Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29864 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-2446 1 Linux 1 Linux Kernel 2025-04-03 5.4 MEDIUM N/A
Race condition between the kfree_skb and __skb_unlink functions in the socket buffer handling in Linux kernel 2.6.9, and possibly other versions, allows remote attackers to cause a denial of service (crash), as demonstrated using the TCP stress tests from the LTP test suite.
CVE-2006-0503 1 Mailenable 1 Mailenable Professional 2025-04-03 5.0 MEDIUM N/A
IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service (service crash) via unspecified vectors involving the EXAMINE command.
CVE-2006-3722 1 Oracle 1 Peoplesoft Enterprise 2025-04-03 10.0 HIGH N/A
Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, and 8.9 Bundle #3 has unknown impact and attack vectors, aka Oracle Vuln# PSE01.
CVE-2003-0406 1 Palmvnc 1 Palmvnc 2025-04-03 7.2 HIGH N/A
PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with, which could allow attackers to gain privileges.
CVE-2004-2179 1 Microsoft 2 Frontpage, Ie 2025-04-03 5.0 MEDIUM N/A
asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a JPEG image with maximum height and width values.
CVE-1999-1131 1 Sgi 1 Irix 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in OSF Distributed Computing Environment (DCE) security demon (secd) in IRIX 6.4 and earlier allows attackers to cause a denial of service via a long principal, group, or organization.
CVE-2003-1314 1 Eternalmart 1 Eternalmart Guestbook 2025-04-03 7.5 HIGH N/A
PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the emgb_admin_path parameter.
CVE-2005-0620 1 Bfriendly.com 1 Einstein 2025-04-03 2.1 LOW N/A
Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the information.
CVE-2006-4891 1 Techno Dreams 1 Articles And Papers Package 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter.
CVE-2006-3309 1 Internet Scout Project 1 Scout Portal Toolkit 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
CVE-2004-0754 1 Rob Flynn 1 Gaim 2025-04-03 7.5 HIGH N/A
Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the size variable in Groupware server messages.
CVE-2006-0447 1 E-post Corporation 3 Mail Server, Smtp Server, Spa-pro Mail Atsolomon 2025-04-03 7.5 HIGH N/A
Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute arbitrary code via a long username to the (1) AUTH PLAIN or (2) AUTH LOGIN SMTP commands, which is not properly handled by (a) EPSTRS.EXE or (b) SPA-RS.EXE; (3) a long username in the APOP POP3 command, which is not properly handled by (c) EPSTPOP4S.EXE or (d) SPA-POP3S.EXE; (4) a long IMAP DELETE command, which is not properly handled by (e) EPSTIMAP4S.EXE or (f) SPA-IMAP4S.EXE.
CVE-2002-2026 1 Browseftp 1 Browseftp Client 2025-04-03 7.5 HIGH N/A
Buffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via a long FTP "220" message reply.
CVE-2005-2280 1 Cisco 1 Security Agent 2025-04-03 5.0 MEDIUM N/A
Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a crafted IP packet.
CVE-2001-0519 1 Aladdin Knowledge Systems 1 Esafe Gateway 2025-04-03 7.5 HIGH N/A
Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which includes SCRIPT tags embedded within other SCRIPT tags.
CVE-2001-0665 1 Microsoft 1 Ie 2025-04-03 7.5 HIGH N/A
Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the "HTTP Request Encoding vulnerability."
CVE-2005-3069 1 Hylafax 1 Hylafax 2025-04-03 2.1 LOW N/A
xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file.
CVE-2000-0012 1 Hughes 1 Msql 2025-04-03 10.0 HIGH N/A
Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.
CVE-2002-0541 1 Ibm 1 Tivoli Storage Manager 2025-04-03 7.5 HIGH N/A
Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581.
CVE-2002-1028 1 Oddsock 1 Song Requester 2025-04-03 5.0 MEDIUM N/A
Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service (crash) via long arguments.