Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29911 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0644 1 Texas Imperial Software 1 Wftpd 2026-06-16 5.0 MEDIUM N/A
WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing.
CVE-2000-0643 1 Itafrica 1 Webactive 2026-06-16 5.0 MEDIUM N/A
Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL.
CVE-2000-0642 1 Itafrica 1 Webactive 2026-06-16 5.0 MEDIUM N/A
The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly requesting the page.
CVE-2000-0641 1 Michael Lamont 1 Savant Webserver 2026-06-16 7.5 HIGH N/A
Savant web server allows remote attackers to execute arbitrary commands via a long GET request.
CVE-2000-0640 1 Steve Poulsen 1 Guildftpd 2026-06-16 7.5 HIGH N/A
Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not.
CVE-2000-0639 1 Sean Macguire 1 Big Brother 2026-06-16 7.5 HIGH N/A
The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary commands by using bbd to upload a file whose extension will cause it to be executed as a CGI script by the web server.
CVE-2000-0638 1 Sean Macguire 1 Big Brother 2026-06-16 10.0 HIGH N/A
bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter.
CVE-2000-0637 1 Microsoft 1 Excel 2026-06-16 4.6 MEDIUM N/A
Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability.
CVE-2000-0636 1 Hp 1 Jetdirect 2026-06-16 5.0 MEDIUM N/A
HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command.
CVE-2000-0635 1 Akopia 1 Minivend 2026-06-16 7.5 HIGH N/A
The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters.
CVE-2000-0634 1 Stalker 1 Communigate Pro 2026-06-16 5.0 MEDIUM N/A
The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0633 3 Conectiva, Mandrakesoft, Redhat 3 Linux, Mandrake Linux, Linux 2026-06-16 2.1 LOW N/A
Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.
CVE-2000-0632 1 Lsoft 1 Listserv 2026-06-16 7.5 HIGH N/A
Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string.
CVE-2000-0631 1 Microsoft 2 Internet Information Server, Internet Information Services 2026-06-16 5.0 MEDIUM N/A
An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the "Absent Directory Browser Argument" vulnerability.
CVE-2000-0630 1 Microsoft 2 Internet Information Server, Internet Information Services 2026-06-16 5.0 MEDIUM N/A
IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.
CVE-2000-0629 1 Sun 1 Java System Web Server 2026-06-16 7.5 HIGH N/A
The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet.
CVE-2000-0628 1 Joshua Chamas 1 Apache Asp 2026-06-16 7.5 HIGH N/A
The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files.
CVE-2000-0627 1 Blackboard 1 Courseinfo 2026-06-16 7.5 HIGH N/A
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl.
CVE-2000-0626 1 Computer Software Manufaktur 1 Alibaba 2026-06-16 5.0 MEDIUM N/A
Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request.
CVE-2000-0625 1 Netzero 1 Zeroport 2026-06-16 4.6 MEDIUM N/A
NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password.