Total
259221 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2000-0607 | 3 Debian, Mandrakesoft, Redhat | 3 Debian Linux, Mandrake Linux, Linux | 2024-02-04 | 7.2 HIGH | N/A |
Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings. | |||||
CVE-2002-1939 | 1 Flashfxp | 1 Flashfxp | 2024-02-04 | 2.1 LOW | N/A |
FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties. | |||||
CVE-2002-0874 | 1 Redhat | 1 Interchange | 2024-02-04 | 5.0 MEDIUM | N/A |
Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files. | |||||
CVE-1999-1340 | 1 Hylafax | 1 Hylafax | 2024-02-04 | 7.2 HIGH | N/A |
Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument. | |||||
CVE-1999-0057 | 5 Eric Allman, Freebsd, Hp and 2 more | 7 Vacation, Freebsd, Hp-ux and 4 more | 2024-02-04 | 7.5 HIGH | N/A |
Vacation program allows command execution by remote users through a sendmail command. | |||||
CVE-1999-0303 | 4 Digital, Netbsd, Openbsd and 1 more | 5 Osf 1, Netbsd, Openbsd and 2 more | 2024-02-04 | 4.6 MEDIUM | N/A |
Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames. | |||||
CVE-2000-0215 | 1 Sco | 1 Unixware | 2024-02-04 | 7.2 HIGH | N/A |
Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges. | |||||
CVE-2002-2403 | 1 Key Focus | 1 Kf Web Server | 2024-02-04 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences. | |||||
CVE-2003-0755 | 1 Gtkftpd | 1 Gtkftp | 2024-02-04 | 10.0 HIGH | N/A |
Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory names and listing them with a LIST command. | |||||
CVE-2001-0211 | 1 Silverplatter | 1 Webspirs | 2024-02-04 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the sp.nextform parameter. | |||||
CVE-2002-0086 | 1 Ibm | 1 Lotus Domino | 2024-02-04 | 7.2 HIGH | N/A |
Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable. | |||||
CVE-2000-1171 | 1 Markus Triska | 1 Cgiforum | 2024-02-04 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (dot dot) attack in the "thesection" parameter. | |||||
CVE-1999-1055 | 1 Microsoft | 1 Excel | 2024-02-04 | 7.5 HIGH | N/A |
Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability." | |||||
CVE-2002-0484 | 1 Php | 1 Php | 2024-02-04 | 5.0 MEDIUM | N/A |
move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system. | |||||
CVE-2002-1129 | 2 Compaq, Digital | 2 Tru64, Osf 1 | 2024-02-04 | 7.2 HIGH | N/A |
Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument. | |||||
CVE-2003-0511 | 1 Cisco | 1 Ios | 2024-02-04 | 5.0 MEDIUM | N/A |
The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attackers to cause a denial of service (reload) via a malformed URL. | |||||
CVE-2002-1227 | 1 Pam | 1 Pam | 2024-02-04 | 7.5 HIGH | N/A |
PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users. | |||||
CVE-2002-2165 | 1 Imho | 1 Imho Webmail | 2024-02-04 | 2.1 LOW | N/A |
The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox. | |||||
CVE-2002-1705 | 1 Microsoft | 1 Internet Explorer | 2024-02-04 | 5.0 MEDIUM | N/A |
Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading Style Sheet (CSS) with the p{cssText} element declared and a bold font weight. | |||||
CVE-2003-0624 | 1 Bea | 1 Weblogic Server | 2024-02-04 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter. |