Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29554 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-3129 1 Nc Linklist 1 Nc Linklist 2025-04-03 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in index.php in NC LinkList 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) view parameters.
CVE-2004-1799 1 Openbsd 1 Openbsd 2025-04-03 7.5 HIGH N/A
PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces.
CVE-2004-2409 1 Samhain Labs 1 Samhain 2025-04-03 7.2 HIGH N/A
Buffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in update mode ("-t update"), might allow attackers to execute arbitrary code.
CVE-2000-0283 1 Sgi 1 Irix 2025-04-03 6.4 MEDIUM N/A
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.
CVE-2001-0122 1 Ibm 2 Http Server, Websphere Application Server 2025-04-03 5.0 MEDIUM N/A
Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error.
CVE-2006-0130 1 Rockliffe 1 Mailsite 2025-04-03 7.5 HIGH N/A
Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting the rate of connections, or locking out an account.
CVE-2005-4510 1 Extensis 1 Netpublish Server 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files via "../" sequences in the template parameter.
CVE-2003-0022 1 Rxvt 1 Rxvt 2025-04-03 5.0 MEDIUM N/A
The "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.
CVE-1999-1183 1 Sgi 1 Irix 2025-04-03 7.6 HIGH N/A
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type.
CVE-2006-0351 1 Don Moore 1 Mydns 2025-04-03 5.0 MEDIUM N/A
Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors.
CVE-2005-3922 1 Panda 19 Panda Activescan, Panda Antivirus, Panda Antivirus Platinum and 16 more 2025-04-03 7.5 HIGH N/A
Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive.
CVE-2005-2305 1 Dg 1 Remote Control Server 2025-04-03 7.5 HIGH N/A
DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrary code via a long message to TCP port 1071 or 1073, possibly due to a buffer overflow.
CVE-2006-2232 1 Scriptsez 1 Cute Guestbook 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitrary web script or HTML via the Comments field when signing the guestbook.
CVE-2004-2315 1 Mbedthis Software 1 Mbedthis Appweb Http Server 2025-04-03 5.0 MEDIUM N/A
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an empty OPTIONS request.
CVE-2002-0906 1 Sendmail 1 Sendmail 2025-04-03 7.5 HIGH N/A
Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.
CVE-2005-1755 1 Php Poll Creator 1 Php Poll Creator 2025-04-03 6.4 MEDIUM N/A
PHP remote file inclusion vulnerability in poll_vote.php in PHP Poll Creator 1.01 allows remote attackers to execute arbitrary PHP code via the relativer_pfad parameter.
CVE-2006-3671 1 Hyper Estraier 1 Hyper Estraier 2025-04-03 7.5 HIGH N/A
Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors.
CVE-2002-1412 1 Gallery Project 1 Gallery 2025-04-03 7.5 HIGH N/A
Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script.
CVE-2001-1057 1 Wolfram Research 1 Mathematica 2025-04-03 5.0 MEDIUM N/A
The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by connecting to port 16286 and not disconnecting, which prevents users from making license requests.
CVE-2006-4349 1 Toenda Software Development 1 Toendacms 2025-04-03 7.5 HIGH N/A
PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tcms_administer_site parameter to an unspecified script, probably index.php. NOTE: this issue has been disputed by a third party, who states that $tcms_administer_site is initialized to a constant value within index.php