2002

Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk wh

The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-

Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows loca

dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock

tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by us

Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores

Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Securi

Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3,

Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arb

isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause

Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitr

Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service a

SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted

The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, doe

Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause

Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attacker

Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files

Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitr

Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write

Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndso

The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl direct

The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is pro

Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to comm

The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause

The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) wh

The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of se

Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/

Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the

14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a re

Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Perso

The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary

Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, w

Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow r

Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service

Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to execu

Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading

install.php in phpBB 2.0 through 2.0.1, when "allow_url_fopen" and "register_globals" variables are set to "on", allows

Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of e

Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object o

The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbi

Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1

Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Ex

Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages.

Powerboards 2.2b allows remote attackers to view the full path to the backend database by sending a cookie containing a

phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, whi

askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a requ

ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative scrip

Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input."

Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which

SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent functio