Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29576 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0191 1 Axis 1 Storpoint Cd 2025-04-03 10.0 HIGH N/A
Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.
CVE-2002-0744 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow.
CVE-2006-3424 1 Webex Communications 1 Webex Downloader Activex Control 2025-04-03 7.5 HIGH N/A
Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors.
CVE-2004-2207 1 Ideal Science 1 Idealbb 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2003-1198 1 Cherokee 1 Cherokee Httpd 2025-04-03 5.0 MEDIUM N/A
connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field.
CVE-2000-0087 1 Netscape 2 Communicator, Navigator 2025-04-03 5.0 MEDIUM N/A
Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
CVE-2000-1232 1 Phorum 1 Phorum 2025-04-03 5.0 MEDIUM N/A
upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method.
CVE-2001-0439 5 Conectiva, Freebsd, Licq and 2 more 6 Linux, Freebsd, Licq and 3 more 2025-04-03 7.5 HIGH N/A
licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
CVE-2004-0033 1 Phpgedview 1 Phpgedview 2025-04-03 5.0 MEDIUM N/A
admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command.
CVE-2002-1413 1 Novell 1 Netware 2025-04-03 7.5 HIGH N/A
RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" (SSL) option during a connection.
CVE-2005-3880 1 Omnistar Interactive 1 Omnistar Kbase 2025-04-03 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in users/comments.php, (2) category_id and (3) id parameters in users/kb.php.
CVE-2006-2745 1 Facile Interactive Web 1 Facile Interactive Web 2025-04-03 5.1 MEDIUM N/A
Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) pathfile parameter in (a) p-editpage.php and (b) p-editbox.php, and the (2) mytheme and (3) myskin parameters in multiple "p-themes" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao.
CVE-2006-3910 1 Microsoft 1 Ie 2025-04-03 5.0 MEDIUM N/A
Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (crash) by calling the NewDefaultItem function of an OVCtl (OVCtl.OVCtl.1) ActiveX object, which triggers a null dereference.
CVE-2005-3657 1 Mcafee 2 Mcinsctl.dll, Virusscan Security Center 2025-04-03 5.0 MEDIUM N/A
The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the IObjectSafetySiteLock API to restrict access to required domains, which allows remote attackers to create or append to arbitrary files via the StartLog and AddLog methods in the MCINSTALL.McLog object.
CVE-2002-1028 1 Oddsock 1 Song Requester 2025-04-03 5.0 MEDIUM N/A
Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service (crash) via long arguments.
CVE-2006-2908 1 Mybulletinboard 1 Mybulletinboard 2025-04-03 7.5 HIGH N/A
The domecode function in inc/functions_post.php in MyBulletinBoard (MyBB) 1.1.2, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the username field, which is used in a preg_replace function call with a /e (executable) modifier.
CVE-2002-1862 1 Virtualzone 1 Smartmail Server 2025-04-03 5.0 MEDIUM N/A
SmartMail Server 2.0 allows remote attackers to cause a denial of service (crash) by sending data and closing the connection before all the data has been sent.
CVE-2002-0145 1 Scott Parish 1 Chuid 2025-04-03 7.5 HIGH N/A
chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owned by other users, such as root.
CVE-2002-1209 1 Solarwinds 1 Tftp Server 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request.
CVE-2002-0518 1 Freebsd 1 Freebsd 2025-04-03 5.0 MEDIUM N/A
The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash) (1) via a SYN packet that is accepted using syncookies that causes a null pointer to be referenced for the socket's TCP options, or (2) by killing and restarting a process that listens on the same socket, which does not properly clear the old inpcb pointer on restart.