Vulnerabilities (CVE)

Total 259231 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0056 1 Sun 1 Sunos 2024-02-04 7.2 HIGH N/A
Buffer overflow in Sun's ping program can give root access to local users.
CVE-2001-1153 1 Caldera 1 Openunix 2024-02-04 7.2 HIGH N/A
lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.
CVE-2001-0139 5 Caldera, Debian, Immunix and 2 more 7 Openlinux Desktop, Openlinux Edesktop, Openlinux Eserver and 4 more 2024-02-04 1.2 LOW N/A
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
CVE-2004-1485 2 Gnu, Tftp 2 Inetutils, Tftp 2024-02-04 7.5 HIGH N/A
Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function.
CVE-2001-1031 1 Charles Clark 1 Meteor Ftpd 2024-02-04 5.0 MEDIUM N/A
Directory traversal vulnerability in Meteor FTP 1.0 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the ls/LIST command, or (2) a ... in the cd/CWD command.
CVE-2003-1168 1 Http Commander 1 Http Commander 2024-02-04 5.0 MEDIUM N/A
HTTP Commander 4.0 allows remote attackers to obtain sensitive information via an HTTP request that contains a . (dot) in the file parameter, which reveals the installation path in an error message.
CVE-2000-1180 1 Oracle 1 Oracle8i 2024-02-04 4.6 MEDIUM N/A
Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.
CVE-2004-1619 1 Akella 1 Privateers Bounty Age Of Sail Ii 2024-02-04 7.5 HIGH N/A
Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickname.
CVE-2003-0236 1 Mirabilis 1 Icq 2024-02-04 7.5 HIGH N/A
Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.
CVE-2003-1195 1 Vienuke 1 Vieboard 2024-02-04 7.5 HIGH N/A
SQL injection vulnerability in getmember.asp in VieBoard 2.6 Beta 1 allows remote attackers to execute arbitrary SQL commands via the msn variable.
CVE-2001-0685 1 Thibault Godouet 1 Fcron 2024-02-04 2.6 LOW N/A
Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab temporary file.
CVE-2001-0251 1 Netscape 1 Enterprise Server 2024-02-04 5.0 MEDIUM N/A
The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command.
CVE-2000-0467 1 Sam Lantinga 1 Splitvt 2024-02-04 7.2 HIGH N/A
Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function.
CVE-2002-1187 1 Microsoft 1 Internet Explorer 2024-02-04 6.8 MEDIUM N/A
Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the <frame> or <iframe> element and javascript, aka "Frames Cross Site Scripting," as demonstrated using the PrivacyPolicy.dlg resource.
CVE-2000-0975 1 Anaconda Partners 1 Foundation Directory 2024-02-04 5.0 MEDIUM N/A
Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2003-0495 1 Ledscripts.com 1 Lednews 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item.
CVE-2001-0332 1 Microsoft 1 Internet Explorer 2024-02-04 5.0 MEDIUM N/A
Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain using MSScriptControl.ScriptControl and GetObject, aka a variant of the "Frame Domain Verification" vulnerability.
CVE-2002-1350 1 Lbl 1 Tcpdump 2024-02-04 7.5 HIGH N/A
The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).
CVE-2004-1971 1 Oscar Fafian 1 Video Gallery 2024-02-04 5.0 MEDIUM N/A
modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals the full path in an error message.
CVE-2001-0129 1 Tinyproxy 1 Tinyproxy 2024-02-04 10.0 HIGH N/A
Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long connect request.