Vulnerabilities (CVE)

Filter

128519 total CVE
CVE Vendors Products Updated CVSS
CVE-2000-1211 1 Zope 1 Zope 2008-09-05 7.5
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
CVE-2000-1204 1 Apache 1 Http Server 2008-09-05 5.0
Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if the cgi-bin directory is under the document root.
CVE-2000-1201 1 Checkpoint 1 Firewall-1 2008-09-05 5.0
Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.
CVE-2000-1194 1 Argosoft 1 Ftp Server 2008-09-05 7.5
Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands.
CVE-2000-1185 1 Itserv Incorporated 1 Ridewaypn 2008-09-05 5.0
The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connections that contain malformed requests.
CVE-2000-1177 1 Bb4 1 Big Brother Network Monitor 2008-09-05 5.0
bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifying the target file in the HISTFILE parameter.
CVE-2000-1176 1 Yabb 1 Yabb 2008-09-05 7.5
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.
CVE-2000-1175 1 Jan Hubicka 1 Koules 2008-09-05 7.2
Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.
CVE-2000-1173 1 Microsys 1 Cyberpatrol 2008-09-05 5.0
Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive...
CVE-2000-1172 1 Rob Flynn 1 Gaim 2008-09-05 10.0
Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary commands via a long HTML tag.
CVE-2000-1161 1 Adcycle 1 Adcycle 2008-09-05 7.5
The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the program and view passwords or delete databases.
CVE-2000-1160 1 Network Associates 1 Sniffer Agent 2008-09-05 5.0
NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests.
CVE-2000-1159 1 Network Associates 1 Sniffer Agent 2008-09-05 7.5
NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands.
CVE-2000-1158 1 Network Associates 1 Sniffer Agent 2008-09-05 7.5
NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords.
CVE-2000-1157 1 Network Associates 1 Sniffer Agent 2008-09-05 10.0
Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name.
CVE-2000-1152 1 Be 1 Beos 2008-09-05 5.0
Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
CVE-2000-1130 1 Network Associates 1 Webshield Smtp 2008-09-05 7.5
McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment.
CVE-2000-1129 1 Network Associates 1 Webshield Smtp 2008-09-05 5.0
McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.
CVE-2000-1128 1 Mcafee 1 Virusscan 2008-09-05 4.6
The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows local users to place a Trojan horse "common.exe" program in the C:\Program Files directory.
CVE-2000-1127 1 Hp 1 Hp-ux 2008-09-05 3.6
registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and...