Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29809 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0264 1 Gene6 1 G6 Ftp Server 2025-04-03 5.0 MEDIUM N/A
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.
CVE-2006-4142 1 Vwar 1 Virtual War 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to execute arbitrary SQL commands via the n parameter.
CVE-2005-0014 1 Ncpfs 1 Ncpfs 2025-04-03 7.5 HIGH N/A
Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client.
CVE-2002-1911 1 Zonelabs 1 Zonealarm 2025-04-03 5.0 MEDIUM N/A
ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of SYN packets (SYN flood). NOTE: the vendor was not able to reproduce the issue.
CVE-2001-0742 1 Computalynx 1 Cmail 2025-04-03 7.5 HIGH N/A
Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command.
CVE-2004-2678 1 Hp 1 Tru64 2025-04-03 5.1 MEDIUM N/A
Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Internet Key Exchange) with Certificates, allows remote attackers to gain privileges via unknown attack vectors.
CVE-2006-2723 1 Mozilla 1 Firefox 2025-04-03 5.0 MEDIUM N/A
Unspecified versions of Mozilla Firefox allow remote attackers to cause a denial of service (crash) via a web page that contains a large number of nested marquee tags. NOTE: a followup post indicated that the initial report could not be verified.
CVE-2005-1037 1 Ibm 1 Aix 2025-04-03 10.0 HIGH N/A
Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.
CVE-2004-0797 1 Zlib 1 Zlib 2025-04-03 2.1 LOW N/A
The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service (application crash).
CVE-1999-0397 2025-04-03 10.0 HIGH N/A
The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.
CVE-2004-2529 1 Gadu-gadu 1 Gadu-gadu Instant Messenger 2025-04-03 5.0 MEDIUM N/A
Gadu-Gadu allows remote attackers to bypass the "image send" option by sending a very small image file, which could be used in conjunction with image-related vulnerabilities.
CVE-2005-0789 1 Limewire 1 Limewire 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in LimeWire 3.9.6 through 4.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a magnet request.
CVE-2004-0975 3 Gentoo, Mandrakesoft, Openssl 5 Linux, Mandrake Linux, Mandrake Linux Corporate Server and 2 more 2025-04-03 2.1 LOW N/A
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
CVE-2004-2436 1 Broadcom 3 Common Services, Unicenter Network And Systems Management, Unicenter Serviceplus Service Desk 2025-04-03 2.1 LOW N/A
Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.
CVE-2006-1481 1 Php Ticket 1 Php Ticket 2025-04-03 6.5 MEDIUM N/A
SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames and passwords via the frm_search_in parameter.
CVE-2006-2144 1 Dmcounter 1 Dmcounter 2025-04-03 6.4 MEDIUM N/A
PHP remote file inclusion vulnerability in kopf.php in DMCounter 0.9.2-b allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter.
CVE-2004-0453 1 Vice 1 Vice 2025-04-03 7.2 HIGH N/A
Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and possibly execute arbitrary code via format string specifiers in an output string.
CVE-1999-0115 1 Ibm 1 Aix 2025-04-03 7.2 HIGH N/A
AIX bugfiler program allows local users to gain root access.
CVE-2002-0958 1 Ekilat Llc 1 Php\(reactor\) 2025-04-03 7.5 HIGH N/A
Cross-site scripting vulnerability in browse.php for PHP(Reactor) 1.2.7 allows remote attackers to execute script as other users via the go parameter in the comments section.
CVE-2003-0972 1 Gnu 1 Screen 2025-04-03 10.0 HIGH N/A
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.