Skip to content
OpenAdvisories

Archive

May 2001

Vulnerabilities first published in this month (UTC), newest first.

← April 2001 2001 / May June 2001 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7201
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2491
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

292 results · Feed

  • Unscored —
    CVE-2001-0179

    Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF…

  • Unscored —
    CVE-2001-0117

    sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.

  • Unscored —
    CVE-2001-0126

    Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL …

  • Unscored —
    CVE-2001-0090

    The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the us…

  • Unscored —
    CVE-2001-0008 Public exploit EPSS 13%

    Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedu…

  • Unscored —
    CVE-2001-0147

    Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed fie…

  • Unscored —
    CVE-2001-0057

    Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP e…

  • Unscored —
    CVE-2001-0144 Public exploit EPSS 32%

    CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH serve…

  • Unscored —
    CVE-2001-0130

    Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote …

  • Unscored —
    CVE-2001-0055

    CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of T…

  • Unscored —
    CVE-2001-0003

    Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Exp…

  • Unscored —
    CVE-2001-0195

    sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allo…

  • Unscored —
    CVE-2001-0100 Public exploit EPSS 16%

    bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the em…

  • Unscored —
    CVE-2001-0083 EPSS 17%

    Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connectio…

  • Unscored —
    CVE-2001-0295 Public exploit

    Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly re…

  • Unscored —
    CVE-2001-0092 EPSS 12%

    A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window,…

  • Unscored —
    CVE-2001-0012

    BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.

  • Unscored —
    CVE-2001-0050 Public exploit EPSS 15%

    Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrar…

  • Unscored —
    CVE-2001-0006 Public exploit

    The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which all…

  • Unscored —
    CVE-2001-0028 Public exploit

    Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute …

  • Unscored —
    CVE-2001-0059 Public exploit

    patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.

  • Unscored —
    CVE-2001-0040 Public exploit

    APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary p…

  • Unscored —
    CVE-2001-0234

    NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed us…

  • Unscored —
    CVE-2001-0021 Public exploit EPSS 13%

    MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in th…

  • Unscored —
    CVE-2001-0299

    Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, a…

  • Unscored —
    CVE-1999-0115 Public exploit

    AIX bugfiler program allows local users to gain root access.

  • Unscored —
    CVE-1999-0800 Public exploit

    The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.

  • Unscored —
    CVE-1999-0945 EPSS 20%

    Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a …

  • Unscored —
    CVE-1999-0608

    An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.

  • Unscored —
    CVE-1999-0223

    Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.

  • Unscored —
    CVE-1999-0758

    Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appendin…

  • Unscored —
    CVE-1999-0729

    Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search r…

  • Unscored —
    CVE-1999-0922

    An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm fi…

  • Unscored —
    CVE-1999-0924

    The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.

  • Unscored —
    CVE-1999-0681 Public exploit EPSS 20%

    Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, al…

  • Unscored —
    CVE-1999-0268 Public exploit

    MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.

  • Unscored —
    CVE-1999-0760

    Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain a…

  • Unscored —
    CVE-2000-0315

    traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packet…

  • Unscored —
    CVE-2000-0874

    Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).

  • Unscored —
    CVE-2000-0693 Public exploit

    pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which a…