Vulnerabilities (CVE)

Total 266147 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0253 1 Iweb Systems 1 Hyperseek 2024-02-28 5.0 MEDIUM N/A
Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. (dot dot) attack in the show parameter.
CVE-2004-1521 1 Qualcomm 1 Eudora 2024-02-28 5.0 MEDIUM N/A
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers.
CVE-2004-2193 1 Cjoverkill 1 Cjoverkill 2024-02-28 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in trade.php for CJOverkill 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) tms[0] or (2) url parameters.
CVE-2000-0883 1 Mandrakesoft 1 Mandrake Linux 2024-02-28 5.0 MEDIUM N/A
The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory.
CVE-2000-1138 1 Ibm 1 Lotus Notes 2024-02-28 7.5 HIGH N/A
Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected.
CVE-2001-1497 1 Microsoft 2 Ie, Internet Explorer 2024-02-28 2.1 LOW N/A
Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password guessing attack.
CVE-2004-0315 1 Avirt 1 Voice 2024-02-28 10.0 HIGH N/A
Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long GET request on port 1080.
CVE-2001-0136 4 Conectiva, Debian, Mandrakesoft and 1 more 4 Linux, Debian Linux, Mandrake Linux and 1 more 2024-02-28 5.0 MEDIUM N/A
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.
CVE-2002-1564 1 Microsoft 1 Internet Explorer 2024-02-28 5.0 MEDIUM N/A
Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the "Script within Cookies Reading Cookies" vulnerability.
CVE-2002-1129 2 Compaq, Digital 2 Tru64, Osf 1 2024-02-28 7.2 HIGH N/A
Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.
CVE-2001-0758 1 Evolvable Corporation 1 Shambala Server 2024-02-28 7.5 HIGH N/A
Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command.
CVE-2003-0208 1 Macromedia 1 Flash 2024-02-28 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascript via the clickTAG field.
CVE-1999-0748 1 Redhat 1 Linux 2024-02-28 7.5 HIGH N/A
Buffer overflows in Red Hat net-tools package.
CVE-2002-2236 1 Apt-www-proxy 1 Apt-www-proxy 2024-02-28 10.0 HIGH N/A
Format string vulnerability in the awp_log function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code.
CVE-2001-0610 2 Kde, Suse 2 Kde, Suse Linux 2024-02-28 4.6 MEDIUM N/A
kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp.
CVE-2002-0614 1 Php-survey 1 Php-survey 2024-02-28 5.0 MEDIUM N/A
PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain sensitive information, including database credentials, if .inc files are not preprocessed by the server.
CVE-2004-1812 1 Broadcom 1 Unicenter Tng 2024-02-28 10.0 HIGH N/A
Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attackers to execute arbitrary code.
CVE-2004-2055 1 Phpbb Group 1 Phpbb 2024-02-28 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the search_author parameter.
CVE-2004-1823 1 Jelsoft 1 Vbulletin 2024-02-28 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote attackers to inject arbitrary web script or HTML via the (1) page parameter to showthread.php or (2) order parameter to forumdisplay.php.
CVE-2001-1578 1 Sco 1 Openserver 2024-02-28 2.1 LOW N/A
Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors.