Total
29612 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2001-0088 | 1 Jason Hines | 1 Phpweblog | 2025-04-03 | N/A |
common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character, allowing remote attackers to easily guess the SiteKey and gain administrative privileges to phpWebLog. | ||||
CVE-2001-0090 | 1 Microsoft | 1 Internet Explorer | 2025-04-03 | N/A |
The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the user, which could allow an attacker to execute arbitrary ActiveX controls, aka the "Browser Print Template" vulnerability. | ||||
CVE-2001-0091 | 1 Microsoft | 1 Internet Explorer | 2025-04-03 | N/A |
The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka a variant of the "Scriptlet Rendering" vulnerability. | ||||
CVE-2001-0092 | 1 Microsoft | 1 Internet Explorer | 2025-04-03 | N/A |
A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a new variant of the "Frame Domain Verification" vulnerability. | ||||
CVE-2001-0135 | 1 Ultrascripts | 1 Ultraboard | 2025-04-03 | N/A |
The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeable permissions, which could allow local users to modify sensitive information or possibly insert and execute CGI programs. | ||||
CVE-2001-0137 | 1 Microsoft | 1 Windows Media Player | 2025-04-03 | N/A |
Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability. | ||||
CVE-2001-0138 | 4 Debian, Immunix, Mandrakesoft and 1 more | 5 Debian Linux, Immunix, Mandrake Linux and 2 more | 2025-04-03 | N/A |
privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack. | ||||
CVE-2001-0139 | 5 Caldera, Debian, Immunix and 2 more | 7 Openlinux Desktop, Openlinux Edesktop, Openlinux Eserver and 4 more | 2025-04-03 | N/A |
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations. | ||||
CVE-2001-0140 | 3 Immunix, Mandrakesoft, Redhat | 3 Immunix, Mandrake Linux, Linux | 2025-04-03 | N/A |
arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations. | ||||
CVE-2001-0141 | 2 Gert Doering, Redhat | 2 Mgetty, Linux | 2025-04-03 | N/A |
mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations. | ||||
CVE-2004-0092 | 1 Apple | 1 Mac Os X | 2025-04-03 | N/A |
Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact. | ||||
CVE-2001-0184 | 1 Eeye Digital Security | 1 Iris | 2025-04-03 | N/A |
eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet. | ||||
CVE-2001-0185 | 1 Netopia | 1 R9100 Router | 2025-04-03 | N/A |
Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to the router's IP address, which causes a crash. | ||||
CVE-2001-0187 | 1 Washington University | 1 Wu-ftpd | 2025-04-03 | N/A |
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment. | ||||
CVE-2001-0188 | 1 Goodtech | 2 Ftp Server 95 98, Ftp Server Nt 2000 | 2025-04-03 | N/A |
GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash. | ||||
CVE-2001-0189 | 1 Intranet-server | 1 Localweb2000 | 2025-04-03 | N/A |
Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request. | ||||
CVE-2001-0190 | 1 Sun | 2 Solaris, Sunos | 2025-04-03 | N/A |
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0). | ||||
CVE-2001-0192 | 1 Davide Libenzi | 1 Xmail | 2025-04-03 | N/A |
Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions. | ||||
CVE-2001-0265 | 1 Pgp | 1 Pgp | 2025-04-03 | N/A |
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file. | ||||
CVE-2001-0266 | 1 Hp | 1 Hp-ux | 2025-04-03 | N/A |
Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges. |