Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 28647 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-1749 1 Toplayer 1 Attack Mitigator 2023-12-10 5.0 MEDIUM N/A
Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service (CPU consumption) via a large number of HTTP requests.
CVE-2002-1544 1 Cooolsoft 1 Personal Ftp Server 2023-12-10 6.4 MEDIUM N/A
Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.
CVE-2000-0354 1 Lee Mcloughlin 1 Mirror 2023-12-10 5.0 MEDIUM N/A
mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.
CVE-2004-1518 1 Phorum 1 Phorum 2023-12-10 4.6 MEDIUM N/A
SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter.
CVE-2002-2100 1 Microsoft 1 Outlook 2023-12-10 5.0 MEDIUM N/A
Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
CVE-2003-1318 1 Twilight Utilities 1 Twilight Webserver 2023-12-10 7.8 HIGH N/A
Twilight Webserver 1.3.3.0 allows remote attackers to cause a denial of service (application crash) via a GET request for a long URI, a different vulnerability than CVE-2004-2376.
CVE-2003-1104 1 Ibm 1 Tivoli Firewall Toolbox 2023-12-10 10.0 HIGH N/A
Buffer overflow in IBM Tivoli Firewall Toolbox (TFST) 1.2 allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2001-0102 1 Apple 1 Macos 2023-12-10 7.2 HIGH N/A
"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password.
CVE-2001-0003 1 Microsoft 4 Office, Windows 2000, Windows Me and 1 more 2023-12-10 5.0 MEDIUM N/A
Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.
CVE-2004-1990 1 Aldo Vargas 1 Aldos Web Server 2023-12-10 5.0 MEDIUM N/A
Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request.
CVE-2001-1259 1 Avaya 1 Argent Office 2023-12-10 5.0 MEDIUM N/A
Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload.
CVE-1999-1229 1 Id Software 1 Quake 2 Server 2023-12-10 2.1 LOW N/A
Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file.
CVE-1999-1508 1 Tek 5 Phaser Network Printer 740, Phaser Network Printer 750, Phaser Network Printer 750dp and 2 more 2023-12-10 10.0 HIGH N/A
Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html.
CVE-1999-0838 1 Deerfield 1 Serv-u Ftp-server 2023-12-10 5.0 MEDIUM N/A
Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
CVE-2002-2145 1 Savant 1 Savant Webserver 2023-12-10 7.5 HIGH N/A
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.
CVE-2003-0660 1 Microsoft 4 Windows 2000, Windows 2003 Server, Windows Nt and 1 more 2023-12-10 7.5 HIGH N/A
The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval.
CVE-2004-1800 1 Sysbotz 1 Simpledata 2023-12-10 7.5 HIGH N/A
Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie.
CVE-1999-1069 1 Icat 1 Electronic Commerce Suite 2023-12-10 5.0 MEDIUM N/A
Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.
CVE-2001-0256 1 Fastream 1 Ftp\+\+ Server 2023-12-10 7.5 HIGH N/A
FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username.
CVE-2000-0284 1 University Of Washington 1 Imap 2023-12-10 7.5 HIGH N/A
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.