Total
93123 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2004-0798 | 1 Ipswitch | 1 Whatsup Gold | 2024-02-04 | 7.5 HIGH | N/A |
Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter. | |||||
CVE-1999-0601 | 2024-02-04 | 10.0 HIGH | N/A | ||
A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets. | |||||
CVE-1999-0641 | 2024-02-04 | N/A | N/A | ||
The UUCP service is running. | |||||
CVE-2003-0488 | 1 Kerio | 1 Kerio Mailserver | 2024-02-04 | 5.1 MEDIUM | N/A |
Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl module, or (2) the alias parameter in the do_map module. | |||||
CVE-1999-0739 | 1 Microsoft | 1 Internet Information Server | 2024-02-04 | 5.0 MEDIUM | N/A |
The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | |||||
CVE-2003-0039 | 1 Isc | 1 Dhcpd | 2024-02-04 | 5.0 MEDIUM | N/A |
ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count. | |||||
CVE-2000-0637 | 1 Microsoft | 1 Excel | 2024-02-04 | 4.6 MEDIUM | N/A |
Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability. | |||||
CVE-2001-0093 | 1 Freebsd | 1 Freebsd | 2024-02-04 | 7.2 HIGH | N/A |
Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect the behavior of telnetd. | |||||
CVE-2001-1432 | 1 Cherokee | 1 Cherokee Httpd | 2024-02-04 | 7.8 HIGH | N/A |
Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. | |||||
CVE-2003-0550 | 1 Redhat | 1 Linux | 2024-02-04 | 5.0 MEDIUM | N/A |
The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology. | |||||
CVE-2000-0501 | 1 Alt-n | 1 Mdaemon | 2024-02-04 | 2.6 LOW | N/A |
Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server. | |||||
CVE-2003-1120 | 1 Ssh | 1 Tectia Server | 2024-02-04 | 3.7 LOW | N/A |
Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key. | |||||
CVE-2002-1272 | 1 Alcatel | 1 Aos | 2024-02-04 | 10.0 HIGH | N/A |
Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative privileges. | |||||
CVE-2004-2083 | 1 Opera | 1 Opera Browser | 2024-02-04 | 2.6 LOW | N/A |
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing." | |||||
CVE-2003-1056 | 1 Sun | 2 Solaris, Sunos | 2024-02-04 | 7.2 HIGH | N/A |
The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files. | |||||
CVE-2001-0509 | 1 Microsoft | 4 Exchange Server, Sql Server, Windows 2000 and 1 more | 2024-02-04 | 5.0 MEDIUM | N/A |
Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs. | |||||
CVE-1999-1018 | 1 Linux | 1 Linux Kernel | 2024-02-04 | 7.5 HIGH | N/A |
IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets. | |||||
CVE-2004-2198 | 1 Duware | 1 Duclassmate | 2024-02-04 | 6.4 MEDIUM | N/A |
account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page. | |||||
CVE-1999-1412 | 2 Apache, Apple | 2 Http Server, Macos | 2024-02-04 | 5.0 MEDIUM | N/A |
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes. | |||||
CVE-2001-1319 | 1 Microsoft | 1 Exchange Server | 2024-02-04 | 5.0 MEDIUM | N/A |
Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite. |