2002

The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of servic

SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers t

Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remot

MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attacker

Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list

The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log

CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while mod

Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition,

Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP

Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via

showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style p

Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allow remote attackers to cause a denial of service (crash) via malfor

Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memor

The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, all

The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web r

Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files vi

NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a lo

The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throt

Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the c

Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to

in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long str

Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message

CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are p

CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pa

CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) defaul

Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read a

Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via

Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a den

Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service

The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the w

The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web

Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files vi

Cisco ONS15454 optical transport platform running ONS 3.1.0 to 3.2.0 allows remote attackers to cause a denial of servic

The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow

SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive use

Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via mult

Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a

Directory traversal vulnerability in cafenews.php for CARE 2002 before beta 1.0.02 allows remote attackers to read arbit

Buffer overflow in Novell iManager (eMFrame 1.2.1) allows remote attackers to cause a denial of service (crash) via a lo

Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remo

ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service (CPU consumption) by forward

The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which a

The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length

The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum nu

BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a he

BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.

JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, wh

Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of

Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cau