November 2001

36 results · Feed

• Unscored —
  CVE-2001-0870

  HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default…

  Nov 30, 2001
• Unscored —
  CVE-2001-0871

  Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to…

  Nov 30, 2001
• Unscored —
  CVE-2001-0868

  Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) str…

  Nov 28, 2001
• Unscored —
  CVE-2001-0844

  Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metach…

  Nov 22, 2001
• Unscored —
  CVE-2001-0826

  Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HEL…

  Nov 22, 2001
• Unscored —
  CVE-2001-0845

  Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows lo…

  Nov 22, 2001
• Unscored —
  CVE-2001-0838 Public exploit

  Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via fo…

  Nov 22, 2001
• Unscored —
  CVE-2001-0824

  Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by i…

  Nov 22, 2001
• Unscored —
  CVE-2001-0835

  Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject…

  Nov 22, 2001
• Unscored —
  CVE-2001-0841

  Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite fil…

  Nov 22, 2001
• Unscored —
  CVE-2001-0840

  Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1)…

  Nov 22, 2001
• Unscored —
  CVE-2001-0855 Public exploit

  Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM en…

  Nov 22, 2001
• Unscored —
  CVE-2001-0842

  Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to…

  Nov 22, 2001
• Unscored —
  CVE-2001-0809

  Vulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print serve…

  Nov 22, 2001
• Unscored —
  CVE-2001-0800 Public exploit EPSS 54%

  lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.

  Nov 22, 2001
• Unscored —
  CVE-2001-0807

  Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text…

  Nov 22, 2001
• Unscored —
  CVE-2001-0849

  viralator CGI script in Viralator 0.9pre1 and earlier allows remote attackers to execute arbitrary code via a URL for a…

  Nov 22, 2001
• Unscored —
  CVE-2001-0832

  Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a sym…

  Nov 22, 2001
• Unscored —
  CVE-2001-0847

  Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $d…

  Nov 22, 2001
• Unscored —
  CVE-2001-0854

  PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php …

  Nov 22, 2001
• Unscored —
  CVE-2001-0848

  join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form var…

  Nov 22, 2001
• Unscored —
  CVE-2001-0818 Public exploit

  A buffer overflow the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary com…

  Nov 22, 2001
• Unscored —
  CVE-2001-0721 EPSS 17%

  Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (me…

  Nov 22, 2001
• Unscored —
  CVE-2001-0831

  Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*P…

  Nov 22, 2001
• Unscored —
  CVE-2001-0853

  Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot do…

  Nov 22, 2001
• Unscored —
  CVE-2001-0821 Public exploit

  The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remot…

  Nov 22, 2001
• Unscored —
  CVE-2001-0671

  Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers…

  Nov 22, 2001
• Unscored —
  CVE-2001-0839 Public exploit

  ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allow…

  Nov 22, 2001
• Unscored —
  CVE-2001-0799

  Buffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute arbitrary commands via a long…

  Nov 22, 2001
• Unscored —
  CVE-2001-0817 EPSS 10%

  Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify a…

  Nov 22, 2001
• Medium —
  CVE-2001-0829 EPSS 12%

  Apache Tomcat allows webmasters to insert xss into error messages

  A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.

  org.apache.tomcat:tomcat Maven
  Nov 22, 2001
• Unscored —
  CVE-2001-0808

  gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain charac…

  Nov 22, 2001
• Unscored —
  CVE-2001-0858

  Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allow…

  Nov 22, 2001
• High 7.5
  CVE-2001-0827

  Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of "PASV"…

  Nov 22, 2001
• Unscored —
  CVE-2001-0820 Public exploit EPSS 13%

  Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are pa…

  Nov 22, 2001
• Unscored —
  CVE-2001-0856

  Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_K…

  Nov 22, 2001