Vulnerabilities (CVE)

Total 260566 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-0241 1 Frontrange 1 Goldmine 2024-02-04 7.5 HIGH N/A
FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is rendered in IE using a less secure zone.
CVE-1999-1008 2 Freebsd, Mandrakesoft 2 Freebsd, Mandrake Linux 2024-02-04 7.2 HIGH N/A
xsoldier program allows local users to gain root access via a long argument.
CVE-2003-1502 1 Snert.com 1 Mod Throttle 2024-02-04 4.6 MEDIUM N/A
mod_throttle 3.0 allows local users with Apache privileges to access shared memory that points to a file that is writable by the apache user, which could allow local users to gain privileges.
CVE-2003-0501 1 Linux 1 Linux Kernel 2024-02-04 2.1 LOW N/A
The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries.
CVE-1999-0040 7 Bsdi, Freebsd, Hp and 4 more 10 Bsd Os, Freebsd, Hp-ux and 7 more 2024-02-04 7.2 HIGH N/A
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
CVE-2001-0102 1 Apple 1 Macos 2024-02-04 7.2 HIGH N/A
"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password.
CVE-1999-1538 1 Microsoft 1 Internet Information Server 2024-02-04 2.1 LOW N/A
When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password.
CVE-2000-0019 1 Ipswitch 1 Imail 2024-02-04 2.1 LOW N/A
IMail POP3 daemon uses weak encryption, which allows local users to read files.
CVE-2004-1459 1 Cisco 2 Secure Access Control Server, Secure Acs Solution Engine 2024-02-04 5.0 MEDIUM N/A
Cisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible Authentication Protocol (LEAP) RADIUS proxy, allows remote attackers to cause a denial of service (device crash) via certain LEAP authentication requests.
CVE-2001-1225 1 Hughes 1 Msql 2024-02-04 2.1 LOW N/A
Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, which causes miniSQL to crash when the table is queried.
CVE-2003-0283 1 Phorum 1 Phorum 2024-02-04 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a message with a "<<" before a tag name in the (1) subject, (2) author's name, or (3) author's e-mail.
CVE-2002-0334 1 Xtell 1 Xtell 2024-02-04 2.1 LOW N/A
xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a symlink attack on the .xtell-log file.
CVE-1999-0041 5 Cray, Gnu, Ibm and 2 more 6 Unicos, Unicos Max, Libc and 3 more 2024-02-04 7.5 HIGH N/A
Buffer overflow in NLS (Natural Language Service).
CVE-2000-0906 1 Moreover.com 1 Cached Feed.cgi Script 2024-02-04 5.0 MEDIUM N/A
Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters.
CVE-2000-0600 2 Netscape, Novell 2 Enterprise Server, Netware 2024-02-04 7.5 HIGH N/A
Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL.
CVE-2001-0325 1 Qnx 1 Rtp 2024-02-04 7.5 HIGH N/A
Buffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large number of arguments to the stat command.
CVE-2004-2123 1 Nextplace 1 E-commerce Asp Engine 2024-02-04 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in Nextplace.com E-Commerce ASP Engine allow remote attackers to inject arbitrary web script or HTML via the (1) level parameter of productdetail.asp, (2) searchKey parameter of searchresults.asp, and possibly (3) level parameter of ListCategories.asp.
CVE-2002-1003 1 Mywebserver 1 Mywebserver 2024-02-04 7.5 HIGH N/A
Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVE-2003-1487 1 Phorum 1 Phorum 2024-02-04 10.0 HIGH N/A
Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.
CVE-2004-0031 1 Phpgedview 1 Phpgedview 2024-02-04 7.5 HIGH N/A
PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.