Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29562 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-0056 1 Nortel 3 802.11 Wireless Ip Gateway, Business Communications Manager, Succession Communication Server 1000 2025-04-03 7.5 HIGH N/A
Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
CVE-2004-2488 1 Nexgen 1 Nexgen Ftp Server 2025-04-03 4.0 MEDIUM N/A
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via "C:" sequences in the (1) RETR (get), (2) NLST (ls), (3) LIST (ls), (4) RNFR, or (5) RNTO FTP commands.
CVE-2003-0633 1 Oracle 2 Applications, E-business Suite 2025-04-03 5.0 MEDIUM N/A
Multiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle E-Business Suite 11.5.1 through 11.5.8 allow a remote attacker to obtain sensitive information without authentication, such as the GUEST user password and the application server security key.
CVE-2003-0354 1 Redhat 1 Linux 2025-04-03 7.5 HIGH N/A
Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.
CVE-2003-0501 1 Linux 1 Linux Kernel 2025-04-03 2.1 LOW N/A
The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries.
CVE-2002-1169 1 Ibm 1 Websphere Caching Proxy Server 2025-04-03 5.0 MEDIUM N/A
IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash.
CVE-2005-1409 1 Postgresql 1 Postgresql 2025-04-03 7.5 HIGH N/A
PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."
CVE-2005-3016 1 Francisco Burzi 1 Php-nuke 2025-04-03 10.0 HIGH N/A
Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack vectors.
CVE-2000-0207 1 Sgi 2 Infosearch, Irix 2025-04-03 7.5 HIGH N/A
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
CVE-2004-1378 1 Jabberstudio 2 Jabberd, Jadc2s 2025-04-03 5.0 MEDIUM N/A
The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.
CVE-2005-1848 1 Phystech 1 Dhcpcd 2025-04-03 5.0 MEDIUM N/A
The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors that cause an out-of-bounds memory read.
CVE-2005-0474 1 Webcalendar 1 Webcalendar 2025-04-03 6.4 MEDIUM N/A
SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers to execute arbitrary SQL commands via an encoded webcalendar_session cookie.
CVE-2002-0271 1 Ada Core Technologies 1 Gnat Pro Native 2025-04-03 1.2 LOW N/A
Runtime library in GNU Ada compiler (GNAT) 3.12p through 3.14p allows local users to modify files of other users via a symlink attack on temporary files.
CVE-2005-3249 1 Ethereal Group 1 Ethereal 2025-04-03 6.4 MEDIUM N/A
Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer.
CVE-2006-2436 1 Ibm 1 Websphere Application Server 2025-04-03 7.5 HIGH N/A
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
CVE-2005-1902 1 E-post Corporation 1 Spa-pro Mail Atsolomon 2025-04-03 3.6 LOW N/A
Directory traversal vulnerability in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to read other users' mail and perform operations on arbitrary directories via .. sequences in the (1) SELECT, (2) CREATE, (3) DELETE, and (4) RENAME commands.
CVE-1999-1477 2 Gnome, Mandrakesoft 2 Gnome Libs, Mandrake Linux 2025-04-03 7.2 HIGH N/A
Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.
CVE-2000-0126 1 Microsoft 1 Internet Information Server 2025-04-03 5.0 MEDIUM N/A
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
CVE-2001-1098 1 Cisco 1 Pix Firewall Manager 2025-04-03 2.1 LOW N/A
Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file.
CVE-1999-0690 2 Cde, Hp 2 Cde, Hp-ux 2025-04-03 7.2 HIGH N/A
HP CDE program includes the current directory in root's PATH variable.