Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2000-10-20 CVE-2000-0706 Unspecified vulnerability in Luca Deri Ntop 1.2A79/1.3.1
Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.
network
low complexity
luca-deri
critical
 10.0
10
2000-10-20 CVE-2000-0704 Remote Buffer Overflow vulnerability in Omron WorldView Wnn Asian Language Server
Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands.
network
low complexity
freewnn omron wnn
critical
 10.0
10
2000-10-20 CVE-2000-0699 Unspecified vulnerability in HP Hp-Ux 10.20/11.00
Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.
network
low complexity
hp
critical
 10.0
10
2000-10-20 CVE-2000-0697 Remote Command Execution vulnerability in Solaris AnswerBook2
The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.
network
low complexity
sun
critical
 10.0
10
2000-10-20 CVE-2000-0690 Unspecified vulnerability in CGI Script Center Auction Weaver 1.0/1.02
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.
network
low complexity
cgi-script-center
critical
 10.0
10
2000-10-20 CVE-2000-0687 Directory Traversal vulnerability in CGI Script Center Auction Weaver
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a ..
network
low complexity
cgi-script-center
critical
 10.0
10
2000-10-20 CVE-2000-0685 Unspecified vulnerability in BEA Weblogic Server 3.1.8/4.0.4/4.5.1
BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.
network
low complexity
bea
critical
 10.0
10
2000-10-20 CVE-2000-0684 Unspecified vulnerability in BEA Weblogic Server 3.1.8/4.0.4/4.5.1
BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.
network
low complexity
bea
critical
 10.0
10
2000-10-20 CVE-2000-0681 Unspecified vulnerability in BEA Weblogic Server 4.5.2
Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.
network
low complexity
bea
critical
 10.0
10
2000-10-20 CVE-2000-0677 Unspecified vulnerability in IBM Net.Data
Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable.
network
low complexity
ibm
critical
 10.0
10