Vulnerabilities (CVE)

Total 266239 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-2133 1 Telindus 1 1120 Adsl Router 2024-02-28 10.0 HIGH N/A
Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote attackers to gain unauthorized access by sniffing and decrypting the administrative password.
CVE-2002-0395 1 Red-m 1 1050ap Lan Acess Point 2024-02-28 10.0 HIGH N/A
The TFTP server for Red-M 1050 (Bluetooth Access Point) can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods.
CVE-2002-0964 1 Valve Software 2 Half-life, Half-life Dedicated Server 2024-02-28 5.0 MEDIUM N/A
Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to the initial challenge with different cd_key values, which reaches the player limit and prevents other players from connecting until the original responses have timed out.
CVE-1999-0861 1 Microsoft 4 Commercial Internet System, Internet Information Server, Site Server and 1 more 2024-02-28 2.6 LOW N/A
Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.
CVE-2004-0344 1 Yabb 1 Yabb 2024-02-28 6.4 MEDIUM N/A
Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete arbitrary files via a .. (dot dot) in the attachOld parameter.
CVE-2001-1074 1 Webmin 1 Webmin 2024-02-28 7.2 HIGH N/A
Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges.
CVE-2001-0713 1 Sendmail 1 Sendmail 2024-02-28 4.6 MEDIUM N/A
Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as (1) macro names that are one character long, (2) a variable setting which is processed by the setoption function, or (3) a Modifiers setting which is processed by the getmodifiers function.
CVE-2002-0963 1 Geeklog 1 Geeklog 2024-02-28 5.0 MEDIUM N/A
SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.
CVE-2002-0560 1 Oracle 4 Application Server, Application Server Web Cache, Oracle8i and 1 more 2024-02-28 5.0 MEDIUM N/A
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature, (2) OWA_UTIL.listprint, or (3) OWA_UTIL.show_query_columns.
CVE-2004-1800 1 Sysbotz 1 Simpledata 2024-02-28 7.5 HIGH N/A
Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie.
CVE-2000-0506 1 Linux 1 Linux Kernel 2024-02-28 10.0 HIGH N/A
The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability."
CVE-1999-1476 1 Intel 2 Pentium, Pentuim 2024-02-28 2.1 LOW N/A
A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the "Invalid Operand with Locked CMPXCHG8B Instruction" problem.
CVE-2001-0243 1 Microsoft 1 Windows Media Player 2024-02-28 5.0 MEDIUM N/A
Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers to read certain files.
CVE-2003-0732 1 Cisco 4 Ciscoworks Cd1, Ciscoworks Common Management Foundation, Resource Manager and 1 more 2024-02-28 10.0 HIGH N/A
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.
CVE-1999-0715 1 Microsoft 2 Windows 2000, Windows Nt 2024-02-28 4.6 MEDIUM N/A
Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry.
CVE-2000-0290 1 4d 1 Webstar Http Server 2024-02-28 5.0 MEDIUM N/A
Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.
CVE-2002-2242 1 Kismac 1 Kismac 2024-02-28 6.4 MEDIUM N/A
The Apple Package Manager in KisMAC 0.02a and earlier modifies file permissions of sensitive files after installation, which could allow attackers to conduct unauthorized activities on those files.
CVE-2001-1117 1 Linksys 1 Befsr41 2024-02-28 5.0 MEDIUM N/A
LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for (1) index.htm and (2) Password.htm.
CVE-1999-0884 1 Zeus Technologies 1 Zeus Web Server 2024-02-28 5.0 MEDIUM N/A
The Zeus web server administrative interface uses weak encryption for its passwords.
CVE-2000-1219 1 Gnu 2 G\+\+, Gcc 2024-02-28 7.5 HIGH N/A
The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows.