Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29817 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0862 1 Allaire 1 Spectra 2025-04-03 6.4 MEDIUM N/A
Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information.
CVE-2002-1434 1 Kerio 1 Kerio Mailserver 2025-04-03 6.8 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs.
CVE-2004-0926 2 Apple, Easy Software Products 3 Mac Os X, Mac Os X Server, Cups 2025-04-03 10.0 HIGH N/A
Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.
CVE-2006-0110 1 Javier Suarez Sanz 1 Foro Domus 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter.
CVE-2002-1279 1 Masqmail 1 Masqmail 2025-04-03 7.2 HIGH N/A
Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via certain entries in the configuration file (-C option).
CVE-2003-0963 1 Alexander V. Lukyanov 1 Lftp 2025-04-03 7.5 HIGH N/A
Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.
CVE-2005-2068 1 Freebsd 1 Freebsd 2025-04-03 5.0 MEDIUM N/A
FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session.
CVE-2001-1019 1 Seaglass Technologies Inc. 1 Sglmerchant 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter.
CVE-2001-1262 1 Avaya 1 Argent Office 2025-04-03 7.5 HIGH N/A
Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length community string.
CVE-2003-0946 1 Clam Anti-virus 1 Clamav 2025-04-03 7.5 HIGH N/A
Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address argument of a "MAIL FROM" command.
CVE-2004-0236 1 Steelid 1 Thephototool 2025-04-03 10.0 HIGH N/A
SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field.
CVE-2005-3237 1 Cynox 1 Cyphor 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML via the t_login parameter of footer.php.
CVE-2000-0877 1 Ranson Johnson 1 Mailform 2025-04-03 5.0 MEDIUM N/A
mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailForm then sends to the attacker.
CVE-2001-1087 1 Network Appliance 1 Netcache 2025-04-03 7.5 HIGH N/A
The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.
CVE-2003-0562 1 Novell 1 Netware 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service (ABEND) via a long input string.
CVE-2005-0839 1 Linux 1 Linux Kernel 2025-04-03 7.2 HIGH N/A
Linux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions.
CVE-2006-2574 1 Hp 1 Hp-ux 2025-04-03 7.2 HIGH N/A
Multiple unspecified vulnerabilities in Software Distributor in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allow local users to gain privileges via unspecified attack vectors.
CVE-2003-0345 1 Microsoft 3 Windows 2000, Windows Nt, Windows Xp 2025-04-03 7.5 HIGH N/A
Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required.
CVE-2006-2040 1 Photokorn 1 Photokorn 2025-04-03 6.4 MEDIUM N/A
Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL commands via the (1) cat, (2) pic and (3) page parameter in index.php; (4) id parameter in postcard.php; and (5) cat parameter in print.php.
CVE-1999-1107 1 Kde 1 Kde 2025-04-03 7.2 HIGH N/A
Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable.