Vulnerabilities (CVE)

Filtered by CWE-20
Total 9777 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-1425 1 Cpanel 1 Cpanel 2023-12-10 10.0 HIGH N/A
guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.
CVE-2002-2354 1 Netgear 1 Fm114p 2023-12-10 7.8 HIGH N/A
Netgear FM114P firmware 1.3 wireless firewall allows remote attackers to cause a denial of service (crash or hang) via a large number of TCP connection requests.
CVE-1999-0265 2 Microware, Novell 2 Os-9, Netware 2023-12-10 5.0 MEDIUM N/A
ICMP redirect messages may crash or lock up a host.
CVE-2003-1209 1 Monkey-project 1 Monkey 2023-12-10 5.0 MEDIUM N/A
The Post_Method function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service (crash) via a POST request without a Content-Type header.
CVE-2003-1450 1 Bitchx 1 Bitchx 2023-12-10 5.0 MEDIUM N/A
BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via a malformed RPL_NAMREPLY numeric 353 message.
CVE-2004-0840 1 Microsoft 3 Exchange Server, Windows Server 2003, Windows Xp 2023-12-10 10.0 HIGH N/A
The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.
CVE-2003-0567 1 Cisco 3 Ios, Ons 15454 Optical Transport Platform, Optical Networking Systems Software 2023-12-10 7.8 HIGH N/A
Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.
CVE-1999-0995 1 Microsoft 1 Windows Nt 2023-12-10 7.8 HIGH N/A
Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."
CVE-2002-2329 1 Mirabilis 1 Icq 2023-12-10 7.8 HIGH N/A
ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service (CPU consumption or crash) via a message with a large number of emoticons.
CVE-2002-2236 1 Apt-www-proxy 1 Apt-www-proxy 2023-12-10 10.0 HIGH N/A
Format string vulnerability in the awp_log function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code.
CVE-2003-1490 1 Sonicwall 3 Pro100, Pro200, Pro300 2023-12-10 7.8 HIGH N/A
SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long HTTP POST to the internal interface, possibly due to a buffer overflow.
CVE-2002-2420 1 Independent Solution 2 Simple Site Searcher, Super Site Searcher 2023-12-10 7.5 HIGH N/A
site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.
CVE-2003-1364 1 Aprelium Technologies 1 Abyss Web Server 2023-12-10 8.5 HIGH N/A
Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service (crash) via an HTTP GET message with empty (1) Connection or (2) Range fields.
CVE-2004-1777 1 Skype Technologies 1 Skype 2023-12-10 5.0 MEDIUM N/A
A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114.
CVE-2001-0566 1 Cisco 1 Catalyst 2900 2023-12-10 5.0 MEDIUM N/A
Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP is disabled.
CVE-2002-2328 1 Microsoft 1 Windows 2000 2023-12-10 7.1 HIGH N/A
Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service (hang) via an LDAP client that sets the page length to zero during a large request.
CVE-2003-1402 1 Kietu 1 Kietu 2023-12-10 7.5 HIGH N/A
PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the url_hit parameter, a different vulnerability than CVE-2006-5015.