Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29868 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0368 7 Caldera, Debian, Proftpd Project and 4 more 8 Openlinux, Debian Linux, Proftpd and 5 more 2025-04-03 10.0 HIGH N/A
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
CVE-2000-0386 1 Filemaker 1 Filemaker 2025-04-03 7.5 HIGH N/A
FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.
CVE-2006-0790 1 Rockliffe 1 Mailsite 2025-04-03 5.0 MEDIUM N/A
Rockliffe MailSite 7.0 and earlier allows remote attackers to cause a denial of service by sending crafted LDAP packets to port 389/TCP, as demonstrated by the ProtoVer LDAP testsuite.
CVE-2003-0778 1 Sane 2 Sane, Sane-backend 2025-04-03 5.0 MEDIUM N/A
saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption).
CVE-2002-0354 2 Mozilla, Netscape 2 Mozilla, Navigator 2025-04-03 5.0 MEDIUM N/A
The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property.
CVE-2002-1252 1 Peoplesoft 1 Peopletools 2025-04-03 5.0 MEDIUM N/A
The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities (XXE) fields in an HTTP POST request that is processed by the SimpleFileHandler handler.
CVE-2000-0523 1 Etype 1 Eserv 2025-04-03 10.0 HIGH N/A
Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command.
CVE-2005-1683 1 Microsoft 1 Word 2025-04-03 2.6 LOW N/A
Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file.
CVE-2004-1321 1 Asante 1 Fm2008 Managed Ethernet Switch 2025-04-03 7.5 HIGH N/A
The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which could allow remote attackers to gain unauthorized access.
CVE-2003-0322 1 Colten Edwards 1 Bitchx 2025-04-03 5.0 MEDIUM N/A
Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash).
CVE-2005-1924 1 Squirrelmail 1 Gpg Plugin 2025-04-03 9.3 HIGH N/A
The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the fpr parameter to the deleteKey function in gpg_keyring.php, as called by (a) import_key_file.php, (b) import_key_text.php, and (c) keyring_main.php; and (2) the keyserver parameter to the gpg_recv_key function in gpg_key_functions.php, as called by gpg_options.php. NOTE: this issue may overlap CVE-2007-3636.
CVE-2004-0686 2 Samba, Trustix 2 Samba, Secure Linux 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
CVE-2003-1225 1 Bea 1 Weblogic Server 2025-04-03 2.1 LOW N/A
The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.
CVE-2000-0989 1 Intel 1 Inbusiness Email Station 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username.
CVE-1999-1199 1 Apache 1 Http Server 2025-04-03 10.0 HIGH N/A
Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.
CVE-2006-0729 1 Teca Scripts 1 Teca Diary 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters.
CVE-2004-1218 1 Ibex Software 1 Remote Execute 2025-04-03 5.0 MEDIUM N/A
Remote Execute 2.30 allows remote attackers to cause a denial of service (application crash) by making 7 simultaneous connections.
CVE-2002-1068 1 D-link 1 Dp-303 2025-04-03 5.0 MEDIUM N/A
The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request.
CVE-2005-4545 1 Netdirect 1 Shopengine 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in search.asp in NetDirect ShopEngine allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-1999-0275 1 Microsoft 1 Windows Nt 2025-04-03 5.0 MEDIUM N/A
Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.