Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
404,969 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2001-0279 | Not scored | Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges. | May 7, 2001 |
| CVE-2001-0278 | Not scored | Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges. | May 7, 2001 |
| CVE-2001-0274 | Not scored | kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. | May 7, 2001 |
| CVE-2001-0268 | Not scored | The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment… | May 7, 2001 |
| CVE-2001-0267 | Not scored | NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges. | May 7, 2001 |
| CVE-2001-0266 | Not scored | Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges. | May 7, 2001 |
| CVE-2001-0260 | Not scored | Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute arbitrary code via a long "RCPT TO" command. | May 7, 2001 |
| CVE-2001-0259 | Not scored | ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file. | May 7, 2001 |
| CVE-2001-0234 | Not scored | NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter. | May 7, 2001 |
| CVE-2001-0233 | Not scored | Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field. | May 7, 2001 |
| CVE-2001-0230 | Not scored | Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain privileges. | May 7, 2001 |
| CVE-2001-0222 | Not scored | webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack. | May 7, 2001 |
| CVE-2001-0221 | Not scored | Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges. | May 7, 2001 |
| CVE-2001-0219 | Not scored | Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service. | May 7, 2001 |
| CVE-2001-0218 | Not scored | Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands. | May 7, 2001 |
| CVE-2001-0197 | Not scored | Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands. | May 7, 2001 |
| CVE-2001-0196 | Not scored | inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group. | May 7, 2001 |
| CVE-2001-0195 | Not scored | sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking. | May 7, 2001 |
| CVE-2001-0194 | Not scored | Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line. | May 7, 2001 |
| CVE-2001-0193 | Not scored | Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter. | May 7, 2001 |
| CVE-2001-0191 | Not scored | gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force… | May 7, 2001 |
| CVE-2001-0190 | Not scored | Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0). | May 7, 2001 |
| CVE-2001-0187 | Not scored | Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment. | May 7, 2001 |
| CVE-2001-0185 | Not scored | Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to the router's IP address, which causes a crash. | May 7, 2001 |
| CVE-2001-0183 | Not scored | ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection. | May 7, 2001 |
| CVE-2001-0179 | Not scored | Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "." | May 7, 2001 |
| CVE-2001-0178 | Not scored | kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges. | May 7, 2001 |
| CVE-2001-0170 | Not scored | glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files. | May 7, 2001 |
| CVE-2001-0169 | Not scored | When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a… | May 7, 2001 |
| CVE-2001-0166 | Not scored | Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file. | May 7, 2001 |
| CVE-2001-0165 | Not scored | Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument. | May 7, 2001 |
| CVE-2001-0157 | Not scored | Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled. | May 7, 2001 |
| CVE-2001-0154 | Not scored | HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly. | May 7, 2001 |
| CVE-2001-0153 | Not scored | Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands. | May 7, 2001 |
| CVE-2001-0152 | Not scored | The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders. | May 7, 2001 |
| CVE-2001-0151 | Not scored | IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests. | May 7, 2001 |
| CVE-2001-0150 | Not scored | Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary commands if the IE client is using the Telnet client… | May 7, 2001 |
| CVE-2001-0149 | Not scored | Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object. | May 7, 2001 |
| CVE-2001-0148 | Not scored | The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability. | May 7, 2001 |
| CVE-2001-0147 | Not scored | Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly handled during the detailed view of event records. | May 7, 2001 |
| CVE-2001-0144 | Not scored | CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow. | May 7, 2001 |
| CVE-2001-0143 | Not scored | vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack. | May 7, 2001 |
| CVE-2001-0142 | Not scored | squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations. | May 7, 2001 |
| CVE-2001-0141 | Not scored | mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations. | May 7, 2001 |
| CVE-2001-0140 | Not scored | arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations. | May 7, 2001 |
| CVE-2001-0139 | Not scored | inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations. | May 7, 2001 |
| CVE-2001-0138 | Not scored | privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack. | May 7, 2001 |
| CVE-2001-0137 | Not scored | Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka… | May 7, 2001 |
| CVE-2001-0130 | Not scored | Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed font size specifier. | May 7, 2001 |
| CVE-2001-0129 | Not scored | Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long connect request. | May 7, 2001 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.