Vulnerabilities (CVE)

Filtered by CWE-16
Total 264 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-2331 1 Cascadesoft 1 W3mail 2024-02-04 5.8 MEDIUM N/A
W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by sending code in MIME attachments, then requesting the attachments.
CVE-2003-1491 1 Kerio 1 Personal Firewall 2024-02-04 7.5 HIGH N/A
Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows remote attackers to bypass the firewall filters via packets with a source port of 53.
CVE-2002-2263 1 Hp 2 Hp-ux, Visualize Conference Ftp 2024-02-04 6.6 MEDIUM N/A
The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permissions, which allows local users to read or write arbitrary files.
CVE-1999-0701 1 Microsoft 1 Windows Nt 2024-02-04 7.2 HIGH N/A
After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password.