Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29855 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-0011 1 Kde 1 Kde 2026-04-16 10.0 HIGH N/A
Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows.
CVE-2002-1293 1 Microsoft 1 Java Virtual Machine 2026-04-16 7.5 HIGH N/A
The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader.CabCracker), which allows remote attackers to bypass the security checks that are performed by the load() method.
CVE-2000-0799 1 Sgi 1 Irix 2026-04-16 3.7 LOW N/A
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file.
CVE-2004-1650 1 D-link 1 Dcs-900 Internet Camera 2026-04-16 7.5 HIGH N/A
D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote attackers to change the IP address of the camera via a UDP broadcast packet.
CVE-2001-0302 1 Pi3 1 Pi3web 2026-04-16 5.0 MEDIUM N/A
Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL.
CVE-2001-1337 1 Beck Ipc Gmbh 1 Ipc At Chip Embedded-webserver 2026-04-16 5.0 MEDIUM N/A
Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request.
CVE-2005-0291 1 Netgear 1 Fvs318 2026-04-16 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via a blocked URL phrase.
CVE-1999-1207 1 Network General 1 Netxray 2026-04-16 7.5 HIGH N/A
Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.
CVE-1999-0525 2026-04-16 N/A N/A
IP traceroute is allowed from arbitrary hosts.
CVE-2000-0353 1 University Of Washington 1 Pine 2026-04-16 10.0 HIGH N/A
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.
CVE-1999-0246 1 Hp 1 Hp-ux 2026-04-16 10.0 HIGH N/A
HP Remote Watch allows a remote user to gain root access.
CVE-2001-0016 1 Microsoft 1 Windows Nt 2026-04-16 7.2 HIGH N/A
NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access.
CVE-2005-1223 1 Ocean12 Technologies 1 Calendar Manager Pro 2026-04-16 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Admin_id field.
CVE-2005-3769 1 Php Download Manager 1 Php Download Manager 2026-04-16 7.5 HIGH N/A
SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVE-2004-0375 1 Symantec 4 Client Firewall, Client Security, Norton Internet Security and 1 more 2026-04-16 5.0 MEDIUM N/A
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.
CVE-2004-1353 1 Sun 2 Solaris, Sunos 2026-04-16 7.2 HIGH N/A
Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control (RBAC), allows local users to execute certain commands with additional privileges.
CVE-2006-3355 1 Mpg123 1 Mpg123 2026-04-16 7.5 HIGH N/A
Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strncpy function. NOTE: This appears to be the result of an incomplete patch for CVE-2004-0982.
CVE-2006-1773 1 Phpkit 1 Phpkit 2026-04-16 6.4 MEDIUM N/A
SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbitrary SQL commands via the contentid parameter, possibly involving content/news.php.
CVE-2003-0695 1 Openbsd 1 Openssh 2026-04-16 7.5 HIGH N/A
Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693.
CVE-2006-4612 1 John Andersson 1 Zixforum 2026-04-16 7.5 HIGH N/A
SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands via the RepId parameter.