Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,100 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2001-0338 | Not scored | Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled, which could allow remote attackers to spoof trusted web sites, aka the "Server certificate… | Sep 18, 2001 |
| CVE-2001-0336 | Not scored | The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed request. | Sep 18, 2001 |
| CVE-2001-0335 | Not scored | FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters. | Sep 18, 2001 |
| CVE-2001-0334 | Not scored | FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded. | Sep 18, 2001 |
| CVE-2001-0333 | Not scored | Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice. | Sep 18, 2001 |
| CVE-2001-0331 | Not scored | Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands. | Sep 18, 2001 |
| CVE-2001-0330 | Not scored | Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl file, which is normally returned by the web server without being executed. | Sep 18, 2001 |
| CVE-2001-0245 | Not scored | Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting"… | Sep 18, 2001 |
| CVE-2001-0244 | Not scored | Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter. | Sep 18, 2001 |
| CVE-2001-0243 | Not scored | Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone… | Sep 18, 2001 |
| CVE-2001-0241 | Not scored | Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0. | Sep 18, 2001 |
| CVE-2001-0240 | Not scored | Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro. | Sep 18, 2001 |
| CVE-2001-0239 | Not scored | Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type. | Sep 18, 2001 |
| CVE-2001-0238 | Not scored | Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests. | Sep 18, 2001 |
| CVE-2001-0237 | Not scored | Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data. | Sep 18, 2001 |
| CVE-2001-0235 | Not scored | Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while crontab is running. | Sep 18, 2001 |
| CVE-2001-0215 | Not scored | ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte. | Sep 18, 2001 |
| CVE-2001-0207 | Not scored | Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup using the gethostbyaddr function. | Sep 18, 2001 |
| CVE-2001-0203 | Not scored | Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a file that contains hashed passphrases, and using the hashes during authentication. | Sep 18, 2001 |
| CVE-2001-0189 | Not scored | Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request. | Sep 18, 2001 |
| CVE-2001-0182 | Not scored | FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning… | Sep 18, 2001 |
| CVE-2001-0176 | Not scored | The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges. | Sep 18, 2001 |
| CVE-2001-0175 | Not scored | The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs. | Sep 18, 2001 |
| CVE-2001-0174 | Not scored | Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a large "To" address. | Sep 18, 2001 |
| CVE-2001-0164 | Not scored | Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field. | Sep 18, 2001 |
| CVE-2001-0155 | Not scored | Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name that contains format string specifiers. | Sep 18, 2001 |
| CVE-2001-0136 | Not scored | Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed. | Sep 18, 2001 |
| CVE-2001-0121 | Not scored | ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system crash) via a long string to port 12002. | Sep 18, 2001 |
| CVE-2001-0108 | Not scored | PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested. | Sep 18, 2001 |
| CVE-2001-0095 | Not scored | catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file. | Sep 18, 2001 |
| CVE-2001-0078 | Not scored | in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS. | Sep 18, 2001 |
| CVE-2001-0077 | Not scored | The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and cluster configurations. | Sep 18, 2001 |
| CVE-2001-0020 | Not scored | Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot) attack. | Sep 18, 2001 |
| CVE-2001-0004 | Not scored | IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the "File… | Sep 18, 2001 |
| CVE-2000-1047 | Not scored | Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command. | Sep 18, 2001 |
| CVE-2000-0945 | Not scored | The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory. | Sep 18, 2001 |
| CVE-2000-0897 | Not scored | Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after… | Sep 18, 2001 |
| CVE-2000-0877 | Not scored | mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailForm then sends to the attacker. | Sep 18, 2001 |
| CVE-2000-0799 | Not scored | inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file. | Sep 18, 2001 |
| CVE-2000-0620 | Not scored | libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop. | Sep 18, 2001 |
| CVE-2000-0576 | Not scored | Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL. | Sep 18, 2001 |
| CVE-2000-0569 | Not scored | Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface. | Sep 18, 2001 |
| CVE-2000-0568 | Not scored | Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to modify default routes. | Sep 18, 2001 |
| CVE-2000-0243 | Not scored | AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin. | Sep 18, 2001 |
| CVE-1999-0756 | Not scored | ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility. | Sep 18, 2001 |
| CVE-2001-0711 | Not scored | Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP community string. | Sep 12, 2001 |
| CVE-2001-0679 | Not scored | A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server. | Sep 12, 2001 |
| CVE-2001-0647 | Not scored | Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version. | Sep 12, 2001 |
| CVE-2000-1202 | Not scored | ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse… | Sep 12, 2001 |
| CVE-2000-1201 | Not scored | Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264. | Sep 12, 2001 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.