CVE-database
121.350 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2000-0884 HIGH · 7.5 IIS 4.0 en 5.0 stellen externe aanvallers in staat om documenten buiten de webroot te lezen en mogelijk willekeurige opdrachten uit te voeren via onjuist… Microsoft
- CVE-2000-0818 HIGH · 10.0 The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files… Oracle
- CVE-2000-0817 HIGH · 7.5 Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon… Microsoft
- CVE-2000-0811 MEDIUM · 5.0 Auction Weaver 1.0 tot en met 1.04 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (punt punt) aanval op de… Cgi Script Center
- CVE-2000-0810 HIGH · 7.5 Auction Weaver 1.0 tot en met 1.04 valideert de namen van formuliervelden niet correct, waardoor externe aanvallers willekeurige bestanden en mappen kunnen verwijderen via een… Cgi Script Center
- CVE-2000-0803 HIGH · 10.0 GNU Groff gebruikt de huidige werkmap om een apparaatbeschrijvingsbestand te vinden, waarmee een lokale gebruiker extra privileges kan krijgen door een kwaadaardige postpro-richtlijn op te… Gnu
- CVE-2000-0963 HIGH · 7.2 Bufferoverloop in ncurses-bibliotheek stelt lokale gebruikers in staat om willekeurige opdrachten uit te voeren via lange omgevingsinformatie zoals TERM of TERMINFO_DIRS. Immunix Freebsd Redhat Invisible-island
- CVE-2000-1212 MEDIUM · 5.0 Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to… Zope
- CVE-2000-1211 HIGH · 7.5 Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers… Zope
- CVE-1999-1579 MEDIUM · 5.0 De Cenroll ActiveX-besturing (xenroll.dll) voor Terminal Server-edities van Windows NT 4.0 en Windows NT Server 4.0 vóór SP6 stelt externe aanvallers in staat een denial-of-service-aanval… Microsoft
- CVE-2000-1078 MEDIUM · 5.0 ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character. Mirabilis
- CVE-2000-1077 HIGH · 10.0 Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a… Iplanet
- CVE-2000-1074 HIGH · 10.0 csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain… Netscape
- CVE-2000-1065 MEDIUM · 5.0 Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via… Hp
- CVE-2000-1062 MEDIUM · 5.0 Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service. Hp
- CVE-2000-1057 MEDIUM · 4.6 Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions. Hp
- CVE-2000-1056 HIGH · 7.5 CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords. Cisco
- CVE-2000-1052 MEDIUM · 5.0 Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet. Macromedia
- CVE-2000-1051 MEDIUM · 5.0 Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet. Macromedia
- CVE-2000-1050 MEDIUM · 5.0 Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in… Macromedia
- CVE-2000-1046 HIGH · 10.0 Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute… Lotus
- CVE-2000-1042 HIGH · 10.0 Bufferoverloop in ypserv in Mandrake Linux 7.1 en eerder, en mogelijk andere Linux-besturingssystemen, stelt een aanvaller in staat rootprivileges te verkrijgen wanneer ypserv is gebouwd… Mandrakesoft
- CVE-2000-1035 HIGH · 10.0 Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a… Typsoft
- CVE-2000-1034 HIGH · 10.0 Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML… Microsoft
- CVE-2000-1033 HIGH · 7.5 Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to… Cat Soft
- CVE-2000-1029 HIGH · 10.0 Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query. Isc
- CVE-2000-1028 HIGH · 7.2 Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument. Hp
- CVE-2000-1027 MEDIUM · 5.0 Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV… Cisco
- CVE-2000-1026 HIGH · 10.0 Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands. Lbl
- CVE-2000-1024 HIGH · 10.0 eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands. Unify
- CVE-2000-1023 HIGH · 7.5 The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI… Alabanza
- CVE-2000-1018 LOW · 2.1 shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's… Mendel Cooper
- CVE-2000-1016 MEDIUM · 5.0 De standaardconfiguratie van Apache (httpd.conf) op SuSE 6.4 bevat een alias voor de map/usr/doc, waarmee externe aanvallers pakketdocumentatie kunnen lezen en systeemconfiguratie-informatie kunnen verkrijgen via… Suse
- CVE-2000-1014 HIGH · 7.5 Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format… Sco
- CVE-2000-1013 HIGH · 7.2 Met de setlocale-functie in FreeBSD 5.0 en eerder, en mogelijk andere besturingssystemen, kunnen lokale gebruikers willekeurige bestanden lezen via de omgevingsvariabele LANG. Freebsd
- CVE-2000-1008 MEDIUM · 4.6 PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the… Palm
- CVE-2000-1007 MEDIUM · 5.0 I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause… Symantec
- CVE-2000-1002 MEDIUM · 5.0 POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email… Stalker
- CVE-2000-1001 HIGH · 7.5 add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable. Element N.v
- CVE-2000-0998 HIGH · 7.2 Kwetsbaarheid van de opmaakreeks in het TOP-programma stelt lokale aanvallers in staat om rootprivileges te verkrijgen via de functie "kill" of "renice". Freebsd
- CVE-2000-0515 HIGH · 10.0 The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain… Hp
- CVE-2000-0147 LOW · 2.1 snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration. Sco
- CVE-1999-0472 MEDIUM · 5.0 The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it. Snmp Network Appliance
- CVE-1999-0632 MEDIUM · 5.3 The RPC portmapper service is running.
- CVE-1999-0792 MEDIUM · 5.0 ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration. Osicom
- CVE-1999-0516 HIGH · 7.5 An SNMP community name is guessable.
- CVE-1999-0024 MEDIUM · 5.0 DNS cache poisoning via BIND, by predictable query IDs. Isc Bsdi Ibm Nec
- CVE-1999-0524 MEDIUM · 4.0 ICMP-informatie zoals (1) netmask en (2) timestamp is toegestaan van willekeurige hosts. Apple Cisco Hp Ibm
- CVE-1999-0517 MEDIUM · 5.9 An SNMP community name is the default (e.g. public), null, or missing. Hp Sun
- CVE-1999-0511 CRITICAL · 9.1 IP forwarding is ingeschakeld op een machine die geen router of firewall is. Microsoft