Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29561 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-1765 1 Mod Security 1 Mod Security 2025-04-03 7.5 HIGH N/A
Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests.
CVE-2001-1007 1 Starfish 1 Truesync Desktop 2025-04-03 5.0 MEDIUM N/A
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack.
CVE-2006-4991 1 Rsa 1 Keon Certificate Authority Manager 2025-04-03 3.6 LOW N/A
RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority (CA) activities by modifying CA auditor logs without detection by (1) modifying or deleting a <LOG BLOCK> and its signature from the XML log in a way that is not detected by the integrity check function that operates on the entire pool, or (2) modifying entries in the live log file, which is only signed during rotation.
CVE-2005-0746 1 Novell 1 Ichain 2025-04-03 5.0 MEDIUM N/A
The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.
CVE-2003-1126 1 Sun 1 One Web Server 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service.
CVE-2002-1536 1 Hans Persson 1 Molly 2025-04-03 7.5 HIGH N/A
Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) the $words or $text variables in sms.pl, or (4) the $server or $printer variables in hpled.pl.
CVE-2005-1591 1 Sun 2 Solaris, Sunos 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in NIS+ on Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (rpc.nisd disabled and NIS+ unavailable) via unknown vectors.
CVE-2005-2239 1 Oftpd 1 Oftpd 2025-04-03 5.0 MEDIUM N/A
oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\0) characters.
CVE-2006-4879 1 David Bennett 1 Php-post 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in profile.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter.
CVE-2006-0404 1 Mike Macgirvin 1 Note-a-day Weblog 2025-04-03 5.0 MEDIUM N/A
Note-A-Day Weblog 2.2 stores sensitive data under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to archive/.phpass-admin, which contains encrypted passwords.
CVE-2000-1201 1 Checkpoint 1 Firewall-1 2025-04-03 5.0 MEDIUM N/A
Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.
CVE-2005-2852 1 Novell 1 Netware 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an incorrect password length, as exploited by the "worm.rbot.ccc" worm.
CVE-2005-0659 1 Phpbb Group 1 Phpbb 2025-04-03 5.0 MEDIUM N/A
phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message.
CVE-2005-1339 1 Apple 2 Mac Os X, Mac Os X Server 2025-04-03 7.5 HIGH N/A
lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name.
CVE-2002-0587 1 Aol 1 Aol Server 2025-04-03 7.5 HIGH N/A
Buffer overflow in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to cause a denial of service or execute arbitrary code via the Error or Notice parameters.
CVE-2003-0476 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.
CVE-2006-1706 1 Kansok Communications 1 Shopweezle 2025-04-03 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) itemID parameter to (a) login.php and (b) memo.php; and the (2) itemgr, (3) brandID, and (4) album parameters to (c) index.php. NOTE: this issue also produces resultant full path disclosure from invalid SQL queries.
CVE-2001-0130 1 Lotus 2 Domino R5 Client, Domino R5 Server 2025-04-03 10.0 HIGH N/A
Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed font size specifier.
CVE-2000-0306 1 Sco 1 Openserver 2025-04-03 10.0 HIGH N/A
Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
CVE-2005-1445 1 Sitepanel 1 Sitepanel 2025-04-03 6.4 MEDIUM N/A
Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to (1) delete arbitrary files via the id parameter in a rmattach action to 5.php, or (2) read arbitrary files via the lang parameter to index.php.