2001 CVE Vulnerabilities

1,556 CVEs published in 2001.

CVE IDSeverityCVSSDescription
CVE-2001-1441Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaS...
CVE-2001-0400nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email addres...
CVE-2001-0432Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 a...
CVE-2001-0434The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario compu...
CVE-2001-0435The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cac...
CVE-2001-0396The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obta...
CVE-2001-0395CRITICAL9.8Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attac...
CVE-2001-0436dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the...
CVE-2001-0431Vulnerability in iPlanet Web Server Enterprise Edition 4.x.
CVE-2001-0391Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.
CVE-2001-0390IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w ...
CVE-2001-0389IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling th...
CVE-2001-0437upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting t...
CVE-2001-0387Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command...
CVE-2001-0386AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux direc...
CVE-2001-0385GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.
CVE-2001-1386HIGH7.5WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, ...
CVE-2001-1043HIGH7.5ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) f...
CVE-2001-1246PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows lo...
CVE-2001-1251SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.
CVE-2001-1249vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names.
CVE-2001-1248vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a ...
CVE-2001-1250vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, po...
CVE-2001-1239PowerNet IX allows remote attackers to cause a denial of service via a port scan.
CVE-2001-1290admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify th...

Check if your code is affected by 2001 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now