2001

poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by caus

Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial o

Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arb

Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaS

FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possib

The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario compu

iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory all

TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports whic

GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.

AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux direc

IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling th

IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w

Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.

The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obta

content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content dat

Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet

Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) bl

upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting t

Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port

The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cac

PowerNet IX allows remote attackers to cause a denial of service via a port scan.

vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a

vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names.

vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, po

SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.

admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify th

Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via

Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml a

Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL)

Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly conne

Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename in

Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read serv

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows r

TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows r

FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding t

The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of ser

The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to ca

Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwi

Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary

SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large numbe

Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL r

Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a UR

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *"

Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a ..

Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... (mod

man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion).

Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of ser

Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files via

Directory traversal vulnerability in cal_make.pl in PerlCal allows remote attackers to read arbitrary files via a .. (do