Archive
March 2002
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —CVE-2001-1142 Public exploit
ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the passwo…
-
Unscored —
book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the …
-
Unscored —
Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2001-1195 Public exploit
Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager,…
-
Unscored —
csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.
-
Unscored —
Buffer overflow in Progress database 8.3D and 9.1C allows local users to execute arbitrary code via long entries in fil…
-
Unscored —
Directory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for FrontPage 1.0 allows re…
-
Unscored —
xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shel…
-
Unscored —
rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service (core dump) via a malforme…
-
Unscored —
Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service (client cra…
-
Unscored —
Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the con…
-
Unscored —
get_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly …
-
Unscored —
nss_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an…
-
Unscored —
Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service …
-
Unscored —
The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow…
-
Unscored —
Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow r…
-
Unscored —
RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the…
-
Unscored —
Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary …
-
Unscored —
Format string vulnerabilities in (1) _probuild, (2) _dbutil, (3) _mprosrv, (4) _mprshut, (5) _proapsv, (6) _progres, (7…
-
Unscored —CVE-2001-1178 Public exploit
Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.
-
Unscored —
Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers …
-
Unscored —
Vulnerability in Network Node Manager (NNM) 6.2 and earlier in HP OpenView allows a local user to execute arbitrary cod…
-
Unscored —
NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the stu…
-
Unscored —
Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing…
-
Unscored —
The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows…
-
Unscored —CVE-2001-1202 Public exploit
Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidde…
-
Unscored —CVE-2001-1170 Public exploit
AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote…
-
Unscored —
The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote…
-
Unscored —CVE-2001-1137 Public exploit
D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (rebo…
-
Unscored —CVE-2001-1109 Public exploit
Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via …
-
Unscored —
Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (…
-
Unscored —
Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing t…
-
Unscored —
Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attac…
-
Unscored —
klprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.fil…
-
Unscored —
keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker w…
-
Unscored —CVE-2001-1165 Public exploit
Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain pri…
-
Unscored —CVE-2001-1217 EPSS 54%
Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attacker…
-
Unscored —CVE-2001-1156 Public exploit
TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1)…
-
Unscored —CVE-2001-1184 Public exploit
wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU c…
-
Unscored —
WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a …