Vulnerabilities (CVE)

Total 266163 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-1094 1 Cisco 2 Vpn 3000 Concentrator Series Software, Vpn 3002 Hardware Client 2024-02-28 5.0 MEDIUM N/A
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.
CVE-2004-1500 2 Freeform Interactive, Monolith Productions 11 Purge Jihad, Alien Versus Predator, Blood and 8 more 2024-02-28 2.1 LOW N/A
Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.
CVE-2003-0709 1 Whois 1 Whois 2024-02-28 7.5 HIGH N/A
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option.
CVE-2002-2142 1 Bea 2 Weblogic Integration, Weblogic Server 2024-02-28 7.5 HIGH N/A
An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading to WebLogic Server and Express 7.0 Service Pack 1 from BEA WebLogic Server and Express 6.0 through 7.0.0.1, does not prepend a "/" character in certain URL patterns, which prevents the proper enforcement of role mappings and policies in applications that use the extension.
CVE-2003-0866 1 Apache 1 Tomcat 2024-02-28 5.0 MEDIUM N/A
The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.
CVE-2003-1119 1 Ssh 1 Secure Shell 2024-02-28 5.0 MEDIUM N/A
SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets.
CVE-2001-1158 1 Checkpoint 1 Firewall-1 2024-02-28 7.5 HIGH N/A
Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.
CVE-2004-1911 1 Azerbaijan Development Group 1 Azdgdating 2024-02-28 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) l parameter (aka language variable) to index.php or (2) id parameter to view.php.
CVE-2002-1609 1 Hp 2 Hp-ux, Tru64 2024-02-28 4.6 MEDIUM N/A
Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
CVE-2003-1391 1 Research Triangle Software 1 Cryptobuddy 2024-02-28 7.5 HIGH N/A
RTS CryptoBuddy 1.0 and 1.2 uses a weak encryption algorithm for the passphrase and generates predictable keys, which makes it easier for attackers to guess the passphrase.
CVE-2003-1205 1 Crob 1 Crob Ftp Server 2024-02-28 5.0 MEDIUM N/A
Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the "con" MS-DOS device name.
CVE-2002-0752 1 Cgiscript.net 1 Csmailto 2024-02-28 5.0 MEDIUM N/A
CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing the file.
CVE-2001-0832 1 Oracle 1 Database Server 2024-02-28 2.1 LOW N/A
Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability."
CVE-1999-0947 1 An 1 An-httpd 2024-02-28 7.5 HIGH N/A
AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.
CVE-2001-1156 1 Typsoft 1 Typsoft Ftp Server 2024-02-28 5.0 MEDIUM N/A
TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1) STOR or (2) RETR.
CVE-2001-1071 1 Cisco 2 Catos, Ios 2024-02-28 5.0 MEDIUM N/A
Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP neighbor announcements.
CVE-2003-0181 1 Ibm 1 Lotus Domino Web Server 2024-02-28 5.0 MEDIUM N/A
Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a long, unknown parameter name.
CVE-1999-1046 1 Ipswitch 1 Imail 2024-02-28 10.0 HIGH N/A
Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181.
CVE-2004-0085 1 Apple 1 Mac Os X 2024-02-28 5.0 MEDIUM N/A
Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown impact, a different vulnerability than CVE-2004-0086.
CVE-2001-0576 1 Sco 1 Openserver 2024-02-28 4.6 MEDIUM N/A
lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter.