11 June 2002

167 results · Feed

• Unscored —
  CVE-2001-1362

  Vulnerability in the server for nPULSE before 0.53p4.

  Jun 11, 2002
• Unscored —
  CVE-2001-1357

  Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.p…

  Jun 11, 2002
• Unscored —
  CVE-2001-1368

  Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could al…

  Jun 11, 2002
• Unscored —
  CVE-2001-1354 Public exploit

  NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, use…

  Jun 11, 2002
• Unscored —
  CVE-2001-1356

  NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, …

  Jun 11, 2002
• Unscored —
  CVE-2001-1363

  Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow atta…

  Jun 11, 2002
• Unscored —
  CVE-2001-1364

  Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified.

  Jun 11, 2002
• Unscored —
  CVE-2001-1358

  Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying a…

  Jun 11, 2002
• Unscored —
  CVE-2001-1366

  netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain…

  Jun 11, 2002
• Unscored —
  CVE-2001-1365

  Vulnerability in IntraGnat before 1.4.

  Jun 11, 2002
• Unscored —
  CVE-2001-1377

  Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allo…

  Jun 11, 2002
• Unscored —
  CVE-2001-1376

  Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a de…

  Jun 11, 2002
• Unscored —
  CVE-2001-1360

  Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned.

  Jun 11, 2002
• Unscored —
  CVE-2001-1355

  Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and poss…

  Jun 11, 2002
• Unscored —
  CVE-2001-1361

  Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the gen…

  Jun 11, 2002
• Unscored —
  CVE-2002-0508

  wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) pr…

  Jun 11, 2002
• Unscored —
  CVE-2002-0448 Public exploit EPSS 15%

  Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP reques…

  Jun 11, 2002
• Unscored —
  CVE-2002-0507

  An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID aut…

  Jun 11, 2002
• Unscored —
  CVE-2002-0492 Public exploit

  dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the dat…

  Jun 11, 2002
• Unscored —
  CVE-2002-0586

  Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of A…

  Jun 11, 2002
• Unscored —
  CVE-2002-0578

  Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitra…

  Jun 11, 2002
• Unscored —
  CVE-2002-0393

  Buffer overflow in Red-M 1050 (Bluetooth Access Point) management web interface allows remote attackers to cause a deni…

  Jun 11, 2002
• Unscored —
  CVE-2002-0582

  WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory…

  Jun 11, 2002
• Unscored —
  CVE-2002-0510

  The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, wh…

  Jun 11, 2002
• Unscored —
  CVE-2002-0564

  PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a …

  Jun 11, 2002
• Unscored —
  CVE-2002-0614

  PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain …

  Jun 11, 2002
• Unscored —
  CVE-2002-0581

  WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials…

  Jun 11, 2002
• Unscored —
  CVE-2002-0456

  Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for att…

  Jun 11, 2002
• Unscored —
  CVE-2002-0405

  Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of service and …

  Jun 11, 2002
• Unscored —
  CVE-2002-0522

  ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo"…

  Jun 11, 2002
• Unscored —
  CVE-2002-0450

  Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Mar…

  Jun 11, 2002
• Unscored —
  CVE-2002-0579

  WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request t…

  Jun 11, 2002
• Unscored —
  CVE-2002-0517

  Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating system…

  Jun 11, 2002
• Unscored —
  CVE-2002-0411

  Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascrip…

  Jun 11, 2002
• Unscored —
  CVE-2002-0555

  IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote at…

  Jun 11, 2002
• Unscored —
  CVE-2002-0491

  admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrat…

  Jun 11, 2002
• Unscored —
  CVE-2002-0523

  ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.

  Jun 11, 2002
• Unscored —
  CVE-2002-0561

  The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x us…

  Jun 11, 2002
• Unscored —
  CVE-2002-0455

  IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vu…

  Jun 11, 2002
• Unscored —
  CVE-2002-0589 Public exploit

  PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling …

  Jun 11, 2002