Datasets:
ID int64 196 170k | CVE-ID stringlengths 13 16 | CVSS-V3 float64 2.2 10 ⌀ | CVSS-V2 float64 1.2 10 ⌀ | SEVERITY stringclasses 4
values | CVE-DESCRIPTION stringlengths 23 3.84k | CWE-ID stringclasses 146
values | YEAR int64 2k 2.02k | IS-IN-CWE699 bool 1
class | PARENTS stringclasses 54
values | CWE-DESCRIPTION stringclasses 146
values | CVE-DESCRIPTION-NORMALIZED stringlengths 12 3.25k |
|---|---|---|---|---|---|---|---|---|---|---|---|
196 | CVE-1999-0199 | 9.8 | 7.5 | CRITICAL | manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999. | CWE-252 | 1,999 | true | [('CWE-389', 'This category includes weaknesses that occur if a function does not generate the correct return/status code, or if the application does not handle all possible return/status codes that could be generated by a function. This type of problem is most often found in conditions that are rarely encountered duri... | The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions. | manual/search.texi in the GNU C Library before lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999. |
280 | CVE-1999-0284 | null | 7.5 | HIGH | Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command. | CWE-120 | 1,999 | true | [('CWE-1218', 'Weaknesses in this category are related to the handling of memory buffers within a software system.')] | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. | Denial of service to NT mail servers including,, and through a buffer overflow in the SMTP HELO command. |
381 | CVE-1999-0385 | null | 10 | HIGH | The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands. | CWE-120 | 1,999 | true | [('CWE-1218', 'Weaknesses in this category are related to the handling of memory buffers within a software system.')] | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. | The LDAP bind function in has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands. |
486 | CVE-1999-0491 | null | 4.6 | MEDIUM | The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute. | CWE-94 | 1,999 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute. |
503 | CVE-1999-0509 | null | 10 | HIGH | Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands. | CWE-94 | 1,999 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands. |
655 | CVE-1999-0702 | null | 10 | HIGH | Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability. | CWE-94 | 1,999 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | Internet and allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "" vulnerability. |
746 | CVE-1999-0794 | null | 4.6 | MEDIUM | Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file. | CWE-59 | 1,999 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. | Microsoft does not warn a user when a macro is present in a format file. |
843 | CVE-1999-0891 | null | 5 | MEDIUM | The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect. | CWE-94 | 1,999 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | The "download behavior" in allows remote attackers to read arbitrary files via a server-side redirect. |
897 | CVE-1999-0945 | null | 5 | MEDIUM | Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands. | CWE-120 | 1,999 | true | [('CWE-1218', 'Weaknesses in this category are related to the handling of memory buffers within a software system.')] | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. | Buffer overflow in Service for and allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands. |
933 | CVE-1999-0981 | null | 5.1 | MEDIUM | Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect." | CWE-59 | 1,999 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. | Internet and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Reference Redirect." |
1,187 | CVE-1999-1237 | null | 10 | HIGH | Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods. | CWE-120 | 1,999 | true | [('CWE-1218', 'Weaknesses in this category are related to the handling of memory buffers within a software system.')] | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. | Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in:: and possibly other modules, allows remote attackers to execute arbitrary commands via a long username, a long password, and other unspecified methods. |
1,542 | CVE-1999-1593 | null | 7.6 | HIGH | Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. NOTE: this problem may be limited when Windows 95/98 clients are used, or if the p... | CWE-59 | 1,999 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. | Windows Service allows remote attackers to cause a denial of service or steal credentials via a registration that causes WINS to change the domain controller to point to a malicious server. NOTE: this problem may be limited when / clients are used, or if the primary domain controller becomes unavailable. |
1,697 | CVE-2000-0155 | null | 7.2 | HIGH | Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive. | CWE-94 | 2,000 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | Windows NT executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive. |
2,087 | CVE-2000-0546 | null | 5 | MEDIUM | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function. | CWE-120 | 2,000 | true | [('CWE-1218', 'Weaknesses in this category are related to the handling of memory buffers within a software system.')] | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. | Buffer overflow in Kerberos KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function. |
2,088 | CVE-2000-0547 | null | 5 | MEDIUM | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function. | CWE-120 | 2,000 | true | [('CWE-1218', 'Weaknesses in this category are related to the handling of memory buffers within a software system.')] | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. | Buffer overflow in Kerberos KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function. |
2,089 | CVE-2000-0548 | null | 5 | MEDIUM | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function. | CWE-120 | 2,000 | true | [('CWE-1218', 'Weaknesses in this category are related to the handling of memory buffers within a software system.')] | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. | Buffer overflow in Kerberos KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function. |
2,255 | CVE-2000-0715 | null | 2.1 | LOW | DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file. | CWE-59 | 2,000 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. | DiskCheck script diskcheck.pl in allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file. |
2,670 | CVE-2000-1139 | null | 7.5 | HIGH | The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability. | CWE-798 | 2,000 | true | [('CWE-255', 'Weaknesses in this category are related to the management of credentials.'), ('CWE-320', 'Weaknesses in this category are related to errors in the management of cryptographic keys.')] | The product contains hard-coded credentials, such as a password or cryptographic key. | The installation of before. A creates a user account with a known password, which could allow attackers to gain privileges, aka the " " vulnerability. |
2,722 | CVE-2000-1191 | null | 5 | MEDIUM | htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path. | CWE-209 | 2,000 | true | [('CWE-389', 'This category includes weaknesses that occur if a function does not generate the correct return/status code, or if the application does not handle all possible return/status codes that could be generated by a function. This type of problem is most often found in conditions that are rarely encountered duri... | The product generates an error message that includes sensitive information about its environment, users, or associated data. | htsearch program in htDig beta,,, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path. |
2,736 | CVE-2000-1205 | null | 4.3 | MEDIUM | Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explic... | CWE-79 | 2,000 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross site scripting vulnerabilities in through allow remote attackers to execute script as other web site visitors via the printenv CGI, which does not encode its output, pages generated by the ap_send_error_response function such as a default, which does not add an explicit charset, or various messages that are gener... |
2,747 | CVE-2000-1216 | null | 7.2 | HIGH | Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine. | CWE-120 | 2,000 | true | [('CWE-1218', 'Weaknesses in this category are related to the handling of memory buffers within a software system.')] | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. | Buffer overflow in portmir for AIX allows local users to corrupt lock files and gain root privileges via the echo_error routine. |
2,834 | CVE-2001-0054 | null | 5 | MEDIUM | Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. (dot dot) attack. | CWE-22 | 2,001 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in FTP -U before allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a.. attack. |
2,911 | CVE-2001-0131 | null | 3.3 | LOW | htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack. | CWE-59 | 2,001 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. | htpasswd and htdigest in,, and others allows local users to overwrite arbitrary files via a symlink attack. |
3,085 | CVE-2001-0307 | null | 7.5 | HIGH | Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist. | CWE-94 | 2,001 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | Bajie HTTP, and other versions before, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist. |
3,086 | CVE-2001-0308 | null | 7.5 | HIGH | UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (modified ..) to access the file that was created for the program. | CWE-94 | 2,001 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | UploadServlet in HTTP, and possibly other versions before, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a... to access the file that was created for the program. |
3,118 | CVE-2001-0340 | null | 7.5 | HIGH | An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically. | CWE-434 | 2,001 | true | [('CWE-429', 'Weaknesses in this category are related to improper management of handlers.')] | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. | An interaction between the Access service in Server and allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically. |
3,531 | CVE-2001-0780 | null | 5 | MEDIUM | Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. (dot dot) in the SHOW parameter. | CWE-22 | 2,001 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in cosmicpro.cgi in Directory allows remote attackers to gain sensitive information via a.. in the SHOW parameter. |
3,662 | CVE-2001-0925 | null | 5 | MEDIUM | The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex. | CWE-22 | 2,001 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | The default installation of before allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / characters, which causes the path to be mishandled by mod_negotiation, mod_dir, or mod_autoindex. |
3,834 | CVE-2001-1099 | null | 5 | MEDIUM | The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice. | CWE-434 | 2,001 | true | [('CWE-429', 'Weaknesses in this category are related to improper management of handlers.')] | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. | The default configuration of for allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice. |
3,939 | CVE-2001-1205 | null | 5 | MEDIUM | Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable. | CWE-22 | 2,001 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in lastlines.cgi for Last Lines allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable. |
4,057 | CVE-2001-1323 | null | 7.5 | HIGH | Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radix_encode function processes file glob output from the ftpglob function. | CWE-120 | 2,001 | true | [('CWE-1218', 'Weaknesses in this category are related to the handling of memory buffers within a software system.')] | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. | Buffer overflow in MIT Kerberos and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via encoded data, which is not properly handled when the radix_encode function processes file glob output from the ftpglob function. |
4,113 | CVE-2001-1378 | null | 2.1 | LOW | fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files. | CWE-59 | 2,001 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. | fetchmailconf in fetchmail before allows local users to overwrite files of other users via a symlink attack on temporary files. |
4,122 | CVE-2001-1388 | null | 5 | MEDIUM | iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator. | CWE-770 | 2,001 | true | [('CWE-840', "Weaknesses in this category identify some of the underlying problems that commonly allow attackers to manipulate the business logic of an application. Errors in business logic can be devastating to an entire application. They can be difficult to find automatically, since they typically involve legitimate ... | The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated. | iptables before does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator. |
4,166 | CVE-2001-1432 | null | 7.8 | HIGH | Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. | CWE-22 | 2,001 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in Server allows remote attackers to read arbitrary files via a.. in the URL. |
4,316 | CVE-2001-1586 | null | 10 | HIGH | Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../ ("%2E%2E%2F%") sequences in a request to the cgi-bin/ directory, a different vulnerability than CVE-2000-0664. | CWE-22 | 2,001 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in:WWW and earlier allows remote attackers to execute arbitrary programs via encoded../ sequences in a request to the cgi-bin/ directory, a different vulnerability than CVE-2000-0664. |
4,318 | CVE-2001-1593 | null | 2.1 | LOW | The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file. | CWE-59 | 2,001 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. | The tempname_ensure function in lib/routines.h in and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file. |
4,369 | CVE-2002-0054 | null | 7.5 | HIGH | SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials. | CWE-294 | 2,002 | true | [('CWE-1211', 'Weaknesses in this category are related to authentication components of a system. Frequently these deal with the ability to verify that an entity is indeed who it claims to be. If not addressed when designing or implementing a software system, these weaknesses could lead to a degradation of the quality o... | A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes). | SMTP service in and in Server does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials. |
4,473 | CVE-2002-0159 | null | 7.5 | HIGH | Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash the CSADMIN module only (denial of service of administration function) or execute arbitrary code via format strings in ... | CWE-134 | 2,002 | true | [('CWE-133', 'Weaknesses in this category are related to the creation and modification of strings.')] | The product uses a function that accepts a format string as an argument, but the format string originates from an external source. | Format string vulnerability in the administration function in Access Control Server for, and earlier and through, allows remote attackers to crash the CSADMIN module only or execute arbitrary code via format strings in the URL to port 2002. |
4,495 | CVE-2002-0184 | null | 7.2 | HIGH | Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded. | CWE-787 | 2,002 | true | [('CWE-1218', 'Weaknesses in this category are related to the handling of memory buffers within a software system.')] | The product writes data past the end, or before the beginning, of the intended buffer. | Sudo before contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p argument, which are not properly expanded. |
4,578 | CVE-2002-0270 | null | 4.3 | MEDIUM | Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a... | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a... |
4,994 | CVE-2002-0698 | null | 7.5 | HIGH | Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an EHLO request from a system with a long name as obtained through a reverse DNS lookup, which triggers the overflow in IMC's hello response. | CWE-120 | 2,002 | true | [('CWE-1218', 'Weaknesses in this category are related to the handling of memory buffers within a software system.')] | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. | Buffer overflow in for Server allows remote attackers to execute arbitrary code via an EHLO request from a system with a long name as obtained through a reverse DNS lookup, which triggers the overflow in IMC's hello response. |
5,120 | CVE-2002-0824 | null | 6.9 | MEDIUM | BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device. | CWE-59 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. | BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device. |
5,290 | CVE-2002-0999 | null | 7.5 | HIGH | Multiple SQL injection vulnerabilities in CARE 2002 before beta 1.0.02 allow remote attackers to perform unauthorized database operations. | CWE-89 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syn... | Multiple SQL injection vulnerabilities in CARE before beta allow remote attackers to perform unauthorized database operations. |
5,891 | CVE-2002-1651 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error messages from template pages that use the (1) vformat or (2) vfilter functions. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error messages from template pages that use the vformat or vfilter functions. |
5,900 | CVE-2002-1660 | null | 7.5 | HIGH | calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter. | CWE-78 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. | calendar.php in vBulletin before allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter. |
5,939 | CVE-2002-1700 | null | 4.3 | MEDIUM | Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in the missing template handler in MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting error message. |
6,090 | CVE-2002-1852 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) a parameter to test2.pl. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in allows remote attackers to inject arbitrary web script or HTML via the URL or a parameter to test2.pl. |
6,196 | CVE-2002-1958 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web script or HTML via (1) javascript in onmouseover or other attributes in "safe" HTML tags such as the "b" tag, or (2) the Subject field. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in kmMail,, and allows remote attackers to inject arbitrary web script or HTML via javascript in onmouseover or other attributes in "safe" HTML tags such as the "b" tag, or the field. |
6,229 | CVE-2002-1991 | null | 7.5 | HIGH | PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include_once.php. | CWE-94 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | PHP file inclusion vulnerability in osCommerce execute arbitrary commands via the include_file parameter to include_once.php. |
6,258 | CVE-2002-2019 | null | 7.5 | HIGH | PHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange Project) 2.1 allows remote attackers to execute arbitrary PHP code via the include_file parameter. | CWE-94 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | PHP remote file inclusion vulnerability in include_once.php in osCommerce allows remote attackers to execute arbitrary PHP code via the include_file parameter. |
6,389 | CVE-2002-2154 | null | 5 | MEDIUM | Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences. | CWE-22 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in HTTP allows remote attackers to read arbitrary files via.. sequences. |
6,461 | CVE-2002-2229 | null | 5 | MEDIUM | Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request. | CWE-22 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in. WebReflex allows remote attackers to read arbitrary files via a.. in an HTTP request. |
6,462 | CVE-2002-2230 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via a private message with a javascript: URL in the IMG tag, in which the URL ends in a ".gif" or ".jpg" string, a variant of CVE-2002-0328. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in allows remote attackers to inject arbitrary web script or HTML via a private message with a javascript: URL in the IMG tag, in which the URL ends in a ".gif" or ".jpg" string, a variant of CVE-2002-0328. |
6,463 | CVE-2002-2231 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL in a photo URL or (2) an X-Forwarded-For: header. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in a photo URL or an X--: header. |
6,465 | CVE-2002-2233 | null | 8.3 | HIGH | Directory traversal vulnerability in Enceladus Server Suite 3.9 allows remote attackers to list arbitrary directories and possibly cause a denial of service via "@" (at) characters in a CD (CWD) command, such as (1) "@/....\", (2) "@@@/..c:\", or (3) "@/..@/..". | CWE-22 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in Server allows remote attackers to list arbitrary directories and possibly cause a denial of service via "@" characters in a CD command, such as "@/....\", "@@@/..c:\", or "@/..@/..". |
6,470 | CVE-2002-2238 | null | 5 | MEDIUM | Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) in a GET request. | CWE-22 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in the ODBC FTP Server allows remote attackers to read arbitrary files via a "..\" in a GET request. |
6,472 | CVE-2002-2240 | null | 5 | MEDIUM | Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP GET request. | CWE-22 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in and allows remote attackers to read arbitrary files via a ".." in an HTTP GET request. |
6,478 | CVE-2002-2246 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is injected into the resulting 404 error page. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in before allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header to a non-existent page, which is injected into the resulting error page. |
6,481 | CVE-2002-2249 | null | 7.5 | HIGH | PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to (1) backend.php, (2) screen.php, or (3) admin/modules/comment.php. | CWE-94 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | PHP remote file inclusion vulnerability in allows remote attackers to execute arbitrary PHP commands via the neurl parameter to backend.php, screen.php, or admin/modules/comment.php. |
6,484 | CVE-2002-2252 | null | 7.5 | HIGH | SQL injection vulnerability in auth.inc.php in Thatware 0.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter. | CWE-89 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syn... | SQL injection vulnerability in auth.inc.php in and earlier allows remote attackers to execute arbitrary SQL commands via a user parameter. |
6,487 | CVE-2002-2255 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the search_username parameter in searchuser mode. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in search.php in phpBB and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the search_username parameter in searchuser mode. |
6,488 | CVE-2002-2256 | null | 5 | MEDIUM | Directory traversal vulnerability in pWins Webserver 0.2.5 and earlier allows remote attackers to read arbitrary files via Unicode characters. | CWE-22 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in pWins and earlier allows remote attackers to read arbitrary files via characters. |
6,492 | CVE-2002-2260 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitrary web script or HTML via the "show all quips" page. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in the quips feature in through allows remote attackers to inject arbitrary web script or HTML via the "show all quips" page. |
6,501 | CVE-2002-2269 | null | 9.4 | HIGH | Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. | CWE-22 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in HTTP Server allows remote attackers to read arbitrary files via a.. in the URL. |
6,505 | CVE-2002-2273 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL. |
6,509 | CVE-2002-2277 | null | 7.5 | HIGH | SQL injection vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the (1) $rech, (2) $BD_Tab_docs, (3) $BD_Tab_file, (4) $BD_Tab_liens, (5) $BD_Tab_faq, or (6) $chemin variables. | CWE-89 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syn... | SQL injection vulnerability in mod_search/index.php in allows remote attackers to execute arbitrary SQL commands via the $rech, $BD_Tab_docs, $BD_Tab_file, $BD_Tab_liens, $BD_Tab_faq, or $chemin variables. |
6,510 | CVE-2002-2278 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script or HTML via the (1) $App_Theme, (2) $Rub_Search, (3) $Rub_News, (4) $Rub_File, (5) $Rub_Liens, or (6) $Rub_Faq variables. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in mod_search/index.php in allows remote attackers to inject arbitrary web script or HTML via the $App_Theme, $Rub_Search, $Rub_News, $Rub_File, $Rub_Liens, or $Rub_Faq variables. |
6,519 | CVE-2002-2287 | null | 7.5 | HIGH | PHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. | CWE-94 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | PHP remote file inclusion vulnerability in quick_reply.php for phpBB and allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. |
6,524 | CVE-2002-2292 | null | 5 | MEDIUM | Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request to port 9095. | CWE-22 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in Remote in Software iASP allows remote attackers to read arbitrary files via a.. in the HTTP request to port 9095. |
6,528 | CVE-2002-2296 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote attackers to inject arbitrary web script or HTML via the num parameter. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in.pl in SP allows remote attackers to inject arbitrary web script or HTML via the num parameter. |
6,529 | CVE-2002-2297 | null | 6.8 | MEDIUM | PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter. | CWE-94 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | PHP remote file inclusion vulnerability in artlist.php in and allows remote attackers to execute arbitrary PHP code via the root_path parameter. |
6,530 | CVE-2002-2298 | null | 6.8 | MEDIUM | PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter. | CWE-94 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | PHP remote file inclusion vulnerability in config.php in through allows remote attackers to execute arbitrary PHP code via the root_path parameter. |
6,531 | CVE-2002-2299 | null | 6.8 | MEDIUM | PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the root_path parameter. | CWE-94 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | PHP remote file inclusion vulnerability in thatfile.php in through allows remote attackers to execute arbitrary PHP code via the root_path parameter. |
6,536 | CVE-2002-2304 | null | 7.5 | HIGH | SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsession parameter. | CWE-89 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syn... | SQL injection vulnerability in admin/auth/checksession.php in and allows remote attackers to execute arbitrary SQL commands via the idsession parameter. |
6,537 | CVE-2002-2305 | null | 7.5 | HIGH | SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter. | CWE-89 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syn... | SQL injection vulnerability in agentadmin.php in allows remote attackers to execute arbitrary SQL commands via the agentname or agentpassword parameter. |
6,551 | CVE-2002-2318 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in web server through allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into error messages and executed by error messages. |
6,552 | CVE-2002-2319 | null | 7.5 | HIGH | Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code and HTML via the (1) LOGIN, (2) DATA, and (3) MESS parameters, which are inserted into news.php3. | CWE-94 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. | Static code injection vulnerability in users.php in allows remote attackers to inject arbitrary PHP code and HTML via the LOGIN, DATA, and MESS parameters, which are inserted into news.php3. |
6,554 | CVE-2002-2321 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in (1) showcat.php and (2) addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in showcat.php and addyoursite.php in phpLinkat allows remote attackers to inject arbitrary web script or HTML via the catid parameter. |
6,556 | CVE-2002-2323 | null | 5 | MEDIUM | Sun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions. | CWE-59 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. | Sun PC through does not properly set the access control list for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions. |
6,563 | CVE-2002-2330 | null | 5 | MEDIUM | Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to stats.html and executed in client browsers. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in stat.pl in allows remote attackers to inject arbitrary web script or HTML via HTTP_USER_AGENT or HTTP_REFERER, which is written to stats.html and executed in client browsers. |
6,572 | CVE-2002-2339 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in (1) image, (2) img, (3) image=right, (4) img=right, (5) image=left, and (6) img=left tags. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in configure.asp in - allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in image, img, image=right, img=right, image=left, and img=left tags. |
6,573 | CVE-2002-2340 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via (1) the t parameter or (2) the body of an email response. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in read.php in allows remote attackers to inject arbitrary web script or HTML via the t parameter or the body of an email response. |
6,574 | CVE-2002-2341 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inject arbitrary web script or HTML via a blocked URL. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in content blocking in allows remote attackers to inject arbitrary web script or HTML via a blocked URL. |
6,576 | CVE-2002-2343 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to inject arbitrary web script or HTML via email messages. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in NOCC through allows remote attackers to inject arbitrary web script or HTML via email messages. |
6,580 | CVE-2002-2347 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (1) hellouser.jsp, (2) welcomeuser.jsp and (3) usebean.jsp in Oracle 9i Application Server 9.0.2, 1.0.2.2, 1.0.2.1s and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the text entry field. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in Server demo files hellouser.jsp, welcomeuser.jsp and usebean.jsp in Server,, and allows remote attackers to inject arbitrary web script or HTML via the text entry field. |
6,581 | CVE-2002-2348 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web script or HTML via the command parameter. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in athcgi.exe in HR allows remote attackers to inject arbitrary web script or HTML via the command parameter. |
6,583 | CVE-2002-2350 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in z_user_show.php in dbtreelistproperty_method.php in allows remote attackers to inject arbitrary web script or HTML via the class parameter. |
6,584 | CVE-2002-2351 | null | 6.4 | MEDIUM | Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing "." (dot). | CWE-22 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Eudora allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing ".". |
6,591 | CVE-2002-2358 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in the FTP view feature in and through allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL. |
6,592 | CVE-2002-2359 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in the FTP view feature in allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL. |
6,595 | CVE-2002-2362 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in form_header.php in allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter. |
6,597 | CVE-2002-2364 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in PHP and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket. |
6,609 | CVE-2002-2374 | null | 10 | HIGH | Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files." | CWE-59 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. | Unspecified vulnerability in pprosetup in has unknown impact and attack vectors related to "unsafe use of temporary files." |
6,611 | CVE-2002-2375 | null | 5 | MEDIUM | Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a (1) .. (dot dot) or (2) . (dot) in a URL. NOTE: it is not clear whether this issue reveals any more information regarding directo... | CWE-22 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the... | Directory traversal vulnerability in and possibly earlier versions allows remote attackers to list the contents of the directory and its parent directory via a.. or. in a URL. NOTE: it is not clear whether this issue reveals any more information regarding directory structure than is already available to any user, altho... |
6,612 | CVE-2002-2376 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the (1) full name, (2) email, (3) homepage, and (4) location parameters. NOTE: this issue might overlap CVE-2005-1605. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in E-Guest_sign.pl in E- allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the full name, email, homepage, and location parameters. NOTE: this issue might overlap CVE-2005-1605. |
6,613 | CVE-2002-2377 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web script, and HTML via the entry field. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in addentry.cgi in ZAP allows remote attackers to inject arbitrary directives, web script, and HTML via the entry field. |
6,614 | CVE-2002-2378 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted into the resulting error page. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in AN HTTP allows remote attackers to inject arbitrary web script or HTML via a colon in the query string, which is inserted into the resulting error page. |
6,618 | CVE-2002-2382 | null | 7.2 | HIGH | cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out. | CWE-59 | 2,002 | true | [('CWE-1219', 'Weaknesses in this category are related to the handling of files within a software system. Files, directories, and folders are so central to information technology that many different weaknesses and variants have been discovered.')] | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. | cvsupd.sh in allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out. |
6,619 | CVE-2002-2383 | null | 7.5 | HIGH | SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute arbitrary SQL commands via file names. | CWE-89 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syn... | SQL injection vulnerability in through allows remote attackers to execute arbitrary SQL commands via file names. |
6,622 | CVE-2002-2386 | null | 4.3 | MEDIUM | Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the SRC attribute of an IMG tag. | CWE-79 | 2,002 | true | [('CWE-137', 'Weaknesses in this category are related to the creation or neutralization of data using an incorrect format.')] | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. | Cross-site scripting vulnerability in the module for XOOPS, when allowing on-line question development, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the SRC attribute of an IMG tag. |
End of preview. Expand in Data Studio
CVE-CWE Software Weakness Mapping Dataset
Dataset description
This dataset maps Common Vulnerabilities and Exposures (CVEs) to Common Weakness Enumeration (CWE) entries in the CWE-699 Software category. It combines CVE descriptions with CWE descriptions and parent-category information for security research and vulnerability classification.
Dataset structure
The dataset is provided as Global_Dataset.csv. Its main fields include:
CVE-ID: CVE identifier.CVE-DESCRIPTION: Description of the vulnerability.CWE-ID: Associated CWE identifier.CWE-DESCRIPTION: Description of the associated weakness.PARENTS: Parent CWE category or categories.YEAR: Year extracted from the CVE identifier.IS-IN-CWE699: Whether the CWE belongs to the CWE-699 Software category.
Data sources
- CVE-to-CWE mappings and vulnerability descriptions are sourced from the
zefang-liu/cve-and-cwe-mapping-datasetdataset on Hugging Face. - CWE descriptions and hierarchy information are collected from the CWE software-category data scraped by this project.
The dataset is generated by dataset/generate_dataset.ipynb.
Intended uses
This dataset is intended for research and experimentation involving:
- CVE-to-CWE classification.
- Vulnerability search and retrieval.
- Security text embedding and similarity experiments.
- Analysis of software weakness categories.
Limitations
The mappings reflect the upstream data sources and may contain incomplete, ambiguous, or changing vulnerability information. The dataset should not be treated as a definitive security assessment or as a replacement for reviewing the original NVD and CWE records.
License and attribution
Please review and follow the licenses and attribution requirements of the upstream CVE and CWE sources before redistributing or using this dataset.
- Downloads last month
- 11