2002

IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vul

Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for atta

Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a large

Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript

home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allows remote attackers to determine the full pathname of the we

Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathnam

MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between client

Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file cont

The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via

Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote

index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when

move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attack

dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the data

The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) vi

Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG t

Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp pag

Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbi

Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.

Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (

The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, whi

PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to deter

IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, which

The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to caus

ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.

ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling database-in

Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service (crash and reboot) when SOHO

Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrar

phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt t

PostBoard 2.0.1 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corru

The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth c

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial o

Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to ca

Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missi

psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a P

LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET reques

CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in

CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could

bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not u

Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory li

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname

FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connec

IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection

RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to

Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service

Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTT

AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the

iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators

Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via

The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a de

The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue w