Vulnerabilities (CVE)

Total 254713 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0636 1 Hp 1 Jetdirect 2024-02-04 5.0 MEDIUM N/A
HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command.
CVE-2002-2313 1 Qualcomm 1 Eudora 2024-02-04 8.8 HIGH N/A
Eudora email client 5.1.1, with "use Microsoft viewer" enabled, allows remote attackers to execute arbitrary programs via an HTML email message containing a META refresh tag that references an embedded .mhtml file with ActiveX controls that execute a second embedded program, which is processed by Internet Explorer.
CVE-2001-1450 1 Microsoft 1 Internet Explorer 2024-02-04 2.6 LOW N/A
Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted FTP URL such as "/.#./".
CVE-2000-0735 1 Rimarts Inc. 1 Becky Internet Mail 2024-02-04 5.0 MEDIUM N/A
Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user replies to a message.
CVE-1999-1410 1 Sgi 1 Irix 2024-02-04 6.2 MEDIUM N/A
addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary file.
CVE-2003-0061 1 Hp 1 Hp-ux 2024-02-04 7.2 HIGH N/A
Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable.
CVE-2002-1629 1 Multi-tech 1 Proxyserver 2024-02-04 10.0 HIGH N/A
Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP.
CVE-2002-1746 1 Maxim Krasnyansky 1 Vtun 2024-02-04 5.0 MEDIUM N/A
Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets.
CVE-2002-1686 1 Ibm 1 Aix 2024-02-04 10.0 HIGH N/A
Buffer overflow in lscfg of unknown versions of AIX has unknown impact.
CVE-2001-1165 1 Intego 2 Diskguard, Fileguard 2024-02-04 4.6 MEDIUM N/A
Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool.
CVE-1999-1102 4 Apple, Bsd, Sgi and 1 more 4 A Ux, Bsd, Irix and 1 more 2024-02-04 2.1 LOW N/A
lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.
CVE-2002-1325 1 Microsoft 8 Windows 2000, Windows 2000 Terminal Services, Windows 95 and 5 more 2024-02-04 5.0 MEDIUM N/A
Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."
CVE-2003-0823 1 Microsoft 2 Ie, Internet Explorer 2024-02-04 7.5 HIGH N/A
Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027.
CVE-2004-1830 1 Francisco Burzi 1 Php-nuke 2024-02-04 5.0 MEDIUM N/A
error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid (1) language, (2) newlang, or (3) lang parameter, which leaks the pathname in a PHP error message.
CVE-1999-0949 3 Sgi, Sun, Turbolinux 4 Irix, Solaris, Sunos and 1 more 2024-02-04 7.2 HIGH N/A
Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.
CVE-2004-2109 1 Quadcomm 1 Q-shop 2024-02-04 6.8 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL.
CVE-2003-1205 1 Crob 1 Crob Ftp Server 2024-02-04 5.0 MEDIUM N/A
Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the "con" MS-DOS device name.
CVE-2004-0626 4 Conectiva, Gentoo, Linux and 1 more 4 Linux, Linux, Linux Kernel and 1 more 2024-02-04 5.0 MEDIUM N/A
The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type.
CVE-2001-0826 1 Aclogic 1 Cesarftp 2024-02-04 7.5 HIGH N/A
Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS, (4) PORT, (5) DELE, (6) REST, (7) RMD, or (8) MKD.
CVE-2004-0063 1 Ncipher 1 Payshield Spp Library 2024-02-04 7.5 HIGH N/A
The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if the HSM returns a different status code, which could cause applications to make incorrect security-critical decisions, e.g. by accepting an invalid PIN number.