Lucene search
+L

3489 matches found

CVE
CVE
•added 2005/07/14 4:00 a.m.•59 views

CVE-2001-1541

CVE-2001-1541 describes a buffer overflow in UUCP of BSDI BSD/OS 3.0–4.2 that lets a local attacker execute arbitrary code via a long command line argument. The vulnerability is due to unsafe handling in UUCP, enabling code execution with local access; the impact is full confidentiality, integrit...

7.2CVSS7.9AI score0.00601EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•108 views

CVE-2001-1543

Axis Network Camera models 2120, 2110, 2100, 200+ and 200 are affected by CVE-2001-1543 due to a default administrator password. This root cause allows remote attackers to gain access using the credentials pass. Impact stated across multiple sources is unauthorized access to the camera. No explic...

7.5CVSS7.1AI score0.02389EPSS
SaveExploits0References4Affected Software5
CVE
CVE
•added 2005/07/14 4:00 a.m.•109 views

CVE-2001-1544

The CVE-2001-1544 entry applies to Macromedia/Allaire JRun Web Server (JWS) versions 2.3.3, 3.0 and 3.1. The vulnerability is a directory traversal via a dot-dot (..) in the HTTP GET request that allows reading arbitrary files on the affected host. Concrete details are supported by connected sour...

5CVSS6.7AI score0.01685EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•68 views

CVE-2001-1546

Pathways Homecare 6.5 is affected by a vulnerability where weak encryption protects usernames and passwords, enabling local attackers to recover credentials from the pwhc.ini file and gain privileges. Affected component: Pathways Homecare 6.5; root cause: weak encryption/storage of credentials in...

7.8CVSS7AI score0.00413EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•59 views

CVE-2001-1547

Outlook Express 6.0 vulnerability: when the setting to block potentially virus-laden attachments is enabled, forwarded messages may bypass this and allow remote code execution. Affected component is attachments handling in forwarded email. The provided documents state the issue but do not specify...

7.5CVSS7.8AI score0.13737EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•69 views

CVE-2001-1548

CVE-2001-1548 affects ZoneAlarm versions 2.1–2.6 and ZoneAlarm Pro 2.4–2.6. The root cause is bypass of filtering by local users through non-standard TCP packets crafted with non-Windows protocol adapters, enabling potential evasion of security controls. The public records describe the vulnerabil...

2.1CVSS6.8AI score0.00429EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•66 views

CVE-2001-1549

The CVE-2001-1549 entry affects Tiny Personal Firewall versions 1.0 and 2.0. The vulnerability permits local users to bypass filtering by sending non-standard TCP packets created with non-Windows protocol adapters, indicating a local-privilege or local-bypass risk depending on the deployment. The...

2.1CVSS6.8AI score0.00755EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•69 views

CVE-2001-1552

CVE-2001-1552 affects Windows ME where the service ssdpsrv.exe can be triggered remotely to cause a denial of service by sending multiple newline characters in an SSDP message. The NVD/CVE records describe the vulnerability as a DoS condition without mentioning code-level details, impacted versio...

5CVSS7AI score0.13903EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•62 views

CVE-2001-1553

CVE-2001-1553 describes a local buffer overflow in SETI@home 3.03 when the binary is installed setuid. An attacker could trigger arbitrary code execution via overly long command line options (socks_server, socks_user, socks_passwd). The note indicates the default SETI@home configuration is not se...

4.6CVSS8AI score0.00403EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•66 views

CVE-2001-1554

IBM AIX 430 is affected by CVE-2001-1554 due to improper unlocking of IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) by sending PMTU IP packets. The impact is a partial loss of availability as described in the sources. The connected documents confirm the root cause...

5CVSS6.8AI score0.0124EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•68 views

CVE-2001-1555

CVE-2001-1555 affects Solaris 8 via the pt_chmod path where logout does not call fdetach to reset terminal privileges, enabling local users to modify a TTY ACL and write to other users’ terminals. The available sources describe the vulnerable component and root cause but do not provide explicit p...

4.6CVSS6.7AI score0.00441EPSS
SaveExploits1References4Affected Software2
CVE
CVE
•added 2005/07/14 4:00 a.m.•156 views

CVE-2001-1556

Technical details for CVE-2001-1556 are not publicly provided in the connected documents. Monitor for updates.

5CVSS6.9AI score0.03564EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•82 views

CVE-2001-1557

CVE-2001-1557 describes a buffer overflow in the ftpd daemon of IBM AIX 4.3 and 5.1 that allows attackers to gain privileges. The Red Hat and CVE listings corroborate the IBM AIX ftpd vulnerability. The connected documents confirm the affected component and the privilege escalation impact but do ...

7.5CVSS7.2AI score0.01193EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•71 views

CVE-2001-1558

CVE-2001-1558 describes an unknown vulnerability in Snort’s IP defragmenter (frag2) that could crash the process, affecting Snort before version 1.8.3. The vulnerability is documented in the NVD entry and corroborated by Red Hat’s CVE page; other connected records reference the same description. ...

5CVSS6.5AI score0.01066EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•86 views

CVE-2001-1560

CVE-2001-1560 involves Win32k.sys (Graphics Device Interface, GDI) on Windows 2000/XP. The vulnerability arises when a local user calls the ShowWindow function after receiving a WM_NCCREATE message, enabling a local DoS (system crash). Documents consistently reference this by name and description...

2.1CVSS6.6AI score0.03067EPSS
SaveExploits2References3Affected Software2
CVE
CVE
•added 2005/07/14 4:00 a.m.•76 views

CVE-2001-1561

CVE-2001-1561 describes a buffer overflow in Xvt 2.1 on Debian Linux 2.2 that allows local users to execute arbitrary code via long (1) -name and (2) -T arguments. The issue stems from argument handling in xvt, enabling code execution with elevated privileges because xvt is installed setuid root....

7.2CVSS7.5AI score0.01201EPSS
SaveExploits2References5Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•58 views

CVE-2001-1562

CVE-2001-1562 affects the nvi editor; it is a format string vulnerability in which, before version 1.79, local users could gain privileges via format specifiers embedded in a filename. The Debian advisory DSA-085-1 and OpenVAS entries reiterate that nvi (and nvi-m17n) needed updates to address th...

7.2CVSS6.4AI score0.00397EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•74 views

CVE-2001-1563

CVE-2001-1563 refers to a vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 where attackers could access servlet resources. The vendor advisory is vague about full scope, but a public remediation exists: Apache Tomcat 3.2.4 fixes this issue. While the exact root cause isn’t deta...

7.5CVSS6.5AI score0.04931EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•74 views

CVE-2001-1565

The CVE affects the MacOS X Point-to-Point Protocol daemon (pppd) for versions 10.0 to 10.1.5. The issue is that the daemon exposes the username and password on the process command line, allowing local users to read authentication information via the ps utility. Root cause: credentials displayed ...

2.1CVSS6.9AI score0.00343EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2005/07/14 4:00 a.m.•83 views

CVE-2001-1566

CVE-2001-1566 describes a format-string vulnerability in libvanessa_logger 0.0.1 used by Perdition 0.1.8 that allows remote code execution via format specifiers in the __vanessa_logger_log function. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network access, low attack complexity, ...

7.5CVSS7.7AI score0.02759EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder