Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 28643 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0768 1 Microsoft 2 Ie, Internet Explorer 2023-12-10 2.6 LOW N/A
A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability.
CVE-2001-1073 1 Webridge 1 Px Application Suite 2023-12-10 5.0 MEDIUM N/A
Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR.
CVE-2003-0301 1 Microsoft 1 Outlook Express 2023-12-10 5.0 MEDIUM N/A
The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.
CVE-2004-2231 1 Zero G 1 Installanywhere 2023-12-10 1.2 LOW N/A
Zero G Software InstallAnywhere 5.0.6, 5.0.7, and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) persistent_state or (2) env.properties.X temporary files.
CVE-2000-0771 1 Microsoft 1 Windows 2000 2023-12-10 2.1 LOW N/A
Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability.
CVE-2002-1933 1 Microsoft 1 Windows 2000 Terminal Services 2023-12-10 7.2 HIGH N/A
The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window.
CVE-1999-0127 1 Hp 1 Hp-ux 2023-12-10 7.2 HIGH N/A
swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access.
CVE-2003-0393 1 Privacyware 1 Privatefirewall 2023-12-10 5.0 MEDIUM N/A
Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans.
CVE-2002-0856 1 Oracle 2 Database Server, Oracle9i 2023-12-10 5.0 MEDIUM N/A
SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature.
CVE-2001-0911 2 Francisco Burzi, Postnuke Software Foundation 2 Php-nuke, Postnuke 2023-12-10 7.5 HIGH N/A
PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it.
CVE-1999-0481 1 Openbsd 1 Openbsd 2023-12-10 5.0 MEDIUM N/A
Denial of service in "poll" in OpenBSD.
CVE-1999-1058 1 Arcane Software 1 Vermillion Ftp Daemon 2023-12-10 7.5 HIGH N/A
Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands.
CVE-2003-0319 1 Smartmax Software 1 Mailmax 2023-12-10 7.5 HIGH N/A
Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrary code via a long SELECT command.
CVE-2001-1153 1 Caldera 1 Openunix 2023-12-10 7.2 HIGH N/A
lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.
CVE-1999-1109 1 Sendmail 1 Sendmail 2023-12-10 5.0 MEDIUM N/A
Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.
CVE-2004-1539 1 Gearbox Software 1 Halo Combat Evolved 2023-12-10 5.0 MEDIUM N/A
Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game server reply, which triggers a NULL dereference.
CVE-2001-0690 4 Conectiva, Debian, Redhat and 1 more 4 Linux, Debian Linux, Linux and 1 more 2023-12-10 7.5 HIGH N/A
Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers.
CVE-2001-0381 1 Pgp 1 Openpgp 2023-12-10 4.6 MEDIUM N/A
The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message signed with the signature key.
CVE-1999-0036 1 Sgi 1 Irix 2023-12-10 7.2 HIGH N/A
IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
CVE-2004-0086 1 Apple 1 Mac Os X 2023-12-10 5.0 MEDIUM N/A
Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085.