CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2006-3014 MEDIUM · 5.1 Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player… Microsoft
- CVE-2006-3096 HIGH · 7.5 Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) forum parameter in messagepost.cfm… Ipostmx
- CVE-2006-2656 HIGH · 7.5 Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE:… Libtiff
- CVE-2006-2073 MEDIUM · 5.0 Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated… Isc
- CVE-2006-1283 HIGH · 7.2 opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which… Freebsd
- CVE-2006-0987 MEDIUM · 5.0 The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary… Isc
- CVE-2005-4459 HIGH · 10.0 Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote… Vmware
- CVE-2005-2096 HIGH · 7.5 zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description… Zlib
- CVE-2005-1794 MEDIUM · 6.4 Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows… Microsoft
- CVE-2005-1439 HIGH · 7.5 Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter. Enhancesoft
- CVE-2005-1436 MEDIUM · 6.8 Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2)… Enhancesoft
- CVE-1999-1373 MEDIUM · 5.0 FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g. via… Fore
- CVE-2004-2320 MEDIUM · 5.3 The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds… Bea
- CVE-2004-0230 MEDIUM · 5.0 TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss)… Juniper Microsoft Oracle Openpgp
- CVE-1999-1263 LOW · 2.6 Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the… Metamail Corporation
- CVE-2002-1117 MEDIUM · 5.0 Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing… Symantec Veritas
- CVE-2002-0510 MEDIUM · 5.0 The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine… Linux
- CVE-2002-0478 MEDIUM · 5.0 The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via arbitrary SNMP community strings. Foundrynet
- CVE-2002-0109 MEDIUM · 6.4 Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via… Linksys
- CVE-2002-0062 HIGH · 7.2 Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines… Debian Freebsd Redhat Suse
- CVE-1999-1091 MEDIUM · 5.0 UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files… Rtin Tin
- CVE-1999-1081 MEDIUM · 5.0 Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. Novell
- CVE-2001-1210 MEDIUM · 6.4 Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers… Cisco
- CVE-1999-1174 MEDIUM · 4.6 ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a… Iomega
- CVE-2001-1184 MEDIUM · 5.0 wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier,… Denicomp
- CVE-1999-1024 HIGH · 7.5 ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an… Lbl
- CVE-2000-1200 MEDIUM · 5.0 Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null… Microsoft
- CVE-2001-0514 HIGH · 7.5 SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested… Atmel Linksys Netgear
- CVE-2001-0380 MEDIUM · 6.4 Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community… Crosscom Olicom
- CVE-2000-1244 HIGH · 7.5 Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows… Broadcom
- CVE-2000-1243 MEDIUM · 5.0 Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the… Dansie
- CVE-2000-1242 HIGH · 9.0 The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access. Apc
- CVE-2000-1241 HIGH · 10.0 Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a "grave security fault." Sips
- CVE-2000-1240 MEDIUM · 5.0 Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute… Anyportal Php
- CVE-2000-1239 HIGH · 9.0 The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote… Ibm
- CVE-2000-1238 HIGH · 7.5 BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL… Bea
- CVE-2000-1237 MEDIUM · 5.0 The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid… Floosietek
- CVE-2000-1236 HIGH · 7.5 SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query… Oracle
- CVE-2000-1235 MEDIUM · 5.0 The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view… Oracle
- CVE-2000-1234 MEDIUM · 5.0 violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod… Phorum
- CVE-2000-1233 HIGH · 7.5 SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter. Phorum
- CVE-2000-1232 MEDIUM · 5.0 upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method. Phorum
- CVE-2000-1231 MEDIUM · 5.0 code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string. Phorum
- CVE-2000-1230 MEDIUM · 5.0 Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman". Phorum
- CVE-2000-1229 MEDIUM · 5.0 Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (dot dot) sequences in the default .langfile name field… Phorum
- CVE-2000-1228 MEDIUM · 5.0 Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword… Phorum
- CVE-2000-1227 MEDIUM · 5.0 Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but… Microsoft
- CVE-2000-1226 MEDIUM · 5.0 Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause… Snort
- CVE-2000-1225 MEDIUM · 5.0 Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuration information about the web server… Imatix
- CVE-1999-0307 HIGH · 7.2 Buffer overflow in HP-UX cstm program allows local users to gain root privileges. Hp