2001

The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the use

The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to ide

BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a

Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL co

Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive le

IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base6

PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack contai

WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GE

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbi

CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TC

Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP ec

The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of servic

The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possi

Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arb

patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.

Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applet

WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, whic

Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malfo

Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Expl

IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.ht

Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request

Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a

BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.

Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which al

rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet wit

Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service vi

gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot

Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot

The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensiti

Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the

Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connection

CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users witho

FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malform

The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash

Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait"

CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could al

Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messeng

The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the origina

The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows

SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently re

Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier f

The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may

DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a mal

Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows

Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call in

Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL t

Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows

Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out