Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2001
December

CVEs published in December 2001

222 vulnerabilities, 16 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

open source development network slashcodeSlashcode 2.0 creates new accounts with an 8-character random password, which could allow local...CVE-2001-15354.6 MediumDecember 31, 2001
apache http servermod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable...CVE-2001-15342.1 LowDecember 31, 2001
microsoft isa server** DISPUTED * Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote...CVE-2001-1533DisputedEPSS 18.0%5.0 MediumDecember 31, 2001
web crossing webxWebX stores authentication information in the HTTP_REFERER variable, which is included in URL...CVE-2001-15325.0 MediumDecember 31, 2001
apple claris emailerBuffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and...CVE-2001-15317.5 HighDecember 31, 2001
webminrun.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which...CVE-2001-15304.6 MediumDecember 31, 2001
ibm aixBuffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized...CVE-2001-15297.5 HighDecember 31, 2001
amtote homebetAmTote International homebet program returns different error messages when invalid account...CVE-2001-1528Public exploit5.0 MediumDecember 31, 2001
easyscripts easynewseasyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which...CVE-2001-15272.1 LowDecember 31, 2001
easyscripts easynewsCross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and...CVE-2001-15264.3 MediumDecember 31, 2001
easyscripts easynewsDirectory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows...CVE-2001-1525Public exploit5.0 MediumDecember 31, 2001
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to...CVE-2001-1524Public exploit4.3 MediumDecember 31, 2001
dmozgatewayCross-site scripting (XSS) vulnerability in the DMOZGateway module for PHP-Nuke allows remote...CVE-2001-15234.3 MediumDecember 31, 2001
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote...CVE-2001-15224.3 MediumDecember 31, 2001
postnuke software foundation postnukeCross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to...CVE-2001-15212.6 LowDecember 31, 2001
intel xircom rex 6000Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor,...CVE-2001-15202.1 LowDecember 31, 2001
microsoft windows 2000** DISPUTED ** RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named...CVE-2001-1519Public exploitDisputed3.6 LowDecember 31, 2001
microsoft windows 2000RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local...CVE-2001-1518Public exploit2.1 LowDecember 31, 2001
microsoft windows 2000** DISPUTED ** RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in...CVE-2001-1517Disputed2.1 LowDecember 31, 2001
hans wolters phpreviewCross-site scripting (XSS) vulnerability in phpReview 0.9.0 rc2 and earlier allows remote...CVE-2001-15164.3 MediumDecember 31, 2001
microsoft windows 2000Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories...CVE-2001-15157.5 HighDecember 31, 2001
macromedia coldfusionColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to ...CVE-2001-151410.0 HighDecember 31, 2001
macromedia jrunMacromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs...CVE-2001-15137.5 HighDecember 31, 2001
macromedia jrunUnknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF...CVE-2001-15126.4 MediumDecember 31, 2001
macromedia jrunJRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read...CVE-2001-15115.0 MediumDecember 31, 2001
macromedia jrunAllaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS...CVE-2001-15105.0 MediumDecember 31, 2001
hp hp-uxgeteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's...CVE-2001-15094.6 MediumDecember 31, 2001
sco openserverBuffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute...CVE-2001-15084.6 MediumDecember 31, 2001
openbsd opensshOpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could...CVE-2001-1507Fix available7.5 HighDecember 31, 2001
hp secure osUnknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux...CVE-2001-15064.6 MediumDecember 31, 2001
tinctinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing...CVE-2001-1505Fix available5.0 MediumDecember 31, 2001
ibm lotus notesLotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes...CVE-2001-15047.5 HighDecember 31, 2001
sun solaris, sunos +1 moreThe finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows...CVE-2001-15032.1 LowDecember 31, 2001
mountain network systems webcartwebcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary...CVE-2001-1502Public exploit7.5 HighDecember 31, 2001
proftpd project proftpdThe glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to...CVE-2001-1501Public exploitEPSS 38.4%5.0 MediumDecember 31, 2001
proftpd project proftpdProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved...CVE-2001-1500EPSS 12.4%7.5 HighDecember 31, 2001
checkpoint vpn-1Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid...CVE-2001-14995.0 MediumDecember 31, 2001
markus kliegl mod bfBuffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.CVE-2001-14987.2 HighDecember 31, 2001
microsoft ie, internet explorer +1 moreMicrosoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between...CVE-2001-14972.1 LowDecember 31, 2001
acme thttpdOff-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows...CVE-2001-14969.8 CriticalDecember 31, 2001
freshmeat network query tool, network query tool phpnuke +1 morenetwork_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands...CVE-2001-14957.5 HighDecember 31, 2001
kernel util-linux, avaya cvlan, integrated management suit +4 more +6 morescript command in the util-linux package before 2.11n allows local users to overwrite arbitrary...CVE-2001-1494Fix available5.5 MediumDecember 31, 2001
opera software web browserOpera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak)...CVE-2001-1491Public exploit5.0 MediumDecember 31, 2001
mozillaMozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory...CVE-2001-1490Public exploit5.0 MediumDecember 31, 2001
microsoft ieMicrosoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU...CVE-2001-1489Public exploitEPSS 17.7%5.0 MediumDecember 31, 2001
open projects network ircdOpen Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double...CVE-2001-14885.0 MediumDecember 31, 2001
qualcomm qpopperpopauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary...CVE-2001-1487Public exploit4.6 MediumDecember 31, 2001
alcatel adsl modem 1000, speed touch adsl modem +1 moreAlcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to...CVE-2001-14847.5 HighDecember 31, 2001
nrl.navy one-time passwords in everythingOne-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine...CVE-2001-14835.0 MediumDecember 31, 2001
phpbb group phpbbSQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to...CVE-2001-14827.5 HighDecember 31, 2001
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open