Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29560 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-4948 1 Prosysinfo 1 Tftp Server Tftpdwin 2025-04-03 7.5 HIGH N/A
Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a long file name. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVE-2001-0387 1 Hylafax 1 Hylafax 2025-04-03 7.2 HIGH N/A
Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument.
CVE-2005-1858 1 Fuse 1 Fuse 2025-04-03 2.1 LOW N/A
FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information.
CVE-1999-1574 1 Ibm 1 Aix 2025-04-03 7.5 HIGH N/A
Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings."
CVE-2004-1277 1 Iglooftp 1 Iglooftp 2025-04-03 5.0 MEDIUM N/A
The download_selection_recursive() function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / (slash) characters.
CVE-2002-0842 1 Oracle 1 Application Server 2025-04-03 7.5 HIGH N/A
Format string vulnerability in certain third party modifications to mod_dav for logging bad gateway messages (e.g. Oracle9i Application Server 9.0.2) allows remote attackers to execute arbitrary code via a destination URI that forces a "502 Bad Gateway" response, which causes the format string specifiers to be returned from dav_lookup_uri() in mod_dav.c, which is then used in a call to ap_log_rerror().
CVE-2004-1260 1 Abctab2ps 1 Abctab2ps 2025-04-03 10.0 HIGH N/A
Multiple buffer overflows in the (1) write_heading function in subs.cpp or (2) trim_title function in parse.cpp for abctab2ps 1.6.3 allow remote attackers to execute arbitrary code via crafted ABC files.
CVE-2000-0255 1 Nbase-xyplex 1 Edgeblaster 2025-04-03 5.0 MEDIUM N/A
The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program.
CVE-2003-1043 1 Mozilla 1 Bugzilla 2025-04-03 10.0 HIGH N/A
SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.
CVE-2005-1168 1 Musicmatch 1 Jukebox 2025-04-03 5.0 MEDIUM N/A
DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via the bstrSavePath argument.
CVE-2006-2722 1 Out Of The Trees Web Design 1 Selectapix 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in view_album.php in SelectaPix 1.4 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources.
CVE-2002-1000 1 Analogx 1 Simpleserver Shout 2025-04-03 7.5 HIGH N/A
Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long request to TCP port 8001.
CVE-2005-2331 1 Moosegallery 1 Moosegallery 2025-04-03 5.0 MEDIUM N/A
PHP remote file inclusion vulnerability in display.php in MooseGallery allows remote attackers to execute arbitrary PHP code via the type parameter.
CVE-1999-0737 1 Microsoft 1 Internet Information Server 2025-04-03 5.0 MEDIUM N/A
The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
CVE-2006-0943 1 Pwsphp 1 Pwsphp 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
CVE-2006-1614 1 Clam Anti-virus 1 Clamav 2025-04-03 5.1 MEDIUM N/A
Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVE-1999-1388 1 Sun 1 Sunos 2025-04-03 6.2 MEDIUM N/A
passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument.
CVE-2003-0948 1 Wireless Tools 1 Wireless Tools 2025-04-03 7.2 HIGH N/A
Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.
CVE-2004-0950 1 Danware Data 1 Netop 2025-04-03 5.0 MEDIUM N/A
NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP address information via (1) a NetOp HELO request, or (2) when responses are disabled, a "custom" HELO request.
CVE-2005-1256 1 Ipswitch 3 Imail, Imail Server, Ipswitch Collaboration Suite 2025-04-03 10.0 HIGH N/A
Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name.