Total
259273 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-1999-0230 | 1 Cisco | 1 Ios | 2024-02-04 | 5.0 MEDIUM | N/A |
Buffer overflow in Cisco 7xx routers through the telnet service. | |||||
CVE-2000-0002 | 1 Zbsoft | 1 Zbserver | 2024-02-04 | 10.0 HIGH | N/A |
Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request. | |||||
CVE-2003-0188 | 2 Lv, Redhat | 3 Lv, Linux, Lv | 2024-02-04 | 7.2 HIGH | N/A |
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories. | |||||
CVE-2004-0032 | 1 Phpgedview | 1 Phpgedview | 2024-02-04 | 6.8 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script via the firstname parameter. | |||||
CVE-2003-1262 | 1 Http Fetcher | 1 Http Fetcher Library | 2024-02-04 | 6.4 MEDIUM | N/A |
Buffer overflow in the http_fetch function of HTTP Fetcher 1.0.0 and 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request via a long (1) host, (2) referer, or (3) userAgent value. | |||||
CVE-2003-0522 | 1 Early Impact | 1 Productcart | 2024-02-04 | 10.0 HIGH | N/A |
Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp. | |||||
CVE-2001-1175 | 1 Andries Brouwer | 1 Util-linux | 2024-02-04 | 7.2 HIGH | N/A |
vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing. | |||||
CVE-2002-0560 | 1 Oracle | 4 Application Server, Application Server Web Cache, Oracle8i and 1 more | 2024-02-04 | 5.0 MEDIUM | N/A |
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature, (2) OWA_UTIL.listprint, or (3) OWA_UTIL.show_query_columns. | |||||
CVE-2001-1400 | 1 Linux | 1 Linux Kernel | 2024-02-04 | 2.1 LOW | N/A |
Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadlock). | |||||
CVE-2000-1131 | 1 Bill Kendrick | 1 Gbook.cgi | 2024-02-04 | 7.5 HIGH | N/A |
Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable. | |||||
CVE-2004-0661 | 1 D-link | 3 Di-604, Di-614\+, Di-624 | 2024-02-04 | 5.0 MEDIUM | N/A |
Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which makes the DHCP lease valid for thirteen or more years. | |||||
CVE-2000-0139 | 1 True North | 1 Internet Anywhere Mail Server | 2024-02-04 | 2.1 LOW | N/A |
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command. | |||||
CVE-2002-2406 | 1 Perception | 1 Liteserve | 2024-02-04 | 5.0 MEDIUM | N/A |
Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request. | |||||
CVE-2002-0555 | 1 Ibm | 1 Informix Web Datablade | 2024-02-04 | 7.5 HIGH | N/A |
IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it. | |||||
CVE-2002-0891 | 1 Juniper | 1 Netscreen Screenos | 2024-02-04 | 5.0 MEDIUM | N/A |
The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name. | |||||
CVE-2003-0694 | 11 Apple, Compaq, Freebsd and 8 more | 18 Mac Os X, Mac Os X Server, Tru64 and 15 more | 2024-02-04 | 10.0 HIGH | N/A |
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c. | |||||
CVE-2004-0163 | 1 Sygate Technologies | 1 Secure Enterprise | 2024-02-04 | 5.0 MEDIUM | N/A |
Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service (resource exhaustion) by capturing a session and repeatedly replaying the session. | |||||
CVE-2003-0082 | 1 Mit | 2 Kerberos, Kerberos 5 | 2024-02-04 | 5.0 MEDIUM | N/A |
The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun"). | |||||
CVE-2004-0071 | 2024-02-04 | 5.0 MEDIUM | N/A | ||
Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read arbitrary files via the command parameter ($cmd variable) to index.php. | |||||
CVE-2004-0226 | 4 Gentoo, Midnight Commander, Sgi and 1 more | 4 Linux, Midnight Commander, Propack and 1 more | 2024-02-04 | 10.0 HIGH | N/A |
Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code. |