Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 79

Export CSV
CVE-2000-1211

security flaw

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Redhat Zope
Products
Powertools Zope
CVE-2000-1212

security flaw

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Vendors
Redhat Zope
Products
Powertools Zope
CVE-2001-0191

security flaw

gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.

CVSS 2.0 · 10.0 Critical EPSS 5.5% KEV · Not listed
Vendors
Andynorman Gnu Redhat
Products
Gnuserv Xemacs Linux and 1 more
CVE-2001-0197

security flaw

Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.

CVSS 2.0 · 10.0 Critical EPSS 13.1% KEV · Not listed
Vendors
Icecast Redhat
Products
Icecast Linux Powertools
CVE-2001-0233

security flaw

Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.

CVSS 2.0 · 10.0 Critical EPSS 14.6% KEV · Not listed
Vendors
Debian Matthew Smith Redhat
Products
Debian Linux Micq Linux and 1 more
CVE-2001-0439

security flaw

licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

CVSS 2.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Conectiva Freebsd Licq and 2 more
Products
Linux Freebsd Licq and 4 more
CVE-2001-0556

security flaw

The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or portions of a file.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Nedit Redhat
Products
Nedit Powertools
CVE-2001-0567

security flaw

Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mappings for objects and methods in the ZClass.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Zope
Products
Powertools Zope
CVE-2001-0568

security flaw

Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter ZClasses class attributes.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Zope
Products
Powertools Zope
CVE-2001-0569

security flaw

Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) ObjectManager, (2) PropertyManager, and (3) PropertySheet.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Zope
Products
Powertools Zope
CVE-2001-0690

security flaw

Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers.

CVSS 2.0 · 7.5 High EPSS 11.9% KEV · Not listed
Vendors
Conectiva Debian Redhat and 1 more
Products
Linux Debian Linux Linux and 2 more
CVE-2001-0784

security flaw

Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack using encoded URL characters.

CVSS 2.0 · 5.0 Medium EPSS 9.4% KEV · Not listed
Vendors
Icecast Redhat
Products
Icecast Powertools
CVE-2001-0835

security flaw

Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.

CVSS 2.0 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Bradford Barrett Redhat
Products
Webalizer Linux Powertools
CVE-2001-0884

security flaw

Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users.

CVSS 2.0 · 5.1 Medium EPSS 1.9% KEV · Not listed
Vendors
Gnu Redhat
Products
Mailman Linux Powertools and 1 more