2000

Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impac

The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disab

The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote

SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attac

BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restr

Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP head

Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain

Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging sel

Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by s

Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for

Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (

Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with th

code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string.

upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method

violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as

The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 a

The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote

Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive

Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user crede

Buffer overflow in HP-UX cstm program allows local users to gain root privileges.

GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additi

The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging inf

Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary comman

Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in

The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands with

Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands

global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via sh

Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise

Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary command

Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denia

PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary com

Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands vi

Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbi

Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via

Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbi

Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO

CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password

Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to de

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute ar

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman

Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long B

IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name

Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrar

EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via l

Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arb

FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate i

authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters

SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the

Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary