CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001 (CVSS score >= 3)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
301 CVE-2001-1213 2001-12-18 2008-09-10
6.4
 None Remote Low Not required Partial Partial None
The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder.
302 CVE-2001-1212 XSS 2001-12-18 2008-09-10
5.0
 None Remote Low Not required None Partial None
Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter.
303 CVE-2001-1211 2001-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain.
304 CVE-2001-1210 2001-12-30 2008-09-10
6.4
 None Remote Low Not required Partial Partial None
Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.
305 CVE-2001-1209 Dir. Trav. 2001-12-31 2009-04-30
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
306 CVE-2001-1208 Exec Code 2001-12-31 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code.
307 CVE-2001-1207 Exec Code Overflow 2001-12-30 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the control codes (1) ~#MC, (2) ~#TF, or (3) ~#RA.
308 CVE-2001-1206 Exec Code 2001-12-30 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.
309 CVE-2001-1205 22 Dir. Trav. 2001-12-30 2016-10-18
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable.
310 CVE-2001-1204 Dir. Trav. 2001-12-28 2017-07-11
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for FrontPage 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.
311 CVE-2001-1203 +Priv 2001-12-27 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges.
312 CVE-2001-1202 Exec Code XSS 2001-12-28 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on other clients via a URL that generates an error.
313 CVE-2001-1201 Exec Code Overflow 2001-12-17 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file.
314 CVE-2001-1200 Bypass 2001-12-17 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys.
315 CVE-2001-1199 XSS 2001-12-17 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.
316 CVE-2001-1198 +Priv 2001-12-15 2017-10-11
7.2
 None Local Low Not required Complete Complete Complete
RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option.
317 CVE-2001-1197 2001-12-14 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
klprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filter temporary file.
318 CVE-2001-1196 +Priv Dir. Trav. 2001-12-17 2016-10-18
10.0
 None Remote Low Not required Complete Complete Complete
Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.
319 CVE-2001-1195 +Priv 2001-12-15 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges.
320 CVE-2001-1194 DoS 2001-12-14 2017-07-11
5.0
 None Remote Low Not required None None Partial
Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length less than actual packet size, or (2) fragmented packets whose size exceeds 64 kilobytes after reassembly.
321 CVE-2001-1193 Dir. Trav. 2001-12-13 2017-10-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... (modified dot dot) in the CWD command.
322 CVE-2001-1192 Exec Code 2001-12-13 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client.
323 CVE-2001-1191 DoS 2001-12-11 2008-09-05
5.0
 None Remote Low Not required None None Partial
WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e.
324 CVE-2001-1190 2001-12-12 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended.
325 CVE-2001-1189 2001-12-13 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.
326 CVE-2001-1188 2001-12-11 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields.
327 CVE-2001-1187 Exec Code 2001-12-11 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.
328 CVE-2001-1186 DoS 2001-12-11 2018-10-30
5.0
 None Remote Low Not required None None Partial
Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.
329 CVE-2001-1185 +Priv 2001-12-10 2008-09-05
6.2
 None Local High Not required Complete Complete Complete
Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges.
330 CVE-2001-1184 DoS 2001-12-08 2008-09-05
5.0
 None Remote Low Not required None None Partial
wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection attempt to that port and all ports below 1024, and (2) in 2.21.00, a port number of 1024.
331 CVE-2001-1183 DoS 2001-07-12 2017-10-10
5.0
 None Remote Low Not required None None Partial
PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet.
332 CVE-2001-1182 +Priv Bypass 2001-07-17 2017-10-11
7.2
 None Local Low Not required Complete Complete Complete
Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.
333 CVE-2001-1181 +Priv 2001-07-16 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges.
334 CVE-2001-1180 +Priv 2001-07-10 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child.
335 CVE-2001-1179 +Priv 2001-07-17 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.
336 CVE-2001-1178 Overflow +Priv 2001-07-11 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.
337 CVE-2001-1177 2001-07-17 2017-10-10
6.2
 None Local High Not required Complete Complete Complete
ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
338 CVE-2001-1176 Exec Code 2001-07-12 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.
339 CVE-2001-1173 +Priv 2001-07-26 2008-09-10
7.2
 None Local Low Not required Complete Complete Complete
Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.
340 CVE-2001-1172 2001-07-19 2017-10-10
4.6
 None Local Low Not required Partial Partial Partial
OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file.
341 CVE-2001-1170 2001-09-29 2017-12-19
5.0
 None Remote Low Not required Partial None None
AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers.
342 CVE-2001-1169 +Priv 2001-09-02 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo.
343 CVE-2001-1168 Dir. Trav. 2001-08-29 2008-09-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter.
344 CVE-2001-1166 2001-08-21 2008-09-05
5.0
 None Remote Low Not required Partial None None
linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a privileged process to read restricted memory from that process.
345 CVE-2001-1164 Exec Code Overflow 2001-06-27 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt.
346 CVE-2001-1163 Exec Code Overflow 2001-06-16 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.
347 CVE-2001-1162 Dir. Trav. 2001-06-23 2017-10-10
10.0
 None Remote Low Not required Complete Complete Complete
Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.
348 CVE-2001-1161 XSS 2001-07-02 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that ends in Javascript, which generates an error message that does not quote the resulting script.
349 CVE-2001-1160 Exec Code 2001-06-18 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.
350 CVE-2001-1159 Exec Code 2001-07-02 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to (1) view sensitive files via the config_php and data_dir options, and (2) execute arbitrary code by using options_order.php to upload a message that could be interpreted as PHP.
Total number of vulnerabilities : 1506   Page : 1 2 3 4 5 6 7 (This Page)8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.