Vulnerabilities (CVE)

Total 258795 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-1017 1 Webteacher 1 Webdata 2024-02-04 5.0 MEDIUM N/A
Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database.
CVE-2001-0179 1 Macromedia 1 Jrun 2024-02-04 5.0 MEDIUM N/A
Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "."
CVE-2004-1466 1 Gallery Project 1 Gallery 2024-02-04 7.5 HIGH N/A
The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using save_photos.php, which allows remote attackers to upload and execute execute arbitrary scripts before they are deleted, if the temporary directory is under the web root.
CVE-2001-0754 1 Cisco 1 Cbos 2024-02-04 5.0 MEDIUM N/A
Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause it to enter ROMMON mode and stop forwarding packets.
CVE-2002-0139 1 Pi-soft 1 Spoonftp 2024-02-04 7.5 HIGH N/A
Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.
CVE-1999-1447 1 Microsoft 1 Internet Explorer 2024-02-04 5.0 MEDIUM N/A
Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag.
CVE-2003-0629 1 Peoplesoft 1 Peopletools 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript.
CVE-2002-0025 1 Microsoft 1 Internet Explorer 2024-02-04 5.0 MEDIUM N/A
Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote attackers to modify which application is used to process a document.
CVE-2002-0886 1 Cisco 1 Cbos 2024-02-04 5.0 MEDIUM N/A
Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory.
CVE-1999-0431 1 Linux 1 Linux Kernel 2024-02-04 5.0 MEDIUM N/A
Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.
CVE-2003-0112 1 Microsoft 4 Windows 2000, Windows 2000 Terminal Services, Windows Nt and 1 more 2024-02-04 4.6 MEDIUM N/A
Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed to a debugger.
CVE-2002-1792 1 Fake Identd 1 Fake Identd 2024-02-04 10.0 HIGH N/A
Buffer overflow in Fake Identd 0.9 through 1.4 allows remote attackers to execute arbitrary code as root via a long request that is split into multiple packets.
CVE-2004-0364 1 Symantec 1 Norton Internet Security 2024-02-04 7.5 HIGH N/A
The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method.
CVE-2003-0422 1 Apple 1 Darwin Streaming Server 2024-02-04 5.0 MEDIUM N/A
Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via a request to view_broadcast.cgi that does not contain the required parameters.
CVE-2001-1398 1 Linux 1 Linux Kernel 2024-02-04 7.5 HIGH N/A
Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability.
CVE-2003-0707 1 Tomi Manninen 1 Linuxnode 2024-02-04 7.5 HIGH N/A
Buffer overflow in LinuxNode (node) before 0.3.2 allows remote attackers to execute arbitrary code.
CVE-2003-1040 1 Linux 1 Linux Kernel 2024-02-04 2.1 LOW N/A
kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod.
CVE-2003-0575 1 Sgi 1 Irix 2024-02-04 10.0 HIGH N/A
Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTH_UNIX gid list.
CVE-2003-1391 1 Research Triangle Software 1 Cryptobuddy 2024-02-04 7.5 HIGH N/A
RTS CryptoBuddy 1.0 and 1.2 uses a weak encryption algorithm for the passphrase and generates predictable keys, which makes it easier for attackers to guess the passphrase.
CVE-2004-1927 1 Tiki 1 Tikiwiki Cms\/groupware 2024-02-04 5.0 MEDIUM N/A
Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. (dot dot) sequences in the mapfile parameter.