CVEs published in December 2001
222 vulnerabilities, 16 critical, 0 exploited.
- xitamiXitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file,...9.8 Critical
- sun jre, sdk, apple mac os runtime for java +1 more +3 moreJava Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access...7.5 High
- sun management\+centersmcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete...2.1 Low
- caldera unixware, openunix +1 moreBuffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to...7.2 High
- bea tuxedoThe Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services...4.6 Medium
- ipswitch imailIpswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and...7.5 High
- abe timmerman zml.cgiDirectory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via...5.0 Medium
- daydream bbsFormat string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via...7.5 High
- van dyke technologies securecrtBuffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote...7.5 High
- cisco ubr920, ubr924, ubr925 +2 moreCisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications ...6.4 Medium
- daydream bbsBuffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute...7.5 High
- matrixs cgi vault last linesMatrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell...7.5 High
- matrixs cgi vault last linesDirectory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to...5.0 Medium
- cherokee httpdCherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80,...7.5 High
- cherokee httpdDirectory traversal vulnerability in Cherokee Web Server allows remote attackers to read...7.8 High
- total pc solutions php rocket add-inDirectory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for...5.0 Medium
- delegateCross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands...7.5 High
- namazuCross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute...7.5 High
- alessandro rubini gpmFormat string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain...7.2 High
- hughes msqlHughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service...2.1 Low
- elsa lancom 1100 officeThe web administration server for ELSA Lancom 1100 Office does not require authentication, which...10.0 High
- namazuCross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute...7.5 High
- adcycleAdCycle 1.17 and earlier allow remote attackers to modify SQL queries, which are not properly...5.0 Medium
- les vanbrunt adrotate proget_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the...7.5 High
- ibm aixUnknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows...10.0 High
- d-link dwl-1000apD-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point uses a default SNMP community...5.0 Medium
- d-link dwl-1000apD-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative...10.0 High
- oracle application serverDirectory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server...5.0 Medium
- oracle application serverBuffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers...7.5 High
- atmel firmware, linksys wap11, netgear me102 +2 moreAtmel Firmware 1.3 Wireless Access Point (WAP) allows remote attackers to cause a denial of...5.0 Medium
- debian linuxBuffer overflow in glob function of glibc allows attackers to cause a denial of service (crash)...4.6 Medium
- gnu mailmanCross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to...5.1 Medium
- ian lance taylor taylor uucpuuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local...7.2 High
- openbsd openssh, redhat linux +1 moreOpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment...7.2 High
- caldera openlinux eserver, openlinux workstation, redhat linux +1 more +3 moreFormat string vulnerability in the default logging callback function _sasl_syslog in common.c in...7.5 High
- microsoft internet explorerMicrosoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial...5.0 Medium
- microsoft ieMicrosoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of...2.1 Low
- michael baumer pfingerFormat string vulnerability in PFinger 0.7.5 through 0.7.7 allows remote attackers to execute...7.5 High
- microsoft sql server, windows 2000, windows nt +1 more +3 moreFormat string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows...5.0 Medium
- microsoft windows 98, windows 98se, windows me +1 more +3 moreUniversal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a...5.0 Medium
- microsoft windows 98, windows 98se, windows me +1 more +3 moreBuffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote...7.5 High
- microsoft sql serverBuffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server...7.5 High
- university of cambridge exim, redhat linux +1 moreExim 3.22 and earlier, in some configurations, does not properly verify the local part of an...7.5 High
- datawizard ftpxqThe default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and...6.4 Medium
- aktivateCross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to...5.0 Medium
- magic edeveloperMagic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary...4.6 Medium
- timecop wmcube gdkBuffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code...7.2 High
- microsoft windows xpMicrosoft Windows XP allows local users to bypass a locked screen and run certain programs that...7.2 High
- steve kneizys agora.cgiCross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is...7.5 High
- webminDirectory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to...10.0 High
- Show moreLoading…