|
288851
|
- |
|
alchemy_lab dek_software
|
alchemy_eye alchemy_network_monitor
|
HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potential…
|
NVD-CWE-Other
|
CVE-2001-0870
|
2017-12-19 11:29 |
2001-12-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288852
|
- |
|
alchemy_lab dek_software
|
alchemy_eye alchemy_network_monitor
|
Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions …
|
NVD-CWE-Other
|
CVE-2001-0871
|
2017-12-19 11:29 |
2001-12-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288853
|
- |
|
citrix
|
metaframe
|
CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. t…
|
NVD-CWE-Other
|
CVE-2001-0908
|
2017-12-19 11:29 |
2001-11-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288854
|
- |
|
emc
|
networker
|
Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP address and connecting to Net…
|
NVD-CWE-Other
|
CVE-2001-0910
|
2017-12-19 11:29 |
2001-11-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288855
|
- |
|
francisco_burzi postnuke_software_foundation
|
php-nuke postnuke
|
PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it.
|
NVD-CWE-Other
|
CVE-2001-0911
|
2017-12-19 11:29 |
2001-11-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288856
|
- |
|
sun
|
netdynamics
|
ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables f…
|
NVD-CWE-Other
|
CVE-2001-0922
|
2017-12-19 11:29 |
2001-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288857
|
- |
|
redhat
|
redhat_package_manager
|
RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.
|
NVD-CWE-Other
|
CVE-2001-0923
|
2017-12-19 11:29 |
2001-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288858
|
- |
|
ibm
|
informix_web_datablade
|
Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter.
|
NVD-CWE-Other
|
CVE-2001-0924
|
2017-12-19 11:29 |
2001-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288859
|
- |
|
macromedia
|
jrun
|
SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page…
|
NVD-CWE-Other
|
CVE-2001-0926
|
2017-12-19 11:29 |
2001-11-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288860
|
- |
|
cooolsoft
|
powerftp
|
Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET.
|
NVD-CWE-Other
|
CVE-2001-0931
|
2017-12-19 11:29 |
2001-11-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|