Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29549 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0162 1 Microsoft 1 Windows Embedded Compact 2025-04-03 7.5 HIGH N/A
WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
CVE-2003-1076 1 Sun 2 Solaris, Sunos 2025-04-03 7.2 HIGH N/A
Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service (unknown impact) and possibly gain privileges via certain constructs in a .forward file.
CVE-2001-0212 1 His 1 Auktion 2025-04-03 7.5 HIGH N/A
Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot) in the menue parameter, and possibly execute commands via shell metacharacters.
CVE-2006-1064 1 Lurker 1 Lurker 2025-04-03 2.6 LOW N/A
Multiple cross-site scripting (XSS) vulnerabilities in Lurker 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVE-2004-2082 1 Karjasoft 1 Sami Ftp Server 2025-04-03 5.0 MEDIUM N/A
The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service (pmsystem.exe crash) via a GET request wit a large number of leading "/" (slash) characters.
CVE-2006-0166 1 Symantec 1 Norton System Works 2025-04-03 7.5 HIGH N/A
Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other products.
CVE-2006-0393 1 Apple 2 Mac Os X, Mac Os X Server 2025-04-03 4.0 MEDIUM N/A
OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in using an invalid user, which causes the server to hang.
CVE-2001-0188 1 Goodtech 2 Ftp Server 95 98, Ftp Server Nt 2000 2025-04-03 5.0 MEDIUM N/A
GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash.
CVE-2001-0060 1 Stunnel 1 Stunnel 2025-04-03 10.0 HIGH N/A
Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username.
CVE-2006-4142 1 Vwar 1 Virtual War 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to execute arbitrary SQL commands via the n parameter.
CVE-2005-3470 1 Mailscanner 1 Mailscanner 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in in the authenticate function in MailWatch for MailScanner 1.0.2 allows remote attackers to execute arbitrary SQL commands.
CVE-2001-0219 1 Hp 1 Hp-ux 2025-04-03 2.1 LOW N/A
Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service.
CVE-2006-2144 1 Dmcounter 1 Dmcounter 2025-04-03 6.4 MEDIUM N/A
PHP remote file inclusion vulnerability in kopf.php in DMCounter 0.9.2-b allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter.
CVE-2005-0677 1 Phpoutsourcing 1 Zorum 2025-04-03 5.0 MEDIUM N/A
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.
CVE-2000-1078 1 Mirabilis 1 Icq Web Front 2025-04-03 5.0 MEDIUM N/A
ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.
CVE-2004-1090 6 Debian, Gentoo, Midnight Commander and 3 more 8 Debian Linux, Linux, Midnight Commander and 5 more 2025-04-03 5.0 MEDIUM N/A
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header."
CVE-1999-0376 1 Microsoft 1 Windows Nt 2025-04-03 4.6 MEDIUM N/A
Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
CVE-2006-2072 1 Delegate 1 Delegate 2025-04-03 5.0 MEDIUM N/A
Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x before 8.11.6 allow remote attackers to cause a denial of service via crafted DNS responses messages that cause (1) a buffer over-read or (2) infinite recursion, which can trigger a segmentation fault or invalid memory access, as demonstrated by the OUSPG PROTOS DNS test suite.
CVE-2006-2944 1 Cgi-rescue 1 Form2mail 2025-04-03 5.0 MEDIUM N/A
Unspecified vulnerability in CGI-RESCUE FORM2MAIL 1.21 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages. NOTE: the details for this issue are obtained from third party information.
CVE-2003-0743 1 University Of Cambridge 1 Exim 2025-04-03 7.5 HIGH N/A
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.