Vulnerabilities (CVE)

Total 254106 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0968 1 Valve Software 1 Half-life Dedicated Server 2024-02-04 10.0 HIGH N/A
Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command.
CVE-2002-1176 1 Nullsoft 1 Winamp 2024-02-04 7.5 HIGH N/A
Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file.
CVE-2003-0520 1 Cerulean Studios 1 Trillian 2024-02-04 5.0 MEDIUM N/A
Trillian 1.0 Pro and 0.74 Freeware allows remote attackers to cause a denial of service (crash) via a TypingUser message in which the "TypingUser" string has been modified.
CVE-2002-0254 1 Mirabilis 1 Icq 2024-02-04 5.0 MEDIUM N/A
ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains large height and width values, which causes the crash when viewed in Userdetails.
CVE-2003-0107 1 Zlib 1 Zlib 2024-02-04 7.5 HIGH N/A
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
CVE-2002-2197 1 Sun 2 Solaris, Sunos 2024-02-04 7.2 HIGH N/A
Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel panic) via a program that uses /dev/poll, triggering a NULL pointer dereference.
CVE-2003-1159 1 Plug And Play 1 Plug And Play Web Server Proxy 2024-02-04 5.0 MEDIUM N/A
Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service (server crash) via an invalid URI in an HTTP GET request to TCP port 8080.
CVE-2002-1470 1 Nullsoft 1 Shoutcast Server 2024-02-04 2.1 LOW N/A
SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file.
CVE-2002-1283 1 Novell 1 Emframe 2024-02-04 5.0 MEDIUM N/A
Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an authentication request with a long Distinguished Name (DN) attribute.
CVE-2001-1510 1 Macromedia 1 Jrun 2024-02-04 5.0 MEDIUM N/A
Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to the requested URL.
CVE-2004-0351 1 Spidersales 1 Spidersales 2024-02-04 2.1 LOW N/A
Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data.
CVE-1999-0581 1 Microsoft 1 Windows Nt 2024-02-04 10.0 HIGH N/A
The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions.
CVE-2002-1861 1 Sybase 1 Easerver 2024-02-04 5.0 MEDIUM N/A
Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
CVE-2003-0444 1 Gtksee 1 Gtksee 2024-02-04 7.5 HIGH N/A
Heap-based buffer overflow in GTKSee 0.5 and 0.5.1 allows remote attackers to execute arbitrary code via a PNG image of certain color depths.
CVE-2001-1169 1 Bell Communications Research 1 S Key 2024-02-04 7.5 HIGH N/A
keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo.
CVE-2000-0623 1 Oreilly 1 Website Professional 2024-02-04 10.0 HIGH N/A
Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header.
CVE-2001-0867 1 Cisco 1 12000 Router 2024-02-04 7.5 HIGH N/A
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls.
CVE-2000-0271 1 Gnu 1 Emacs 2024-02-04 4.6 MEDIUM N/A
read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords.
CVE-2002-0198 1 Paul L Daniels 2 Inflex, Ripmime 2024-02-04 10.0 HIGH N/A
Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows remote attackers to execute arbitrary code via an attachment in a long filename.
CVE-2002-1619 1 Ibm 1 Aix 2024-02-04 5.0 MEDIUM N/A
Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump).