Latest CVE Feed
-
4.6
MEDIUMCVE-2001-0230
Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain privileges.... Read more
Affected Products : freebsd- EPSS Score: %0.08
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0251
The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command.... Read more
Affected Products : enterprise_server- EPSS Score: %0.78
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0225
fortran math component in Infobot 0.44.5.3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.... Read more
Affected Products : infobot- EPSS Score: %2.10
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0221
Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.... Read more
Affected Products : ja-xklock- EPSS Score: %0.43
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0211
Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the sp.nextform parameter.... Read more
Affected Products : webspirs- EPSS Score: %3.05
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0256
FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username.... Read more
Affected Products : ftp\+\+_server- EPSS Score: %1.22
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0250
The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command.... Read more
Affected Products : enterprise_server- EPSS Score: %8.58
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0253
Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. (dot dot) attack in the show parameter.... Read more
Affected Products : hyperseek- EPSS Score: %7.78
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0309
inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attackers to cause a denial of service via a series of connections to the internal services.... Read more
Affected Products : linux- EPSS Score: %0.79
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2001-1047
Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2) calling dup2 on a file descriptor i... Read more
Affected Products : openbsd- EPSS Score: %0.07
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0214
Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with a null byte.... Read more
Affected Products : way-board- EPSS Score: %2.67
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-1046
Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.... Read more
Affected Products : qpopper- EPSS Score: %0.96
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0210
Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the page parameter.... Read more
Affected Products : commerce.cgi- EPSS Score: %2.67
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0217
Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter.... Read more
Affected Products : webpals- EPSS Score: %3.45
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0215
ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte.... Read more
Affected Products : roads- EPSS Score: %4.31
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
3.6
LOWCVE-2001-0259
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file.... Read more
Affected Products : ssh- EPSS Score: %0.27
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0252
iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.... Read more
Affected Products : iplanet_enterprise_server- EPSS Score: %0.76
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0216
PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter.... Read more
Affected Products : webpals- EPSS Score: %6.95
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0149
Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.... Read more
Affected Products : internet_explorer- EPSS Score: %43.56
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0164
Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field.... Read more
Affected Products : directory_server- EPSS Score: %2.36
- Published: Jun. 02, 2001
- Modified: Apr. 03, 2025