CVE Notifier

CVE-2001-1361 CWE-? N/A

CVE-2001-1361

Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links.

MITRE n/a:n/a 11 Jun 2002

CVE-2001-1360 CWE-? N/A

CVE-2001-1360

Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned.

MITRE n/a:n/a 11 Jun 2002

CVE-2001-1358 CWE-? N/A

CVE-2001-1358

Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library file in the L (localization) parameter.

MITRE n/a:n/a 11 Jun 2002

CVE-2001-1357 CWE-? N/A

CVE-2001-1357

Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables.

MITRE n/a:n/a 11 Jun 2002

CVE-2001-1356 CWE-? N/A

CVE-2001-1356

NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administra…

MITRE n/a:n/a 11 Jun 2002

CVE-2001-1355 CWE-? N/A

CVE-2001-1355

Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -d…

MITRE n/a:n/a 11 Jun 2002

CVE-2001-1354 CWE-? N/A

CVE-2001-1354

NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different passwo…

MITRE n/a:n/a 11 Jun 2002

CVE-2001-1353 CWE-? N/A

CVE-2001-1353

ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled.

MITRE n/a:n/a 05 Jun 2002

CVE-2002-0388 CWE-? N/A

CVE-2002-0388

Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.

MITRE n/a:n/a 31 May 2002

CVE-2002-0360 CWE-? N/A

CVE-2002-0360

Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program.

MITRE n/a:n/a 21 May 2002

CVE-2002-0189 CWE-? N/A

CVE-2002-0189

Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the "Cross-Site Scripting in Local…

MITRE n/a:n/a 17 May 2002

CVE-2002-0375 CWE-? N/A

CVE-2002-0375

Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript via a URL with the script in the HTNAME parameter.

MITRE n/a:n/a 09 May 2002