Export limit exceeded: 424930 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 424930 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424930 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2005-2176 | 1 Novell | 1 Netmail | 2026-04-16 | N/A |
| Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies. | ||||
| CVE-1999-0881 | 1 Blueface | 1 Falcon Web Server | 2026-04-16 | N/A |
| Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | ||||
| CVE-2005-2184 | 1 Emc | 1 Eroom | 2026-04-16 | N/A |
| eRoom 6.x does not properly restrict files that can be attached, which allows remote attackers to execute arbitrary commands via a .lnk file. | ||||
| CVE-1999-0883 | 1 Zeus Technologies | 1 Zeus Web Server | 2026-04-16 | N/A |
| Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine. | ||||
| CVE-1999-0901 | 1 Linux-nis | 1 Ypserv | 2026-04-16 | N/A |
| ypserv allows a local user to modify the GECOS and login shells of other users. | ||||
| CVE-1999-0938 | 1 University College London | 1 Sdr | 2026-04-16 | N/A |
| MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages. | ||||
| CVE-1999-0976 | 1 Eric Allman | 1 Sendmail | 2026-04-16 | N/A |
| Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail. | ||||
| CVE-2006-2527 | 1 Smartisoft | 1 Phpbazar | 2026-04-16 | N/A |
| Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain unauthorized access to the administrative section by setting the action parameter to edit_member and the value parameter to 1. | ||||
| CVE-1999-0982 | 1 Sun | 2 Solaris, Web-based Enterprise Management | 2026-04-16 | N/A |
| The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file. | ||||
| CVE-2006-2528 | 1 Smartisoft | 1 Phpbazar | 2026-04-16 | N/A |
| PHP remote file inclusion vulnerability in classified_right.php in phpBazar 2.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the language_dir parameter. | ||||
| CVE-1999-1001 | 1 Cisco | 1 Cache Engine | 2026-04-16 | N/A |
| Cisco Cache Engine allows a remote attacker to gain access via a null username and password. | ||||
| CVE-1999-1047 | 1 Bsdi | 1 Gauntlet | 2026-04-16 | N/A |
| When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does not log the activities. | ||||
| CVE-2006-2530 | 1 Snitz Communications | 2 Avatar Mod, Snitz Forums 2000 | 2026-04-16 | N/A |
| avatar_upload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product. | ||||
| CVE-1999-1052 | 1 Microsoft | 1 Frontpage | 2026-04-16 | N/A |
| Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users. | ||||
| CVE-2003-0895 | 1 Apple | 1 Mac Os X | 2026-04-16 | N/A |
| Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote attackers, to cause a denial of service (crash), access portions of memory, and possibly execute arbitrary code via a long command line argument (argv[]). | ||||
| CVE-2003-0896 | 1 Sun | 1 Jre | 2026-04-16 | N/A |
| The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method. | ||||
| CVE-2004-2562 | 1 Leigh Business Enterprises | 1 Web Helpdesk | 2026-04-16 | N/A |
| SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter. | ||||
| CVE-2004-2563 | 1 Serena Software | 1 Serena Teamtrack | 2026-04-16 | N/A |
| Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and database information, and conduct cross-site scripting (XSS) attacks, via a direct request to tmtrack.dll with modified LoginPage and Template parameters. | ||||
| CVE-1999-1076 | 1 Apple | 1 Macos | 2026-04-16 | N/A |
| Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session. | ||||
| CVE-2006-2531 | 1 Ipswitch | 1 Whatsup | 2026-04-16 | N/A |
| Ipswitch WhatsUp Professional 2006 only verifies the user's identity via HTTP headers, which allows remote attackers to spoof being a trusted console and bypass authentication by setting HTTP User-Agent header to "Ipswitch/1.0" and the User-Application header to "NmConsole". | ||||