2000

Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impac

The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disab

The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote

SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attac

BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restr

Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP head

Buffer overflow in HP-UX cstm program allows local users to gain root privileges.

GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additi

The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging inf

Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary comman

Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in

The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands with

Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands

global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via sh

Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise

Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary command

Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denia

PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary com

Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands vi

Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbi

Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via

Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbi

Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO

Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to de

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute ar

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman

Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long B

IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name

Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrar

EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via l

Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arb

FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate i

authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters

SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the

Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary

Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the

Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute

Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which

The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constru

IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remot

GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attack

bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands

Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web si

cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unk

Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute a

Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY enviro

Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink a

Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack

GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.