Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29551 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-0118 1 Ibm 3 Lotus Domino, Lotus Domino Enterprise Server, Lotus Notes 2025-04-03 5.0 MEDIUM N/A
Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service (deep recursion leading to stack overflow and crash) via long formulas.
CVE-2006-1949 1 Nicplex 1 Plexcart 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2004-2516 1 Myserver 1 Myserver 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET command with a large number of "./" sequences followed by "../" sequences.
CVE-2006-4420 1 Phaos 1 Phaos 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in include_lang.php in Phaos 0.9.2 allows remote attackers to include arbitrary local files via ".." sequences in the lang parameter.
CVE-2005-1417 1 Maxwebportal 1 Maxwebportal 2025-04-03 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp.
CVE-2004-1878 1 Linbit Technologies 1 Linbox Officeserver 2025-04-03 5.0 MEDIUM N/A
LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a direct request to admin/user.pl preceded by // (double leading slash).
CVE-2002-1907 1 Telcondex 1 Simplewebserver 2025-04-03 5.0 MEDIUM N/A
TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
CVE-1999-0217 1 Sun 1 Sunos 2025-04-03 5.0 MEDIUM N/A
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
CVE-2006-3715 1 Oracle 1 Collaboration Suite 2025-04-03 10.0 HIGH N/A
Unspecified vulnerability in Calendar for Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka Oracle Vuln# OCS01.
CVE-2006-0968 1 Ncp Network Communications 1 Secure Client 2025-04-03 7.2 HIGH N/A
The ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to execute arbitrary code by modifying the connect.bat script, which is automatically executed by the service after a connection is established.
CVE-2005-0646 1 Php Arena 1 Panews 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter.
CVE-2006-0043 1 Suse 1 Suse Linux 2025-04-03 4.6 MEDIUM N/A
Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks.
CVE-1999-1234 1 Microsoft 1 Windows Nt 2025-04-03 5.0 MEDIUM N/A
LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDomainUsers, and (3) SamrQueryDomainInfo.
CVE-2002-0193 1 Microsoft 1 Internet Explorer 2025-04-03 7.5 HIGH N/A
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.
CVE-2006-2326 1 Onlyscript.info 1 Online Universal Payment System Script 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to read arbitrary files via directory traversal sequences in the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2000-1032 1 Checkpoint 1 Firewall-1 2025-04-03 5.0 MEDIUM N/A
The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall.
CVE-2005-0876 1 Dnsmasq 1 Dnsmasq 2025-04-03 5.0 MEDIUM N/A
Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file.
CVE-2006-3976 1 Broadcom 1 Etrust Antivirus Webscan 2025-04-03 9.3 HIGH N/A
Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 allows remote attackers to install arbitrary files.
CVE-2002-1759 1 Phprojekt 1 Phprojekt 2025-04-03 5.0 MEDIUM N/A
The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.
CVE-2006-4675 1 Andreas Gohr 1 Dokuwiki 2025-04-03 7.5 HIGH N/A
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors.