2002

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to

PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the

PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the physi

ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains

The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of conne

Directory traversal vulnerability in netget for Sybex E-Trainer web server allows remote attackers to read arbitrary fil

Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexi

Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript

The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which

InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in th

Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows loca

Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML documen

NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an a

netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the user

Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows lo

Runtime library in GNU Ada compiler (GNAT) 3.12p through 3.14p allows local users to modify files of other users via a s

Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative priv

Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute

Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the

Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrar

Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and cras

Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows remo

Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local user

Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a d

IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which

mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via t

psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin wit

Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service an

Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its ow

Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attack

index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers

Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a head

The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is prov

Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to exe

phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing she

Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.

Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbi

retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remo

Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe

Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickn

Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that

Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may all

setlicense for TOLIS Group Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a s

Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 a

Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allow

GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which coul

Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable tempor

Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-

Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute a

ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows rem