2001

Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessio

Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the method

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the method

Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the lo

The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote

Buffer overflow in Progress database 8.3D and 9.1C allows local users to execute arbitrary code via long entries in file

The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten acros

sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands

Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via (1) _proapsv,

Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attacker

AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets t

Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP re

CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request

Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an

Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets

PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that s

Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files fr

pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web s

myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from r

Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote

PHP remote file inclusion vulnerability in Actionpoll PHP script before 1.1.2 allows remote attackers to execute arbitra

Vulnerability in Network Node Manager (NNM) 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code

Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web

Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear

admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allo

Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are i

Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in

Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to c

Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remo

ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execut

Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands

Buffer overflows in Raytheon SilentRunner allow remote attackers to (1) cause a denial of service in the collector (cle.

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the pr

Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to (1) access to

Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote

Buffer overflow in line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to execute arbit

Vulnerability in TrendMicro Virus Control System 1.8 allows a remote attacker to view configuration files and change the

Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allo

SMTP proxy in WatchGuard Firebox (2500 and 4500) 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a

Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack

Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MI

Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code,

tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to discover the full path to the working directory v

Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of

Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code vi

Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes

IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges v

Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute ar

Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a