Vulnerabilities (CVE)

Total 253706 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-1704 1 Zeroboard 1 Zeroboard 2023-12-10 5.0 MEDIUM N/A
Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to execute arbitrary PHP code by modifying the _zb_path parameter to reference a URL on a remote web server that contains the code.
CVE-2001-0797 5 Hp, Ibm, Sco and 2 more 6 Hp-ux, Aix, Openserver and 3 more 2023-12-10 10.0 HIGH N/A
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
CVE-2004-1945 1 Kinesphere Corporation 1 Exchange Pop3 2023-12-10 7.5 HIGH N/A
Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field.
CVE-2000-1220 2 Redhat, Sgi 2 Linux, Irix 2023-12-10 10.0 HIGH N/A
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.
CVE-2004-2225 1 Mozilla 1 Firefox 2023-12-10 5.0 MEDIUM N/A
Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button.
CVE-2002-0876 1 Evolvable Corporation 1 Shambala Server 2023-12-10 5.0 MEDIUM N/A
Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
CVE-2001-0411 1 Siemens 1 Reliant Unix 2023-12-10 5.0 MEDIUM N/A
Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant to drop all connections to the source address of the packet.
CVE-1999-0862 1 Postgresql 1 Postgresql 2023-12-10 2.1 LOW N/A
Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file.
CVE-1999-0829 1 Hp 1 Secure Web Console 2023-12-10 5.0 MEDIUM N/A
HP Secure Web Console uses weak encryption.
CVE-2002-1782 1 University Of Washington 1 Uw-imap 2023-12-10 2.1 LOW N/A
The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user.
CVE-2002-0255 1 Arescom 1 Netdsl 2023-12-10 10.0 HIGH N/A
The default configuration of Arescom NetDSL 800 does not require authentication, which allows remote attackers to cause a denial of service or reconfigure the router.
CVE-2002-2182 1 Seunghyun Seo 1 Msn666 2023-12-10 6.4 MEDIUM N/A
Buffer overflow in Seunghyun Seo's MSN666 MSN Sniffer 1.0 and 1.0.1 allows remote attackers to execute arbitrary code via a long MSN packet.
CVE-1999-0833 2 Isc, Sun 3 Bind, Solaris, Sunos 2023-12-10 7.5 HIGH N/A
Buffer overflow in BIND 8.2 via NXT records.
CVE-1999-1034 1 Att 1 Svr4 2023-12-10 7.2 HIGH N/A
Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges.
CVE-2001-0907 1 Linux 1 Linux Kernel 2023-12-10 2.1 LOW N/A
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.
CVE-2002-0735 2 C-note, Padl Software 3 Squid Auth Ldap, Nss Ldap, Pam Ldap 2023-12-10 7.5 HIGH N/A
Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.
CVE-2002-1386 1 Ehud Gavron 1 Tracesroute 2023-12-10 4.6 MEDIUM N/A
Buffer overflow in traceroute-nanog (aka traceroute-ng) may allow local users to execute arbitrary code via a long hostname argument.
CVE-2004-0017 1 Phpgroupware 1 Phpgroupware 2023-12-10 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote attackers to perform unauthorized database operations.
CVE-2002-1552 1 Novell 1 Edirectory 2023-12-10 7.5 HIGH N/A
Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging in from Remote Manager.
CVE-2000-0706 1 Luca Deri 1 Ntop 2023-12-10 10.0 HIGH N/A
Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.