CVE-2001-0970

The CVE-2001-0970 vulnerability affects TDForum 1.2 (tdforum12.cgi) where input is not properly filtered, enabling cross-site scripting by malicious forum posts. CERT/CC notes TDForum 1.2 and earlier do not properly filter HTML/script tags, with no practical vendor patch available (as of the sour...

CVE-2001-1040

CVE-2001-1040 affects HP LaserJet and possibly other JetDirect devices, where certain power-off behavior resets the admin password. The result is that a remote attacker could gain administrative access without a password after the device is turned off, per the available description. The provided ...

CVE-2001-0958

CVE-2001-0958 affects Trend Micro InterScan eManager for NT Ver.3.51 (English) and NT Ver.3.51J. The vulnerability is a remotely exploitable buffer overflow in the eManager CGI interface, caused by long arguments to multiple DLLs (register.dll, ContentFilter.dll, SFNofitication.dll, TOP10.dll, Sp...

CVE-2001-0924

CVE-2001-0924 describes a directory traversal vulnerability in the Informix SQL Web DataBlade CGI (LO parameter) that allows remote attackers to read arbitrary files on the affected system. The issue arises from improper handling of the .. (dot dot) path traversal in the LO parameter of the ifx C...

CVE-2001-1050

CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable...

CVE-2001-0911

CVE-2001-0911 affects PHP-Nuke 5.1, where user and administrator passwords are stored in a base-64 encoded cookie. This could allow remote attackers to gain privileges by stealing/sniffing the cookie and decoding it. The connected sources corroborate the cookie-based credential exposure, but no p...

CVE-2001-0947

The CVE-2001-0947 issue affects ValiCert Enterprise Validation Authority (EVA) versions 3.3 through 4.2.1. It allows remote attackers to determine the server’s real pathname by requesting an invalid extension, which causes an error page that reveals the path. The vulnerability is a server-path di...

CVE-2001-0945

CVE-2001-0945 describes a buffer overflow in Outlook Express 5.0–5.02 for Macintosh triggered by an email message containing a long line, allowing remote attackers to cause a denial of service. The underlying issue is a buffer overflow in handling long lines; impact is a denial of service with pa...

CVE-2002-0047

CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service crash via a short malformed packet...

CVE-2001-1516

Cross-site scripting XSS vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews...

CVE-2001-0745

Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox: URL in the document.referrer property...

CVE-2001-0746

The CVE-2001-0746 issue is a buffer overflow in the Web Publisher component of iPlanet Web Server Enterprise Edition 4.1 and earlier. An attacker can trigger this by sending a long URI in requests for certain methods (notably GETPROPERTIES and GETATTRIBUTENAMES), potentially causing a denial of s...

CVE-2001-0650

Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute...

CVE-2001-0164

The CVE-2001-0164 issue affects Netscape Directory Server versions 4.12 and earlier, with a buffer overflow triggered by a specially crafted request in the recipient field. The Security Advisory (SECURITYVULNS/DOC:1363) confirms the exposure in Directory Server 4.11/4.12 and notes that artifacts ...

CVE-2001-0245

Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability...

CVE-2001-0402

IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port...

CVE-2001-0245

Microsoft Index Server 2.0 (Windows NT 4.0) and Indexing Service (Windows 2000) are affected by a vulnerability described as a Malformed Hit-Highlighting issue that allows remote readers to view server-side include files via a crafted search request. The CERT advisory confirms the ability to read...

CVE-1999-1421

CVE-1999-1421 affects NBase switches NH208 and NH215 that run a TFTP server. The vulnerability arises from the TFTP service allowing remote attackers to influence software updates by guessing default target filenames, enabling modification of the switch or triggering a denial-of-service (crash). ...

CVE-1999-0808

Multiple buffer overflows in ISC DHCP Distribution server dhcpd 1.0 and 2.0 allow a remote attacker to cause a denial of service crash and possibly execute arbitrary commands via long options...

CVE-1999-1153

CVE-1999-1153 affects HAMcards Postcard CGI script 1.0. The vulnerability allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the recipient email address, enabling potentially partial confidentiality, integrity, and availability impact. The CVSS score (2.0) ...