CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2000-0931 HIGH · 7.5 Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message… David Harris
- CVE-2000-0926 HIGH · 7.5 SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable. Smartwin Technology
- CVE-2000-0997 HIGH · 7.2 Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges. Netbsd Openbsd
- CVE-2000-0996 HIGH · 7.2 Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell. Openbsd
- CVE-2000-0995 HIGH · 7.2 Kwetsbaarheid van de opmaakreeks in het OpenBSD yp_passwd-programma (en mogelijk andere op BSD gebaseerde besturingssystemen) stelt aanvallers in staat om rootprivileges te verkrijgen van een… Openbsd
- CVE-2000-0994 HIGH · 7.2 Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable. Openbsd
- CVE-2000-0993 HIGH · 7.2 Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as… Freebsd Netbsd Openbsd
- CVE-2000-0992 MEDIUM · 5.0 Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack. Openbsd Ssh
- CVE-2000-0991 HIGH · 7.5 Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL,… Hilgraeve
- CVE-2000-0990 HIGH · 7.5 cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username. Krzysztof Dabrowski
- CVE-2000-0989 MEDIUM · 5.0 Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a… Intel
- CVE-2000-0988 HIGH · 7.2 WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration. Bardon Data Systems
- CVE-2000-0987 MEDIUM · 4.6 Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter. Oracle
- CVE-2000-0986 MEDIUM · 4.6 Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via… Oracle
- CVE-2000-0985 HIGH · 10.0 Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command. Nevis Systems
- CVE-2000-0984 MEDIUM · 5.0 The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing… Cisco
- CVE-2000-0983 MEDIUM · 5.0 Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to… Microsoft
- CVE-2000-0982 HIGH · 7.5 Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote… Microsoft
- CVE-2000-0981 HIGH · 7.2 MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password. Oracle
- CVE-2000-0980 MEDIUM · 5.0 NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause… Microsoft
- CVE-2000-0979 MEDIUM · 6.4 File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows… Microsoft
- CVE-2000-0978 HIGH · 7.5 bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter. Bb4
- CVE-2000-0977 MEDIUM · 5.0 mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a… Oatmeal Studios
- CVE-2000-0976 MEDIUM · 4.6 Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command… Xfree86 Project
- CVE-2000-0975 MEDIUM · 5.0 Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack. Anaconda Partners
- CVE-2000-0974 HIGH · 7.5 GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents… Gnu
- CVE-2000-0973 HIGH · 10.0 Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message… Daniel Stenberg
- CVE-2000-0972 MEDIUM · 5.5 HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab… Hp
- CVE-2000-0971 HIGH · 10.0 Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or… Avirt
- CVE-2000-0970 HIGH · 7.5 IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack… Microsoft
- CVE-2000-0969 HIGH · 10.0 Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the… Valve Software
- CVE-2000-0968 HIGH · 10.0 Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command. Valve Software
- CVE-2000-0967 HIGH · 10.0 PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are… Php
- CVE-2000-0966 MEDIUM · 4.6 Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges. Hp
- CVE-2000-0965 MEDIUM · 5.0 The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service… Hp
- CVE-2000-0964 HIGH · 10.0 Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbitrary… Siemens
- CVE-2000-0961 HIGH · 10.0 Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command. Netscape
- CVE-2000-0960 MEDIUM · 5.0 The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine… Netscape
- CVE-2000-0959 LOW · 1.2 glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users… Gnu
- CVE-2000-0958 MEDIUM · 5.0 HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window. Sun
- CVE-2000-0957 HIGH · 7.5 The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext… Pam Mysql
- CVE-2000-0956 MEDIUM · 4.6 cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass… Carnegie Mellon University
- CVE-2000-0955 HIGH · 7.5 Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the… Cisco
- CVE-2000-0954 HIGH · 10.0 Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server. Evolvable Corporation
- CVE-2000-0953 MEDIUM · 5.0 Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection. Evolvable Corporation
- CVE-2000-0952 HIGH · 10.0 global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters. Shigio Yamaguchi
- CVE-2000-0951 MEDIUM · 5.0 A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via… Microsoft
- CVE-2000-0950 HIGH · 7.2 Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name. Tis
- CVE-2000-0949 HIGH · 7.2 Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option. Lbl Sun
- CVE-2000-0948 HIGH · 7.2 GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack. Gnome