Vulnerabilities (CVE)

Filtered by CWE-16
Total 264 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-2285 1 Broadcom 1 Inoculateit 2024-02-28 4.3 MEDIUM N/A
eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection.
CVE-2003-1426 1 Cpanel 1 Cpanel 2024-02-28 3.3 LOW N/A
Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPT_FILENAME to reference a directory containing a malicious openwebmail-shared.pl executable.
CVE-2002-2335 1 John Drake 1 Killer Protection 2024-02-28 5.0 MEDIUM N/A
Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php.
CVE-2003-1491 1 Kerio 1 Personal Firewall 2024-02-28 7.5 HIGH N/A
Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows remote attackers to bypass the firewall filters via packets with a source port of 53.