CVEs published in November 2001
94 vulnerabilities, 6 critical, 0 exploited.
- apache tomcatApache Tomcat allows webmasters to insert xss into error messages5.1 Medium
- grant averett ceberus ftp serverCerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a...5.0 Medium
- aclogic cesarftpBuffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via...7.5 High
- ibm websphere application serverCross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to...7.5 High
- dcscripts dcshopThe default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory,...5.0 Medium
- gaztek ghttpBuffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long...7.5 High
- marty bochane mdbmsA buffer overflow the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to...7.5 High
- hp hp-uxVulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote...10.0 High
- hp hp-uxVulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when...2.1 Low
- yngve svendsen gnatswebgnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary...10.0 High
- microsoft internet explorerInternet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web...2.6 Low
- sgi irixlpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via...10.0 High
- sgi irixBuffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute...10.0 High
- microsoft windows 98, windows 98se, windows me +1 more +3 moreUniversal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a...5.0 Medium
- ibm aixBuffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1...10.0 High
- netscape communicatorNetscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain...2.1 Low
- berkeley pmakeBuffer overflow in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain...7.2 High
- berkeley pmakeFormat string vulnerability in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local...7.2 High
- linux kernel, suse linux +1 moreLinux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a...2.1 Low
- francisco burzi php-nuke, postnuke software foundation postnuke +1 morePHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could...7.5 High
- emc networkerLegato Networker before 6.1 allows remote attackers to bypass access restrictions and gain...7.5 High
- microsoft windows xpBuffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote...7.5 High
- citrix metaframeCITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead...7.5 High
- microsoft internet explorerInternet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT ...5.0 Medium
- intel high-bandwidth digital content protectionLinear key exchange process in High-bandwidth Digital Content Protection (HDCP) System allows...7.5 High
- microsoft internet information servicesMicrosoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that...7.5 High
- solarwinds serv-u file serverThe remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext...7.5 High
- hypermail development hypermailHypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an...7.5 High
- gnu gzipBuffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code...7.5 High
- francisco burzi galleryDirectory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers...5.0 Medium
- phpnuke php-nuke, rick fournier network tools +1 moreNetwork Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via...7.5 High
- opera software web browserOpera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and...5.0 Medium
- infopop ultimate bulletin boardCross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows...5.0 Medium
- cisco catalyst 2900xl, catalyst 2948g-l3, catalyst 2950 +8 more +10 moreMultiple Cisco networking products allow remote attackers to cause a denial of service on the...5.0 Medium
- microsoft internet explorerInternet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs...7.5 High
- microsoft internet explorerInternet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via...6.4 Medium
- openbsdvi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as...4.6 Medium
- acme mini httpdAcme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document...5.0 Medium
- acme thttpdAcme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers...5.0 Medium
- midnight commander commanderBuffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of...4.6 Medium
- wietse venema postfixVulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the...5.0 Medium
- netfilter iptablesiptables before 1.2.4 does not accurately convert rate limits that are specified on the command...5.0 Medium
- netfilter iptablesiptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "...2.1 Low
- progressFormat string vulnerabilities in (1) _probuild, (2) _dbutil, (3) _mprosrv, (4) _mprshut, (5)...7.2 High