Vulnerabilities (CVE)

Total 254557 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-0175 1 Sgi 1 Irix 2024-02-04 2.1 LOW N/A
SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl.
CVE-2000-1065 1 Hp 1 Jetdirect 2024-02-04 5.0 MEDIUM N/A
Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via a malformed packet.
CVE-2003-0075 1 Bladeenc 1 Bladeenc 2024-02-04 7.5 HIGH N/A
Integer signedness error in the myFseek function of samplein.c for Blade encoder (BladeEnc) 0.94.2 and earlier allows remote attackers to execute arbitrary code via a negative offset value following a "fmt" wave chunk.
CVE-2002-0350 1 Hp 1 Procurve Switch 4000m 2024-02-04 7.8 HIGH N/A
HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a port scan of the management IP address, which disables the telnet service.
CVE-2001-1320 1 Pgp 1 Keyserver 2024-02-04 7.5 HIGH N/A
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite.
CVE-2004-0204 4 Bea, Borland Software, Businessobjects and 1 more 9 Weblogic Server, J Builder, Crystal Enterprise and 6 more 2024-02-04 7.5 HIGH N/A
Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.
CVE-2002-0244 1 Atheos 1 Atheos 2024-02-04 7.5 HIGH N/A
Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. (dot dot) in the pathname argument to chdir.
CVE-2003-0274 1 Cren 1 Listproc 2024-02-04 10.0 HIGH N/A
Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC_UMASK value.
CVE-1999-0550 2024-02-04 7.5 HIGH N/A
A router's routing tables can be obtained from arbitrary hosts.
CVE-2001-0029 1 Igor Khasilev 1 Oops Proxy Server 2024-02-04 10.0 HIGH N/A
Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup.
CVE-2000-1149 1 Microsoft 1 Windows Nt 2024-02-04 7.5 HIGH N/A
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability.
CVE-2000-0881 1 Plus Technologies 1 Lpplus 2024-02-04 2.1 LOW N/A
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.
CVE-1999-1193 1 Next 1 Next 2024-02-04 10.0 HIGH N/A
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root.
CVE-2003-0096 1 Oracle 3 Database Server, Oracle8i, Oracle9i 2024-02-04 9.0 HIGH N/A
Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function.
CVE-2001-0952 1 Volition 1 Red Faction 2024-02-04 5.0 MEDIUM N/A
THQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a client or server via packets to UDP port 7755.
CVE-2003-0745 1 Castle Rock Computing 1 Snmpc 2024-02-04 10.0 HIGH N/A
SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remote attackers to gain privileges by decrypting the password that is returned by the server.
CVE-1999-0515 2024-02-04 10.0 HIGH N/A
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
CVE-2002-2169 1 Aol 1 Instant Messenger 2024-02-04 5.0 MEDIUM N/A
Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL.
CVE-2000-0410 1 Allaire 1 Coldfusion Server 2024-02-04 5.0 MEDIUM N/A
ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory.
CVE-2001-0001 1 Francisco Burzi 1 Php-nuke 2024-02-04 7.5 HIGH N/A
cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie.