Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29775 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-3821 1 Adaptive Technology Resource Centre 1 Atutor 2025-04-03 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in (a) index_list.php and (2) year, (3) month, and (4) day parameter in (b) registration.php.
CVE-2000-0442 2 Qualcomm, Sun 3 Qpopper, Cobalt Raq 2, Cobalt Raq 3i 2025-04-03 7.5 HIGH N/A
Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command.
CVE-2005-0494 1 Thomson 1 Thomson Cable Modem 2025-04-03 7.5 HIGH N/A
The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request.
CVE-2005-3068 1 Eric Integrated Development Environment 1 Eric Integrated Development Environment 2025-04-03 10.0 HIGH N/A
Unspecified vulnerability in Eric Integrated Development Environment (eric3) before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."
CVE-2004-1764 1 Hp 1 Hp-ux 2025-04-03 7.2 HIGH N/A
Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors.
CVE-2001-0689 1 Trend Micro 1 Virus Control System 2025-04-03 7.5 HIGH N/A
Vulnerability in TrendMicro Virus Control System 1.8 allows a remote attacker to view configuration files and change the configuration via a certain CGI program.
CVE-2005-2778 1 Mybulletinboard 1 Mybulletinboard 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL statements via the fid parameter.
CVE-2004-0768 1 Greg Roelofs 1 Libpng3 2025-04-03 7.5 HIGH N/A
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
CVE-2006-3411 1 Tor 1 Tor 2025-04-03 6.4 MEDIUM N/A
TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, which makes it easier for remote attackers to conduct brute force attacks on the encryption keys.
CVE-2002-0447 1 Xerver 1 Xerver 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request.
CVE-2003-1108 1 Alcatel-lucent 1 Omnipcx 2025-04-03 5.0 MEDIUM N/A
The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
CVE-2005-2311 1 Sms 1 Sms 2025-04-03 2.1 LOW N/A
SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) request2 temporary files.
CVE-2006-4788 1 Telekorn 1 Signkorn Guestbook 2025-04-03 5.1 MEDIUM N/A
PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled and _SESSION[permission] parameter is set to "yes", allows remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter.
CVE-2002-0214 1 Intel 1 Intel Pro Wireless 2011b Lan Usb Device Driver 2025-04-03 2.1 LOW N/A
Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent Privacy) key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key.
CVE-2005-0198 1 University Of Washington 1 Uw-imap 2025-04-03 7.5 HIGH N/A
A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.
CVE-2004-0115 1 Microsoft 1 Virtual Pc 2025-04-03 4.6 MEDIUM N/A
VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file.
CVE-2001-0241 1 Microsoft 1 Windows 2000 2025-04-03 10.0 HIGH N/A
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.
CVE-2004-0629 1 Adobe 2 Acrobat, Acrobat Reader 2025-04-03 7.5 HIGH N/A
Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string.
CVE-1999-0022 6 Bsdi, Freebsd, Hp and 3 more 7 Bsd Os, Freebsd, Hp-ux and 4 more 2025-04-03 7.2 HIGH 7.8 HIGH
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
CVE-2005-3577 1 Walla Telesite 1 Walla Telesite 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting vulnerability (XSS) in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the sug parameter.