Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29810 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-1215 1 Ibm 1 Lotus Domino 2025-04-03 5.0 MEDIUM N/A
The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information.
CVE-2005-2974 1 Libungif 1 Libungif 2025-04-03 2.6 LOW N/A
libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.
CVE-2004-0340 1 Texas Imperial Software 1 Wftpd 2025-04-03 7.2 HIGH N/A
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.
CVE-2006-4918 1 Simple Discussion Board 1 Simple Discussion Board 2025-04-03 7.5 HIGH N/A
Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) env_dir parameter to (a) blank.php, (b) admin.php, or (c) builddb.php, and the (2) script_root parameter to blank.php.
CVE-2003-1057 1 Sun 2 Solaris, Sunos 2025-04-03 7.2 HIGH N/A
Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code.
CVE-1999-0826 1 Freebsd 1 Freebsd 2025-04-03 4.6 MEDIUM N/A
Buffer overflow in FreeBSD angband allows local users to gain privileges.
CVE-2005-4713 1 Pam Mysql 1 Pam Mysql 2025-04-03 5.0 MEDIUM N/A
Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors, probably involving the pam_mysql_sql_log function when being used in vsftpd, which does not include the IP address argument to an sprintf call.
CVE-2004-1407 1 Singapore 1 Image Gallery Web Application 2025-04-03 5.0 MEDIUM N/A
Multiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10 allow remote attackers to (1) read arbitrary files via the showThumb method for thumb.php, or (2) delete arbitrary files via admin.class.php.
CVE-2001-0707 1 Denicomp 1 Rshd 2025-04-03 5.0 MEDIUM N/A
Denicomp RSHD 2.18 and earlier allows a remote attacker to cause a denial of service (crash) via a long string to port 514.
CVE-2006-2960 1 Joomla 1 Joomla 2025-04-03 7.5 HIGH N/A
PHP remote file inclusion vulnerability in includes/joomla.php in Joomla! 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter.
CVE-2005-2168 1 Frozenplague.net 1 Plague News System 2025-04-03 5.0 MEDIUM N/A
delete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter.
CVE-2003-1099 1 Hp 1 Hp-ux 2025-04-03 2.1 LOW N/A
shar on HP-UX B.11.00, B.11.04, and B.11.11 creates temporary files with predictable names in /tmp, which allows local users to cause a denial of service and possibly execute arbitrary code via a symlink attack.
CVE-2002-1121 4 Gfi, Network Associates, Roaring Penguin and 1 more 5 Mailsecurity, Webshield Smtp, Canit and 2 more 2025-04-03 7.5 HIGH N/A
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.
CVE-2004-1643 1 Progress 1 Ws Ftp Server 2025-04-03 5.0 MEDIUM N/A
WS_FTP 5.0.2 allows remote authenticated users to cause a denial of service (CPU consumption) via a CD command that contains an invalid path with a "../" sequence.
CVE-2002-1919 1 Virtual Programming 1 Vp-asp 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password fields.
CVE-2001-0106 1 Hp 1 Hp-ux 2025-04-03 5.0 MEDIUM N/A
Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a server.
CVE-1999-0880 2 Bsdi, Caldera 2 Bsd Os, Openlinux 2025-04-03 5.0 MEDIUM N/A
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
CVE-2002-1355 1 Ethereal Group 1 Ethereal 2025-04-03 5.0 MEDIUM N/A
Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages.
CVE-2006-1989 1 Clam Anti-virus 1 Clamav 2025-04-03 5.1 MEDIUM N/A
Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.
CVE-2002-1506 1 Jacques Gelinas 1 Linuxconf 2025-04-03 7.2 HIGH N/A
Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated.