Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,105 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2001-0714 | Not scored | Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (data loss) by (1) setting a high initial message hop count option (-h), which causes Sendmail to drop queue entries, (2)… | Oct 12, 2001 |
| CVE-2001-0713 | Not scored | Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain… | Oct 12, 2001 |
| CVE-2001-0712 | Not scored | The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not… | Oct 12, 2001 |
| CVE-2001-0669 | Not scored | Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor… | Oct 12, 2001 |
| CVE-2001-0535 | Not scored | Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host"… | Oct 12, 2001 |
| CVE-2001-0505 | Not scored | Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service. | Oct 12, 2001 |
| CVE-2001-0495 | Not scored | Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (dot dot) attack. | Sep 18, 2001 |
| CVE-2001-0494 | Not scored | Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header. | Sep 18, 2001 |
| CVE-2001-0489 | Not scored | Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands. | Sep 18, 2001 |
| CVE-2001-0488 | Not scored | pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service. | Sep 18, 2001 |
| CVE-2001-0486 | Not scored | Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353. | Sep 18, 2001 |
| CVE-2001-0482 | Not scored | Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or execute arbitrary commands by modifying kernel variables such as MaxFiles, MaxInodes, and… | Sep 18, 2001 |
| CVE-2001-0481 | Not scored | Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling. | Sep 18, 2001 |
| CVE-2001-0475 | Not scored | index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter. | Sep 18, 2001 |
| CVE-2001-0474 | Not scored | Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmemory file. | Sep 18, 2001 |
| CVE-2001-0473 | Not scored | Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands. | Sep 18, 2001 |
| CVE-2001-0469 | Not scored | rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via malformed packets with a short length. | Sep 18, 2001 |
| CVE-2001-0467 | Not scored | Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a \... (modified dot dot) in an HTTP URL request. | Sep 18, 2001 |
| CVE-2001-0465 | Not scored | TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obtain sensitive information. | Sep 18, 2001 |
| CVE-2001-0462 | Not scored | Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. | Sep 18, 2001 |
| CVE-2001-0457 | Not scored | man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion). | Sep 18, 2001 |
| CVE-2001-0456 | Not scored | postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access, which causes the server to run at a higher privilege than intended. | Sep 18, 2001 |
| CVE-2001-0455 | Not scored | Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows remote attackers to modify its configuration. | Sep 18, 2001 |
| CVE-2001-0440 | Not scored | Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands. | Sep 18, 2001 |
| CVE-2001-0439 | Not scored | licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. | Sep 18, 2001 |
| CVE-2001-0434 | Not scored | The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario computers allows remote attackers to modify arbitrary files and cause a denial of service. | Sep 18, 2001 |
| CVE-2001-0430 | Not scored | Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files. | Sep 18, 2001 |
| CVE-2001-0429 | Not scored | Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port, which causes a network storm and a denial of service. | Sep 18, 2001 |
| CVE-2001-0428 | Not scored | Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP option. | Sep 18, 2001 |
| CVE-2001-0427 | Not scored | Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which do not properly disconnect the user… | Sep 18, 2001 |
| CVE-2001-0414 | Not scored | Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument. | Sep 18, 2001 |
| CVE-2001-0413 | Not scored | BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN port scan, which causes the router to hang. | Sep 18, 2001 |
| CVE-2001-0412 | Not scored | Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode. | Sep 18, 2001 |
| CVE-2001-0409 | Not scored | vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory. | Sep 18, 2001 |
| CVE-2001-0408 | Not scored | vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes. | Sep 18, 2001 |
| CVE-2001-0405 | Not scored | ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and… | Sep 18, 2001 |
| CVE-2001-0402 | Not scored | IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to… | Sep 18, 2001 |
| CVE-2001-0388 | Not scored | time server daemon timed allows remote attackers to cause a denial of service via malformed packets. | Sep 18, 2001 |
| CVE-2001-0387 | Not scored | Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument. | Sep 18, 2001 |
| CVE-2001-0383 | Not scored | banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication. | Sep 18, 2001 |
| CVE-2001-0379 | Not scored | Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights. | Sep 18, 2001 |
| CVE-2001-0378 | Not scored | readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files. | Sep 18, 2001 |
| CVE-2001-0377 | Not scored | Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space followed by a large string. | Sep 18, 2001 |
| CVE-2001-0368 | Not scored | Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. (dot dot) attack. | Sep 18, 2001 |
| CVE-2001-0361 | Not scored | Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher… | Sep 18, 2001 |
| CVE-2001-0353 | Not scored | Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a "transfer job" routine. | Sep 18, 2001 |
| CVE-2001-0351 | Not scored | Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service. | Sep 18, 2001 |
| CVE-2001-0348 | Not scored | Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace. | Sep 18, 2001 |
| CVE-2001-0347 | Not scored | Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed… | Sep 18, 2001 |
| CVE-2001-0346 | Not scored | Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them. | Sep 18, 2001 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.