Archive
15 June 2000
Vulnerabilities first published on this day (UTC), newest first.
18 results · Feed
-
Unscored —
The administrative password for the Allmanage web site administration software is stored in plaintext in a file which c…
-
Unscored —CVE-2000-0423 Public exploit
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameter…
-
Unscored —
FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.
-
Unscored —CVE-2000-0449 Public exploit
Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.
-
Unscored —CVE-2000-0444 Public exploit
HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.
-
Unscored —
Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary …
-
Unscored —
The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the rem…
-
Unscored —
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the p…
-
Unscored —
FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML …
-
Unscored —
Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken …
-
Unscored —CVE-2000-0412 Public exploit
The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote at…
-
Unscored —
The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to …
-
Unscored —CVE-2000-0384 Public exploit
NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable …
-
Unscored —CVE-2000-0400 Public exploit
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded,…
-
Unscored —
Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands.
-
Unscored —
The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attack…
-
Unscored —CVE-2000-0429 Public exploit
A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.
-
Unscored —
Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that ha…