2000

pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.

Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers t

Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.

Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause

mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which

IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of se

Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a r

Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet

Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a

Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.

The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet

HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a deni

read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows

Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.

Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a docume

The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configurat

The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via

The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a ..

Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form v

The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.

The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a

PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides

BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the leng

HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addre

Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 comman

The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI

Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of s

Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllF

The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files v

The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive

Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.

Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename i

Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connect

IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, wh

IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying

WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.

AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request t

vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a

vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attacke

IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consum

Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to fo

Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed requ

Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web pu

Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a de

Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of se

Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mai

Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET r