Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.

InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.

Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.

Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.

Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.

Debian GNU/Linux cfengine package is susceptible to a symlink attack.

Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.

The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.

Lynx allows a local user to overwrite sensitive files through /tmp symlinks.

In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.

The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.

Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

NetBSD netstat command allows local users to access kernel memory.

In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.

The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.

Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.

SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.

WS_FTP server remote denial of service through cwd command.

NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.

MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.