Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29568 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-2279 1 Cisco 1 Ons 15216 Optical Add Drop Multiplexer Software 2025-04-03 5.0 MEDIUM N/A
Cisco ONS 15216 Optical Add/Drop Multiplexer (OADM) running firmware 2.2.2 and earlier allows remote attackers to cause a denial of service (management plane session loss) via crafted telnet data.
CVE-2004-2255 1 Phpmyfaq 1 Phpmyfaq 2025-04-03 6.4 MEDIUM N/A
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.
CVE-2005-2722 1 Foojan 1 Php Weblog 2025-04-03 5.0 MEDIUM N/A
Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message.
CVE-2001-0487 1 Ibm 1 Aix Snmp 2025-04-03 5.0 MEDIUM N/A
AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.
CVE-1999-0105 2025-04-03 2.1 LOW N/A
finger allows recursive searches by using a long string of @ symbols.
CVE-2005-1178 1 Oracle 1 Forms 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature.
CVE-2000-0322 1 Redhat 1 Linux 2025-04-03 10.0 HIGH N/A
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
CVE-2005-0964 1 Kerio 1 Personal Firewall 2025-04-03 4.6 MEDIUM N/A
Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions.
CVE-2006-0686 1 Virtual Hosting Control System 1 Virtual Hosting Control System 2025-04-03 10.0 HIGH N/A
add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access.
CVE-2004-0956 3 Oracle, Suse, Ubuntu 3 Mysql, Suse Linux, Ubuntu Linux 2025-04-03 5.0 MEDIUM N/A
MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.
CVE-2005-3482 1 Cisco 3 Aironet Ap1131, Aironet Ap1200, Aironet Ap1240 2025-04-03 5.0 MEDIUM N/A
Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC address of an authenticated end host.
CVE-2006-0219 1 Mybulletinboard 1 Mybulletinboard 2025-04-03 7.5 HIGH N/A
The original distribution of MyBulletinBoard (MyBB) to update from older versions to 1.0.2 omits or includes older versions of certain critical files, which allows attackers to conduct (1) SQL injection attacks via an attachment name that is not properly handled by inc/functions_upload.php (CVE-2005-4602), and possibly (2) other attacks related to threadmode in usercp.php.
CVE-2000-0120 1 Allaire 1 Spectra 2025-04-03 7.5 HIGH N/A
The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.
CVE-2004-1474 1 Symantec 12 Firewall Vpn Appliance 100, Firewall Vpn Appliance 200, Firewall Vpn Appliance 200r and 9 more 2025-04-03 5.0 MEDIUM N/A
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
CVE-2003-0707 1 Tomi Manninen 1 Linuxnode 2025-04-03 7.5 HIGH N/A
Buffer overflow in LinuxNode (node) before 0.3.2 allows remote attackers to execute arbitrary code.
CVE-2002-1055 1 Brother 1 Nc-3100h 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long password.
CVE-2004-1136 1 Globalscape 1 Cuteftp 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial of service (application crash) via large replies to FTP commands.
CVE-2004-0299 1 Smallftpd 1 Smallftpd 2025-04-03 2.1 LOW N/A
Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a large number of "/" (slash) characters.
CVE-2001-0594 1 Sun 2 Solaris, Sunos 2025-04-03 4.6 MEDIUM N/A
kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument.
CVE-2001-0044 1 Lexmark 1 Markvision 2025-04-03 7.2 HIGH N/A
Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long arguments to the cat_network, cat_paraller, and cat_serial commands.