Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29801 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-0548 1 Sun 1 Solaris Answerbook2 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function.
CVE-2000-1008 1 Palm 1 Palm Os 2025-04-03 4.6 MEDIUM N/A
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
CVE-2002-1041 1 Ibm 1 Aix 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames.
CVE-2005-2954 1 Adaptive Technology Resource Centre 1 Atutor 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands via the email field.
CVE-2005-1095 1 Ocean12 Technologies 1 Membership Manager Pro 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVE-2006-4744 1 Abidia 2 Abidia Wireless, O-anywhere 2025-04-03 5.0 MEDIUM N/A
Abidia (1) O-Anywhere and (2) Abidia Wireless transmit authentication credentials in cleartext, which allows remote attackers to obtain sensitive information by sniffing.
CVE-2006-1265 1 Xhawk.net 1 Discussion 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execute arbitrary SQL commands via the view parameter.
CVE-2006-1494 1 Php 1 Php 2025-04-03 2.6 LOW N/A
Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.
CVE-2004-0074 1 Michael Bischoff 1 Xsok 2025-04-03 4.6 MEDIUM N/A
Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command line argument, a different vulnerability than CVE-2003-0949.
CVE-1999-0714 1 Digital 1 Unix 2025-04-03 2.1 LOW N/A
Vulnerability in Compaq Tru64 UNIX edauth command.
CVE-2005-0271 1 Photopost 1 Reviewpost Php Pro 2025-04-03 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php.
CVE-2004-2296 1 Francisco Burzi 1 Php-nuke 2025-04-03 5.0 MEDIUM N/A
The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which generates an error message.
CVE-2000-0918 1 Kde 1 Kvt 2025-04-03 7.2 HIGH N/A
Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters.
CVE-2003-0452 1 Gunnar Ritter 1 Osh 2025-04-03 4.6 MEDIUM N/A
Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via (1) long environment variables or (2) long "file redirections."
CVE-2004-0431 1 Apple 1 Quicktime 2025-04-03 5.1 MEDIUM N/A
Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow.
CVE-2003-1068 1 Sun 2 Solaris, Sunos 2025-04-03 7.2 HIGH N/A
Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a different vulnerability than CVE-2003-1082.
CVE-2003-0524 1 Knoppix 1 Knoppix 2025-04-03 6.2 MEDIUM N/A
Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qt_plugins_3.0rc temporary file in the .qt directory.
CVE-2004-0268 1 Evolutionx 1 Evolutionx 2025-04-03 5.0 MEDIUM N/A
Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service (hang) via (1) a long cd command to the FTP server, or (2) a long dir command to the telnet server.
CVE-2000-0580 1 Microsoft 1 Windows 2000 2025-04-03 5.0 MEDIUM N/A
Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization.
CVE-2005-2113 1 Xoops 1 Xoops 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost method.