Export limit exceeded: 401562 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (401562 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2006-3441 | 1 Microsoft | 3 Windows 2000, Windows 2003 Server, Windows Xp | 2026-04-16 | N/A |
| Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records. | ||||
| CVE-2006-3443 | 1 Microsoft | 1 Windows 2000 | 2026-04-16 | N/A |
| Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gain privileges via a malicious DLL in the UserProfile directory, aka "User Profile Elevation of Privilege Vulnerability." | ||||
| CVE-2006-3648 | 1 Microsoft | 3 Windows 2000, Windows 2003 Server, Windows Xp | 2026-04-16 | N/A |
| Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception." | ||||
| CVE-1999-0026 | 1 Sgi | 1 Irix | 2026-04-16 | N/A |
| root privileges via buffer overflow in pset command on SGI IRIX systems. | ||||
| CVE-2004-0417 | 6 Cvs, Gentoo, Openbsd and 3 more | 6 Cvs, Linux, Openbsd and 3 more | 2026-04-16 | N/A |
| Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space. | ||||
| CVE-1999-0102 | 1 Seattle Lab Software | 1 Slmail | 2026-04-16 | N/A |
| Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line. | ||||
| CVE-1999-0085 | 3 Freebsd, Ibm, Netbsd | 3 Freebsd, Aix, Netbsd | 2026-04-16 | N/A |
| Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname. | ||||
| CVE-1999-0097 | 3 Hp, Ibm, Sun | 4 Hp-ux, Aix, Solaris and 1 more | 2026-04-16 | N/A |
| The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character). | ||||
| CVE-1999-0132 | 2 Hp, Sun | 3 Hp-ux, Solaris, Sunos | 2026-04-16 | N/A |
| Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access. | ||||
| CVE-1999-0204 | 1 Eric Allman | 1 Sendmail | 2026-04-16 | N/A |
| Sendmail 8.6.9 allows remote attackers to execute root commands, using ident. | ||||
| CVE-1999-0170 | 1 Digital | 1 Ultrix | 2026-04-16 | N/A |
| Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list. | ||||
| CVE-1999-0171 | 1 Linux | 1 Linux Kernel | 2026-04-16 | N/A |
| Denial of service in syslog by sending it a large number of superfluous messages. | ||||
| CVE-1999-0182 | 1 Samba | 1 Samba | 2026-04-16 | N/A |
| Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password. | ||||
| CVE-1999-0190 | 1 Sun | 2 Solaris, Sunos | 2026-04-16 | N/A |
| Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access. | ||||
| CVE-2004-0462 | 2026-04-16 | N/A | ||
| The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server. | ||||
| CVE-1999-0222 | 1 Cisco | 1 Router | 2026-04-16 | N/A |
| Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL. | ||||
| CVE-1999-0223 | 1 Sun | 1 Sunos | 2026-04-16 | N/A |
| Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry. | ||||
| CVE-1999-0233 | 1 Microsoft | 1 Internet Information Services | 2026-04-16 | N/A |
| IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files. | ||||
| CVE-1999-0238 | 1 Php | 1 Php | 2026-04-16 | N/A |
| php.cgi allows attackers to read any file on the system. | ||||
| CVE-2003-1309 | 1 Zonelabs | 1 Zonealarm | 2026-04-16 | N/A |
| The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals (aka "Device Driver Attack"). | ||||