CVE-2000-0046

CVE-2000-0046 is a buffer overflow vulnerability in the ICQ 99b 1.1.1.1 client that allows remote attackers to execute commands by sending a malformed URL contained in an ICQ message. The available connected documents confirm ICQ is installed on affected hosts and reference the CVE in multiple vu...

CVE-2000-0081

The CVE-2000-0081 entry concerns Hotmail and the improper filtering of JavaScript code in a user’s mailbox. The vulnerability lets a remote attacker execute JavaScript by bypassing filters with hexadecimal encoding of the javascript: protocol (for example jAvascript). Affected product is Hotmail;...

CVE-2000-0061

CVE-2000-0061 affects Internet Explorer 5. The vulnerability: during window loading, the document’s security zone is not updated until after loading, permitting a remote attacker to execute JavaScript in a different security context while the page is loading. The record indicates a maximum CVSS v...

CVE-2000-0038

glFtpD includes a default glftpd user account with a default password and a UID of 0...

CVE-2000-0049

Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file...

CVE-2000-0059

PHP3 with safemode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands...

CVE-2000-0110

The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0137

The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0131

Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands...

CVE-2000-0105

Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client...

CVE-2000-0103

The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0157

NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process...

CVE-2000-0123

The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-1205

Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via 1 the printenv CGI printenv.pl, which does not encode its output, 2 pages generated by the apsenderrorresponse function such as a default 404, which does not...

CVE-2000-0151

GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands...

CVE-2000-0121

The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability...

CVE-2000-0109

The mcsp Client Site Processor system MultiCSP in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords...

CVE-2000-0132

Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function...

CVE-2000-0117

The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin root...

CVE-2000-0116

Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra in front of the SCRIPT tag...