Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29817 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-0786 1 Openbsd 1 Openssh 2025-04-03 10.0 HIGH N/A
The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges.
CVE-2000-0307 1 Sco 3 Open Desktop, Openserver, Unixware 2025-04-03 5.0 MEDIUM N/A
Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.
CVE-2004-1228 1 Sugarcrm 1 Sugar Sales 2025-04-03 6.4 MEDIUM N/A
The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative password in cleartext from an installation form, or to cause a denial of service by changing database settings to the default.
CVE-2006-0090 1 Idv Directory Viewer 1 Idv Directory Viewer 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows remote attackers to view arbitrary directory contents via a .. (dot dot) in the dir parameter.
CVE-2002-1267 1 Apple 1 Mac Os X 2025-04-03 5.0 MEDIUM N/A
Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."
CVE-2000-1180 1 Oracle 1 Oracle8i 2025-04-03 4.6 MEDIUM N/A
Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.
CVE-2000-0801 1 Hp 1 Hp-ux 2025-04-03 7.2 HIGH N/A
Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option.
CVE-2006-0430 1 Bea 1 Weblogic Server 2025-04-03 5.0 MEDIUM N/A
Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when connection filters are enabled, cause the server to run more slowly, which makes it easier for remote attackers to cause a denial of service (server slowdown).
CVE-2001-0946 1 Redhat 1 Linux 2025-04-03 3.6 LOW N/A
apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins.
CVE-2004-1389 1 Veritas 1 Netbackup 2025-04-03 6.0 MEDIUM N/A
Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.
CVE-2006-3403 1 Samba 1 Samba 2025-04-03 5.0 MEDIUM N/A
The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests.
CVE-2005-1661 1 Jeuce 1 Jeuce Personal Web Server 2025-04-03 5.0 MEDIUM N/A
Jeuce Personal Webserver 2.13 allows remote attackers to cause a denial of service (server crash) via a long GET request, possibly triggering a buffer overflow.
CVE-1999-1041 1 Sco 2 Openserver, Unix 2025-04-03 7.2 HIGH N/A
Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.
CVE-2004-2179 1 Microsoft 2 Frontpage, Ie 2025-04-03 5.0 MEDIUM N/A
asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a JPEG image with maximum height and width values.
CVE-2004-2635 1 Mcafee 1 Security Installer Control System 2025-04-03 7.5 HIGH N/A
An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue() method.
CVE-2002-0416 1 Sh39 1 Mailserver 2025-04-03 10.0 HIGH N/A
Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port.
CVE-2006-1210 1 Micromuse 1 Netcool Neusecure 2025-04-03 7.5 HIGH N/A
The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body.phtml, which allows remote attackers to gain privileges by reading the source. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.
CVE-2005-3888 1 Gadu-gadu 1 Gadu-gadu Instant Messenger 2025-04-03 7.8 HIGH N/A
Memory leak in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code other than 2 and a large size field, which allocates memory for the packet but does not free it after the packet has been dropped.
CVE-2002-0303 1 Novell 1 Groupwise 2025-04-03 4.6 MEDIUM N/A
GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password.
CVE-2001-0228 1 Goahead Software 1 Goahead Webserver 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request.