1890 matches found
CVE-1999-1167
CVE-1999-1167 describes a Cross-site scripting vulnerability in the Third Voice Web annotation utility. The issue allows remote attackers to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious JavaScript into an annotation. Affected component is the ...
CVE-2001-0999
CVE-2001-0999 concerns Outlook Express 6.00, where remote attackers could cause arbitrary script execution by embedding SCRIPT tags in a message with MIME type text/plain. This contradicts the expected behavior that text/plain messages do not run scripts. The available references (NVD, CVE List) ...
CVE-2001-0931
CVE-2001-0931 describes a directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03. The issue allows an attacker to list or read arbitrary files and directories by using a .. path in FTP commands (LS or GET). The provided documents do not specify a fix or remediation; no exploitation d...
CVE-2000-1171
The CVE-2000-1171 issue affects CGIForum 1.0’s cgiforum.pl (thesection parameter) where insufficient input validation allows directory traversal. An attacker can craft a URL (e.g., ?thesection=../../../../etc/passwd) to access files on the web server, with the accessible scope limited by the web ...
CVE-2000-1187
CVE-2000-1187 involves a buffer overflow in the HTML parser of Netscape 4.75 and earlier. The vulnerability allows remote attackers to execute arbitrary commands by supplying a long password value in a form field. The available documents explicitly describe the affected component (HTML parser), t...
CVE-2000-0610
NetWin dMailWeb and cwMail 2.6g and earlier are affected by a vulnerability that allows remote attackers to bypass authentication and relay mail through the server by supplying a username that contains a carriage return. This entry is documented in CVE-2000-0610 with an NVD base score of 5.0 (Med...
CVE-2000-0675
Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents; monitor for updates.
CVE-2000-0114
CVE-2000-0114 affects FrontPage Server Extensions. It enables unauthenticated remote disclosure of the anonymous account name via an RPC POST to shtml.dll in the /_vti_bin/ virtual directory. The issue stems from information disclosure in FrontPage Server Extensions; no exploitation details are p...
