Vulnerabilities (CVE)

Total 256646 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-1996 1 Postnuke Software Foundation 1 Postnuke 2024-02-04 2.6 LOW N/A
Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name parameter in modules.php and (2) catid parameter in index.php.
CVE-2002-1027 1 Macromedia 1 Sitespring 2024-02-04 7.5 HIGH N/A
Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the script in 1the et parameter.
CVE-2001-1288 1 Microsoft 2 Windows 2000, Windows Nt 2024-02-04 2.1 LOW N/A
Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe.
CVE-1999-0478 1 Sendmail 1 Sendmail 2024-02-04 5.0 MEDIUM N/A
Denial of service in HP-UX sendmail 8.8.6 related to accepting connections.
CVE-2003-1299 1 Pablo Software Solutions 1 Baby Ftp Server 2024-02-04 4.0 MEDIUM N/A
Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated users to list arbitrary directories and possibly read files via "..." (triple dot) manipulations to the CWD command.
CVE-2003-0256 1 Kde 1 Kopete 2024-02-04 7.5 HIGH N/A
The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands.
CVE-2002-1440 1 Gateway 1 Gs-400 2024-02-04 10.0 HIGH N/A
The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interface, which can allow attackers to gain root privileges.
CVE-2003-1514 1 Emule 1 Emule 2024-02-04 7.8 HIGH N/A
eMule 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer overflow.
CVE-1999-0862 1 Postgresql 1 Postgresql 2024-02-04 2.1 LOW N/A
Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file.
CVE-1999-1498 1 Slackware 1 Slackware Linux 2024-02-04 3.6 LOW N/A
Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file.
CVE-2002-2354 1 Netgear 1 Fm114p 2024-02-04 7.8 HIGH N/A
Netgear FM114P firmware 1.3 wireless firewall allows remote attackers to cause a denial of service (crash or hang) via a large number of TCP connection requests.
CVE-2000-1027 1 Cisco 1 Pix Firewall Software 2024-02-04 5.0 MEDIUM N/A
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
CVE-1999-0701 1 Microsoft 1 Windows Nt 2024-02-04 7.2 HIGH N/A
After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password.
CVE-2002-1148 1 Apache 1 Tomcat 2024-02-04 5.0 MEDIUM N/A
The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.
CVE-2001-1183 1 Cisco 1 Ios 2024-02-04 5.0 MEDIUM N/A
PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet.
CVE-2000-0627 1 Blackboard 1 Courseinfo 2024-02-04 7.5 HIGH N/A
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl.
CVE-2000-0914 1 Openbsd 1 Openbsd 2024-02-04 5.0 MEDIUM N/A
OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.
CVE-2001-0241 1 Microsoft 1 Windows 2000 2024-02-04 10.0 HIGH N/A
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.
CVE-1999-0200 2024-02-04 10.0 HIGH N/A
Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.
CVE-2000-0417 1 Cayman 2 3220-h Dsl Router, Gatorsurf 2024-02-04 5.0 MEDIUM N/A
The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password.