Latest CVE Feed
-
10.0
HIGHCVE-2001-0022
simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter.... Read more
Affected Products : simplestguest.cgi- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0012
BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.... Read more
Affected Products : bind- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0029
Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup.... Read more
Affected Products : oops_proxy_server- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0103
CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords.... Read more
- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
2.6
LOWCVE-2001-0068
Mac OS Runtime for Java (MRJ) 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet parameter.... Read more
Affected Products : mac_os_runtime_for_java- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0085
Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly execute arbitrary commands.... Read more
Affected Products : hp-ux- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0071
gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection.... Read more
Affected Products : privacy_guard- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0101
Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command.... Read more
Affected Products : fetchmail- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0003
Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka... Read more
- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0075
Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the filename parameter.... Read more
Affected Products : technote- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0097
The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash) via a large POST request.... Read more
Affected Products : infinite_interchange- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0028
Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " (quotation) characters.... Read more
Affected Products : oops_proxy_server- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0007
Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administration interface.... Read more
Affected Products : screen_os- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0086
CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling subscribe.pl with the target address as a parameter.... Read more
Affected Products : subscribe_me_lite- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0083
Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memory leak that allows remote attackers to cause a denial of service via a series of severed connections, aka the "Seve... Read more
Affected Products : windows_media_services- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0009
Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack.... Read more
Affected Products : domino_server- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
6.2
MEDIUMCVE-2001-0059
patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.... Read more
- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0020
Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot) attack.... Read more
- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-1273
The "mxcsr P4" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local users to cause a denial of service (system halt).... Read more
Affected Products : linux_kernel- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0069
dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack.... Read more
Affected Products : debian_linux- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025