Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29834 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-1587 1 Monolith Productions 4 Alien Versus Predator, Blood, No One Lives Forever and 1 more 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlier, (3) No one lives forever 1.004 and earlier and (4) Shogo 2.2 and earlier allows remote attackers to cause a denial of service (application crash) via a long secure Gamespy query.
CVE-2004-0813 1 Ide-cd 1 Ide-cd 2025-04-03 2.1 LOW N/A
Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.
CVE-2006-3339 1 Atlassian 1 Jira 2025-04-03 5.0 MEDIUM N/A
secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message.
CVE-2006-2859 1 Mywebland 1 Mybloggie 2025-04-03 7.5 HIGH N/A
PHP remote file inclusion vulnerability in MyBloggie 2.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mybloggie_root_path parameter to (1) admin.php or (2) scode.php. NOTE: this issue has been disputed in multiple third party followups, which say that the MyBloggie source code does not demonstrate the issue, so it might be the result of another module. CVE analysis as of 20060605 agrees with the dispute. In addition, scode.php is not part of the MyBloggie distribution
CVE-2000-0894 1 Watchguard 1 Soho Firewall 2025-04-03 10.0 HIGH N/A
HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.
CVE-2002-0585 1 Hp 1 Hp-ux 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service.
CVE-2001-0854 1 Francisco Burzi 1 Php-nuke 2025-04-03 5.0 MEDIUM N/A
PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user.
CVE-2006-0593 1 Php Fusion 1 Php Fusion 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the (1) shout_name field in shoutbox_panel.php and the (2) comments field in comments_include.php.
CVE-2001-0478 1 Phpmyadmin 1 Phpmyadmin 2025-04-03 7.5 HIGH N/A
Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.
CVE-2004-1199 1 Apple 1 Safari 2025-04-03 5.0 MEDIUM N/A
Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.
CVE-2004-0609 1 Rssh 1 Rssh 2025-04-03 5.0 MEDIUM N/A
rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail.
CVE-2002-1159 1 Canna 1 Canna 2025-04-03 6.4 MEDIUM N/A
Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.
CVE-2001-0836 1 Oracle 1 Application Server Web Cache 2025-04-03 7.5 HIGH N/A
Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVE-2005-3035 1 Compuware 1 Driverstudio 2025-04-03 5.0 MEDIUM N/A
Compuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote attackers to cause a denial of service (reboot) via a UDP packet sent directly to port 9110.
CVE-2005-3285 1 Comersus Open Technologies 1 Comersus Backoffice Plus 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web script or HTML via the (1) forwardTo1, (2) forwardTo2, (3) nameFT1, or (4) nameFT2 parameters.
CVE-2004-0518 1 Apple 2 Mac Os X, Mac Os X Server 2025-04-03 7.5 HIGH N/A
Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attack vectors.
CVE-2000-0927 1 Wquinn 1 Quotaadvisor 2025-04-03 4.6 MEDIUM N/A
WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions.
CVE-2005-1357 1 Text.cgi 1 Text.cgi 2025-04-03 5.0 MEDIUM N/A
text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
CVE-2006-4353 1 Sun 1 Java System Content Delivery Server 2025-04-03 5.0 MEDIUM N/A
Unspecified vulnerability in Sun Java System Content Delivery Server 4.0, 4.1, and 5.0 allows local and remote attackers to read data from arbitrary files via unspecified vectors.
CVE-2005-2973 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a denial of service (infinite loop and crash).