Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29549 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-1307 2 Adobe, Apple 2 Version Cue, Mac Os X 2025-04-03 7.2 HIGH N/A
The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory.
CVE-2002-1500 1 Netbsd 1 Netbsd 2025-04-03 7.2 HIGH N/A
Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FD_SETSIZE, which are not checked by FD_SET().
CVE-2006-2472 1 Bea 1 Weblogic Server 2025-04-03 4.9 MEDIUM N/A
Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 allows untrusted applications to obtain private server keys.
CVE-1999-1468 4 Cray, Next, Sgi and 1 more 4 Unicos, Next, Irix and 1 more 2025-04-03 6.2 MEDIUM N/A
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.
CVE-2005-0513 1 Pmachine 1 Pmachine Pro 2025-04-03 7.5 HIGH N/A
PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting mail_autocheck.php and modifying the pm_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2003-1086.
CVE-1999-0232 1 Ncsa Httpd Project 1 Ncsa Httpd 2025-04-03 10.0 HIGH N/A
Buffer overflow in NCSA WebServer (version 1.5c) gives remote access.
CVE-1999-0624 2025-04-03 N/A N/A
The rstat/rstatd service is running.
CVE-1999-0304 4 Bsdi, Freebsd, Netbsd and 1 more 4 Bsd Os, Freebsd, Netbsd and 1 more 2025-04-03 7.2 HIGH N/A
mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
CVE-2002-0412 1 Luca Deri 1 Ntop 2025-04-03 7.5 HIGH N/A
Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via (1) an HTTP GET request, (2) a user name in HTTP authentication, or (3) a password in HTTP authentication.
CVE-2004-1378 1 Jabberstudio 2 Jabberd, Jadc2s 2025-04-03 5.0 MEDIUM N/A
The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.
CVE-2000-0140 1 True North 1 Internet Anywhere Mail Server 2025-04-03 5.0 MEDIUM N/A
Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
CVE-2001-1579 1 Sco 2 Open Unix, Unixware 2025-04-03 5.0 MEDIUM N/A
The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service.
CVE-2005-2763 1 Openttd 1 Openttd 2025-04-03 7.5 HIGH N/A
Multiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
CVE-1999-1041 1 Sco 2 Openserver, Unix 2025-04-03 7.2 HIGH N/A
Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.
CVE-2006-2251 1 Invision Power Services 1 Invision Community Blog 2025-04-03 6.4 MEDIUM N/A
SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter.
CVE-2005-4839 1 Claymore Systems Inc 1 Puretls 2025-04-03 5.0 MEDIUM N/A
PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trigger an information leak of values from earlier certificates.
CVE-2005-0623 1 Raidenhttpd 1 Raidenhttpd 2025-04-03 7.5 HIGH N/A
Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL.
CVE-2005-2814 1 Flatnuke 1 Flatnuke 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter in a vis_reg operation to index.php.
CVE-1999-0034 4 Bsdi, Larry Wall, Redhat and 1 more 4 Bsd Os, Perl, Linux and 1 more 2025-04-03 7.2 HIGH N/A
Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
CVE-1999-0670 1 Microsoft 1 Internet Explorer 2025-04-03 4.0 MEDIUM N/A
Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.