Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29798 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-0033 1 Sun 2 Solaris, Sunos 2025-04-03 10.0 HIGH N/A
Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.
CVE-2003-1167 1 Gernot Stocker 1 Kpopup 2025-04-03 7.2 HIGH N/A
misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program.
CVE-2005-2868 1 Ziptorrent 1 Ziptorrent 2025-04-03 2.1 LOW N/A
ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows local users to obtain sensitive information such as proxy server information and passwords.
CVE-1999-1393 1 Apple 1 Macos 2025-04-03 4.6 MEDIUM N/A
Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally inaccessible.
CVE-2004-2270 1 Ibm 1 Parallel Environment 2025-04-03 7.2 HIGH N/A
Unknown vulnerability in IBM Parallel Environment (PE) 3.2 and 4.1 allows attackers to execute arbitrary commands as root via unknown vectors in the sample code.
CVE-1999-1185 1 Sco 5 Cmw, Internet Faststart, Open Desktop and 2 more 2025-04-03 7.2 HIGH N/A
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
CVE-2005-3063 1 Unu Networks 1 Mailgust 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email field on the password reminder page.
CVE-2003-1011 1 Apple 1 Mac Os X 2025-04-03 7.2 HIGH N/A
Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the system is booting, which crashes the init process and leaves the user in a root shell.
CVE-1999-0341 2 Debian, Slackware 2 Debian Linux, Slackware Linux 2025-04-03 7.2 HIGH N/A
Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.
CVE-2006-1700 1 Aweb 1 Scripts Seller 2025-04-03 7.5 HIGH N/A
Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attackers to bypass authentication.
CVE-1999-0019 7 Data General, Ibm, Ncr and 4 more 10 Dg Ux, Aix, Mp-ras and 7 more 2025-04-03 5.0 MEDIUM N/A
Delete or create a file via rpc.statd, due to invalid information.
CVE-1999-0209 1 Sun 1 Sunos 2025-04-03 5.0 MEDIUM N/A
The SunView (SunTools) selection_svc facility allows remote users to read files.
CVE-1999-0916 1 Webtrends 5 Webtrends Enterprise Suite, Webtrends For Firewalls, Webtrends Log Analyzer and 2 more 2025-04-03 2.1 LOW N/A
WebTrends software stores account names and passwords in a file which does not have restricted access permissions.
CVE-2003-0360 1 Debian 1 Debian Linux 2025-04-03 7.5 HIGH N/A
Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.
CVE-2006-0915 1 Mozilla 1 Bugzilla 2025-04-03 7.5 HIGH N/A
Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2) maxattachmentsize parameters in attachment.cgi, which allows remote attackers to trigger a SQL error.
CVE-1999-0298 2 Slackware, Sun 2 Slackware Linux, Sunos 2025-04-03 7.5 HIGH N/A
ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.
CVE-2006-3604 1 Seyeon 1 Flexwatch Network Camera 2025-04-03 7.5 HIGH N/A
Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access restrictions for (1) admin/aindex.asp or (2) admin/aindex.html via a .. (dot dot) and encoded / (%2f) sequence in the URL.
CVE-2006-0726 1 Cpg-nuke 1 Dragonfly Cms 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a list of online users.
CVE-2005-0497 1 Adp 1 Elite System Max 9000 2025-04-03 7.2 HIGH N/A
ADP Elite System Max 9000 allows remote authenticated users to gain privileges by uploading a .profile that sets the ADPROOT environment variable to the root directory.
CVE-2002-0883 1 Compaq 1 Proliant Bl E-class Integrated Administrator Firmware 2025-04-03 7.2 HIGH N/A
Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities.