Vulnerabilities (CVE)

Total 253990 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-1400 1 Linux 1 Linux Kernel 2024-02-04 2.1 LOW N/A
Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadlock).
CVE-2000-1131 1 Bill Kendrick 1 Gbook.cgi 2024-02-04 7.5 HIGH N/A
Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable.
CVE-2004-0661 1 D-link 3 Di-604, Di-614\+, Di-624 2024-02-04 5.0 MEDIUM N/A
Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which makes the DHCP lease valid for thirteen or more years.
CVE-2000-0139 1 True North 1 Internet Anywhere Mail Server 2024-02-04 2.1 LOW N/A
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
CVE-2002-2406 1 Perception 1 Liteserve 2024-02-04 5.0 MEDIUM N/A
Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request.
CVE-2002-0555 1 Ibm 1 Informix Web Datablade 2024-02-04 7.5 HIGH N/A
IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it.
CVE-2002-0891 1 Juniper 1 Netscreen Screenos 2024-02-04 5.0 MEDIUM N/A
The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.
CVE-2003-0694 11 Apple, Compaq, Freebsd and 8 more 18 Mac Os X, Mac Os X Server, Tru64 and 15 more 2024-02-04 10.0 HIGH N/A
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
CVE-2004-0163 1 Sygate Technologies 1 Secure Enterprise 2024-02-04 5.0 MEDIUM N/A
Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service (resource exhaustion) by capturing a session and repeatedly replaying the session.
CVE-2003-0082 1 Mit 2 Kerberos, Kerberos 5 2024-02-04 5.0 MEDIUM N/A
The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun").
CVE-2004-0071 2024-02-04 5.0 MEDIUM N/A
Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read arbitrary files via the command parameter ($cmd variable) to index.php.
CVE-2004-0226 4 Gentoo, Midnight Commander, Sgi and 1 more 4 Linux, Midnight Commander, Propack and 1 more 2024-02-04 10.0 HIGH N/A
Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
CVE-1999-1592 2 Sendmail, Sun 2 Sendmail, Sunos 2024-02-04 7.5 HIGH N/A
Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might overlap CVE-1999-0129.
CVE-2003-0712 1 Microsoft 1 Exchange Server 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote attackers to execute arbitrary web script.
CVE-2004-0124 1 Microsoft 4 Windows 2000, Windows 2003 Server, Windows Nt and 1 more 2024-02-04 2.6 LOW N/A
The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."
CVE-1999-0494 1 Wingate 1 Wingate 2024-02-04 5.0 MEDIUM N/A
Denial of service in WinGate proxy through a buffer overflow in POP3.
CVE-2002-0893 1 New Atlanta Communications 1 Servletexec Isapi 2024-02-04 5.0 MEDIUM N/A
Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" (modified dot-dot) sequences.
CVE-2000-0788 1 Microsoft 2 Access, Word 2024-02-04 10.0 HIGH N/A
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.
CVE-2001-0145 1 Microsoft 2 Outlook, Outlook Express 2024-02-04 7.5 HIGH N/A
Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field.
CVE-2000-0131 1 Jgaa 1 Warftpd 2024-02-04 5.0 MEDIUM N/A
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.