Total
259273 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2002-0657 | 1 Openssl | 1 Openssl | 2024-02-04 | 7.5 HIGH | N/A |
Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key. | |||||
CVE-2004-0295 | 1 Transsoft | 1 Broker Ftp Server | 2024-02-04 | 5.0 MEDIUM | N/A |
TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via an open idle connection. | |||||
CVE-2001-0186 | 1 Free Java Web Server | 1 Free Java Web Server | 2024-02-04 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |||||
CVE-2003-0473 | 1 Sgi | 1 Irix | 2024-02-04 | 10.0 HIGH | N/A |
Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications. | |||||
CVE-2004-0852 | 1 Htget | 1 Htget | 2024-02-04 | 7.5 HIGH | N/A |
Buffer overflow in htget 0.93 allows remote attackers to execute arbitrary code via a crafted URL. | |||||
CVE-2002-2097 | 1 Maradns | 1 Maradns | 2024-02-04 | 5.0 MEDIUM | N/A |
The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS packets. | |||||
CVE-2003-1409 | 1 Ej3 | 1 Topo | 2024-02-04 | 5.0 MEDIUM | N/A |
TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to (1) in.php or (2) out.php, which reveals the path to the TOPo directory in the error message. | |||||
CVE-2000-0651 | 1 Novell | 1 Bordermanager | 2024-02-04 | 7.5 HIGH | N/A |
The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine. | |||||
CVE-2003-0396 | 1 Linux-atm | 1 Linux-atm | 2024-02-04 | 4.6 MEDIUM | N/A |
Buffer overflow in les for ATM on Linux (linux-atm) before 2.4.1, if used setuid, allows local users to gain privileges via a long -f command line argument. | |||||
CVE-2002-0311 | 1 Caldera | 2 Openunix, Unixware | 2024-02-04 | 10.0 HIGH | N/A |
Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for (1) in scoadminreg.cgi or (2) service_action.cgi. | |||||
CVE-1999-0241 | 3 Sgi, Sun, Xfree86 Project | 4 Irix, Solaris, Sunos and 1 more | 2024-02-04 | 10.0 HIGH | N/A |
Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. | |||||
CVE-2001-1185 | 1 Freebsd | 1 Freebsd | 2024-02-04 | 6.2 MEDIUM | N/A |
Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges. | |||||
CVE-2002-2246 | 1 Deerfield | 1 Visnetic Website | 2024-02-04 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is injected into the resulting 404 error page. | |||||
CVE-1999-0734 | 1 Cisco | 1 Ciscosecure | 2024-02-04 | 7.5 HIGH | N/A |
A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication. | |||||
CVE-2004-1843 | 1 Expinion.net | 1 Member Management System | 2024-02-04 | 7.5 HIGH | N/A |
SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to (1) resend.asp or (2) news_view.asp. | |||||
CVE-2000-1102 | 1 Ptlink | 2 Ptlink Irc Services, Ptlink Ircd | 2024-02-04 | 5.0 MEDIUM | N/A |
PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "oper" commands. | |||||
CVE-1999-0795 | 1 Sun | 2 Solaris, Sunos | 2024-02-04 | 7.5 HIGH | N/A |
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches. | |||||
CVE-2001-0705 | 1 Arcadia | 1 Arcadia Internet Store | 2024-02-04 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to read arbitrary files on the web server via a URL with "dot dot" sequences in the template argument. | |||||
CVE-2003-0123 | 1 Ibm | 2 Lotus Domino, Lotus Notes Client | 2024-02-04 | 5.0 MEDIUM | N/A |
Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line. | |||||
CVE-2001-0458 | 4 Debian, Mandrakesoft, Ralf S. Engelschall and 1 more | 4 Debian Linux, Mandrake Linux, Eperl and 1 more | 2024-02-04 | 7.5 HIGH | N/A |
Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands. |