Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29809 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0435 1 Matthew Redman 1 Allmanage 2025-04-03 7.5 HIGH N/A
The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages.
CVE-2005-1478 1 Netwin 1 Dmail 2025-04-03 7.5 HIGH N/A
Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via format string specifiers in the xtellmail command.
CVE-2001-0887 1 Oliver Rauch 1 Xsane 2025-04-03 1.2 LOW N/A
xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files.
CVE-1999-1313 1 Freebsd 1 Freebsd 2025-04-03 4.6 MEDIUM N/A
Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands.
CVE-1999-0322 1 Freebsd 1 Freebsd 2025-04-03 2.1 LOW N/A
The open() function in FreeBSD allows local attackers to write to arbitrary files.
CVE-2003-0839 1 Microsoft 1 Windows 2003 Server 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a "shell:" link.
CVE-2003-1103 1 Hummingbird 1 Cyberdocs 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands.
CVE-2006-2870 1 Intelligent Solutions 1 Asp Discussion Forum 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in forum_search.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable.
CVE-2006-4008 1 Knusperleicht 1 Faq 2025-04-03 7.5 HIGH N/A
PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the faq_path parameter.
CVE-2005-2610 1 Vegadns 1 Vegadns 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVE-2005-2417 1 Astalavista It Engineering 1 Contrexx 2025-04-03 5.0 MEDIUM N/A
Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.xml.
CVE-2002-0730 1 Philip Chinery 1 Philip Chinerys Guestbook 2025-04-03 7.5 HIGH N/A
Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as (1) Name, (2) EMail, or (3) Homepage.
CVE-2004-2089 1 Matrix 1 Matrix Ftp Server 2025-04-03 5.0 MEDIUM N/A
Matrix FTP Server allows remote attackers to cause a denial of service (crash) by logging in using four spaces as the username and password and then issuing a LIST command.
CVE-2005-1397 1 Php-calendar 1 Php-calendar 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVE-2004-1074 5 Linux, Redhat, Suse and 2 more 8 Linux Kernel, Enterprise Linux, Enterprise Linux Desktop and 5 more 2025-04-03 2.1 LOW N/A
The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.
CVE-2001-0546 1 Microsoft 1 Isa Server 2025-04-03 5.0 MEDIUM N/A
Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.
CVE-2003-0004 1 Microsoft 1 Windows Xp 2025-04-03 7.2 HIGH N/A
Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code via a long parameter.
CVE-2002-1555 1 Cisco 1 Optical Networking Systems Software 2025-04-03 5.0 MEDIUM N/A
Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information.
CVE-2001-1498 1 Markus Kliegl 1 Mod Bf 2025-04-03 7.2 HIGH N/A
Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.
CVE-2005-1454 1 Freeradius 1 Freeradius 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries.