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot).... Read more
- EPSS Score: %2.14
- Published: Jun. 12, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-1330
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.... Read more
Affected Products : aix- EPSS Score: %0.05
- Published: Jun. 11, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-1277
makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.... Read more
Affected Products : makewhatis- EPSS Score: %0.14
- Published: Jun. 11, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2001-1256
kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp temporary files.... Read more
Affected Products : hp-ux- EPSS Score: %0.34
- Published: Jun. 11, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1368
Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corrupt data.... Read more
Affected Products : iplanet_web_server- EPSS Score: %0.49
- Published: Jun. 11, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-1329
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.... Read more
Affected Products : aix- EPSS Score: %0.05
- Published: Jun. 11, 2001
- Modified: Apr. 03, 2025