Archive
2 February 2002
Vulnerabilities first published on this day (UTC), newest first.
110 results · Feed
-
Unscored —CVE-2001-0999 EPSS 12%
Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MI…
-
Unscored —
Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into…
-
Unscored —
shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters i…
-
Unscored —
Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2…
-
Unscored —
Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows rem…
-
Unscored —
Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharac…
-
Unscored —CVE-2001-0898 Public exploit
Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domai…
-
Unscored —
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive fil…
-
Unscored —
ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs a…
-
Unscored —
PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to…
-
Unscored —
Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 t…
-
Unscored —
Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain…
-
Unscored —
Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to …
-
Unscored —CVE-2001-0924 Public exploit
Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrar…
-
Unscored —
Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be lock…
-
Unscored —
PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or …
-
Unscored —CVE-2001-0985 Public exploit
shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacha…
-
Unscored —
Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly exe…
-
Unscored —
Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and re…
-
Unscored —CVE-2001-0983 Public exploit
UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read t…
-
Unscored —CVE-2001-0979 Public exploit
Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a lon…
-
Unscored —
Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimize…
-
Unscored —
Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remo…
-
Unscored —
dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute th…
-
Unscored —
Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow…
-
Unscored —
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to ste…
-
Unscored —
DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a co…
-
Unscored —
Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory,…
-
Unscored —
Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitra…
-
Unscored —
SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as t…
-
Unscored —
Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX Workload Manager (WLM), allo…
-
Unscored —
Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters.
-
Unscored —
Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to ex…
-
Unscored —
Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker …
-
Unscored —
RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM fi…
-
Unscored —
POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to app…
-
Unscored —
Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow …
-
Unscored —
ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data …
-
Unscored —
The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview i…
-
Unscored —
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() f…