Vulnerabilities (CVE)

Total 253921 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0319 2024-02-04 7.2 HIGH N/A
Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
CVE-2002-0623 1 Microsoft 1 Commerce Server 2024-02-04 7.5 HIGH N/A
Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data, aka "New Variant of the ISAPI Filter Buffer Overrun".
CVE-2002-0749 1 Cgiscript.net 1 Csmailto 2024-02-04 7.5 HIGH N/A
CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.
CVE-2000-0125 1 Wired Community Software 1 Wwwthreads 2024-02-04 7.5 HIGH N/A
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
CVE-2002-1376 2 Oracle, Symantec Veritas 3 Mysql, Netbackup Advanced Reporter, Netbackup Global Data Manager 2024-02-04 7.5 HIGH N/A
libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVE-2003-0542 1 Apache 1 Http Server 2024-02-04 7.2 HIGH N/A
Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.
CVE-2002-0393 1 Red-m 1 1050ap Lan Acess Point 2024-02-04 10.0 HIGH N/A
Buffer overflow in Red-M 1050 (Bluetooth Access Point) management web interface allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password.
CVE-2000-0481 1 Kde 1 K-mail 2024-02-04 5.0 MEDIUM N/A
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.
CVE-2001-0522 1 Gnu 1 Privacy Guard 2024-02-04 7.5 HIGH N/A
Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.
CVE-2001-1438 2 Handspring, Palm 2 Visor, Palm Os 2024-02-04 5.0 MEDIUM N/A
Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS crash and VisorPhone database corruption) by sending a large or crafted SMS image.
CVE-2004-0845 1 Microsoft 2 Ie, Internet Explorer 2024-02-04 6.4 MEDIUM N/A
Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.
CVE-2001-1574 1 Trend Micro 1 Interscan Viruswall 2024-02-04 10.0 HIGH N/A
Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code.
CVE-2004-1531 1 Invision Power Services 1 Invision Board 2024-02-04 7.5 HIGH N/A
SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands via the qpid parameter.
CVE-2004-0409 1 Xchat 1 Xchat 2024-02-04 7.5 HIGH N/A
Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.
CVE-2002-2205 1 Webresolve 1 Webresolve 2024-02-04 5.0 MEDIUM N/A
Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname.
CVE-2000-0980 1 Microsoft 4 Windows 95, Windows 98, Windows 98se and 1 more 2024-02-04 5.0 MEDIUM N/A
NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network.
CVE-2003-0049 1 Apple 2 Mac Os X, Mac Os X Server 2024-02-04 7.5 HIGH N/A
Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.
CVE-2002-1279 1 Masqmail 1 Masqmail 2024-02-04 7.2 HIGH N/A
Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via certain entries in the configuration file (-C option).
CVE-2001-0558 1 T. Hauck 1 Jana Web Server 2024-02-04 5.0 MEDIUM N/A
T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (i.e. GET /aux HTTP/1.0).
CVE-2001-0866 1 Cisco 1 12000 Router 2024-02-04 7.5 HIGH N/A
Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls.