Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29868 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-4459 1 Digi International Inc 1 Anywhere Usb5 2025-04-03 7.5 HIGH N/A
Integer overflow in AnywhereUSB/5 1.80.00 allows local users to cause a denial of service (crash) via a 1 byte header size specified in the USB string descriptor.
CVE-2000-0789 1 Bardon Data Systems 1 Winu 2025-04-03 4.6 MEDIUM N/A
WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges.
CVE-2005-3465 2 Jdedwards, Oracle 2 Oneworld Xe, Enterpriseone 2025-04-03 10.0 HIGH N/A
Unspecified vulnerability in JDEdwards HTML Server in Oracle EnterpriseOne 8.94 OneWorld XE up to 8.95_B1, 8.94_Q1, and SP23_K1 has unknown impact and attack vectors, as identified by Oracle Vuln# JDE01.
CVE-2005-4498 1 Text-e 1 Text-e Cms 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Text-e 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
CVE-2004-2213 1 Mbedthis Software 1 Mbedthis Appweb Http Server 2025-04-03 5.0 MEDIUM N/A
Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) trailing dot (".") or (2) trailing space in an HTTP request.
CVE-1999-1247 1 Hp 1 Hp-ux 2025-04-03 7.2 HIGH N/A
Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.
CVE-2002-0827 1 Caldera 2 Openunix, Unixware 2025-04-03 7.2 HIGH N/A
Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824.
CVE-2005-2706 1 Mozilla 2 Firefox, Mozilla Suite 2025-04-03 6.4 MEDIUM N/A
Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla.
CVE-2005-1600 1 Libtomcrypt 1 Libtomcrypt 2025-04-03 7.5 HIGH N/A
A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key.
CVE-2006-0083 1 Stefan Frings 1 Sms Server Tools 2025-04-03 4.6 MEDIUM N/A
Format string vulnerability in the logging code of SMS Server Tools (smstools) 1.14.8 and earlier allows local users to execute arbitrary code via unspecified attack vectors.
CVE-2004-2192 1 Turbotraffictrader 1 Turbotraffictrader Php 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the ttt_admin parameter.
CVE-2005-2358 1 Emc 1 Navisphere Manager 2025-04-03 5.0 MEDIUM N/A
EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a directory that ends in a "." (trailing dot).
CVE-2004-0229 2 Gentoo, Linux 2 Linux, Linux Kernel 2025-04-03 4.6 MEDIUM N/A
The framebuffer driver in Linux kernel 2.6.x does not properly use the fb_copy_cmap function, with unknown impact.
CVE-2002-1606 1 Hp 2 Hp-ux, Tru64 2025-04-03 4.6 MEDIUM N/A
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.
CVE-2004-0061 1 Lionmax Software 1 Www File Share Pro 2025-04-03 7.5 HIGH N/A
WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via (1) a URL with a trailing . (dot), or (2) a URI with a leading slash or backslash character.
CVE-2003-0140 1 Mutt 1 Mutt 2025-04-03 7.5 HIGH N/A
Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder.
CVE-2005-0220 1 Gallery Project 1 Gallery 2025-04-03 5.0 MEDIUM N/A
Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web script or HTML via the username field.
CVE-2005-3462 1 Oracle 1 Peoplesoft Enterprise 2025-04-03 10.0 HIGH N/A
Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.02 has unknown impact and attack vectors, as identified by Oracle Vuln# PSE02.
CVE-2006-4160 1 Mvcnphp 1 Mvcnphp 2025-04-03 7.5 HIGH N/A
Multiple PHP remote file inclusion vulnerabilities in Tony Bibbs and Vincent Furia MVCnPHP 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the glConf[path_library] parameter to (1) BaseCommand.php, (2) BaseLoader.php, and (3) BaseView.php.
CVE-2005-2081 1 Digium 1 Asterisk 2025-04-03 5.0 MEDIUM N/A
Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character.