2002

Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the use

Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN sessio

Buffer overflow in Seunghyun Seo's MSN666 MSN Sniffer 1.0 and 1.0.1 allows remote attackers to execute arbitrary code vi

MailScanner before 4.0 5-1 and before 3.2 6-1 allows remote attackers to bypass protection via attachments with a filena

The Apple Package Manager in KisMAC 0.02a and earlier modifies file permissions of sensitive files after installation, w

Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running o

Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code vi

3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying th

Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users

Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with

tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requ

HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct r

NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration men

Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbit

Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files

Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to preve

The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink at

Buffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0.0.0, allows local users

Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privile

Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaSc

W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restr

The NBActiveX.ocx ActiveX control in NeoBook 4 allows remote attackers to install and execute arbitrary programs.

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers

NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to

Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk wh

The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-

Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows loca

dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock

tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by us

Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores

Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Securi

Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3,

Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arb

isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause

Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitr

Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service a

SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted

The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, doe

Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause

Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attacker

Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files

Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitr

Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write

Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndso

The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl direct

The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is pro

Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to comm

The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause

The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) wh

The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of se