2002

The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote a

The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, wh

IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via

anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows rem

Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with bot

The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 t

The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed D

Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execut

The Remote Desktop Sharing (RDS) Screen Saver Protection capability for Microsoft NetMeeting 3.01 through SP2 (4.4.3396)

Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 fro

The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restr

Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or exec

Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allow

Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edi

The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Ed

The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-

UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator fun

SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to e

Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to o

The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU co

Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (

Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attacke

SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'--

none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argume

Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gai

Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, allo

Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code.

The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (

Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers

wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to (1) execute arbitrary code or (2)

Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted docume

SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3

Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly

Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera Un

3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restr

Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execu

LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that

Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a

Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (cras

Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB

register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter tha

SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharact

Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote a

Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrar

Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long re

Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as

Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute ar

Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Sq

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated