CVE List

Id CVE No. Status Description Phase Votes Comments Actions
3729  CVE-2001-0923  Candidate  RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.  Proposed (20020131)  ACCEPT(2) Baker, Frech | NOOP(4) Armstrong, Cole, Foat, Wall    View
3732  CVE-2001-0926  Candidate  SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request"s body has an #include statement.  Proposed (20020131)  ACCEPT(2) Baker, Frech | NOOP(4) Armstrong, Cole, Foat, Wall    View
2843  CVE-2001-0022  Candidate  simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter.  Proposed (20010202)  ACCEPT(2) Baker, Frech | NOOP(3) Cole, Wall, Ziese    View
2852  CVE-2001-0031  Candidate  BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a .JSP file name that does not exist.  Proposed (20010202)  ACCEPT(2) Baker, Frech | NOOP(3) Cole, Wall, Ziese    View
2853  CVE-2001-0032  Candidate  Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privileges via malicious format string specifiers in a URL.  Proposed (20010202)  ACCEPT(2) Baker, Frech | NOOP(3) Cole, Wall, Ziese    View

Page 20157 of 20943, showing 5 records out of 104715 total, starting on record 100781, ending on 100785

Actions