CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2000-0947 HIGH · 10.0 Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command. Gnu
- CVE-2000-0946 MEDIUM · 4.6 Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to… Compaq
- CVE-2000-0945 HIGH · 10.0 The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set,… Cisco
- CVE-2000-0944 CRITICAL · 9.8 CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to… Cgi
- CVE-2000-0943 HIGH · 7.5 Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER… Max-wilhelm Bruker
- CVE-2000-0942 MEDIUM · 5.1 The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter… Microsoft
- CVE-2000-0941 HIGH · 10.0 Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter. Kootenay Web Inc
- CVE-2000-0940 MEDIUM · 6.4 Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter. Metertek
- CVE-2000-0939 MEDIUM · 5.0 Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the… Samba
- CVE-2000-0938 MEDIUM · 5.0 Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows… Samba
- CVE-2000-0936 LOW · 2.1 Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information… Samba
- CVE-2000-0935 HIGH · 7.2 Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file. Samba
- CVE-2000-0934 HIGH · 7.2 Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. Redhat
- CVE-2000-0933 MEDIUM · 4.6 The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted,… Microsoft
- CVE-2000-0932 MEDIUM · 5.0 MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial… Clearswift
- CVE-2000-0930 MEDIUM · 5.0 Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch. David Harris
- CVE-2000-0929 MEDIUM · 5.0 Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not… Microsoft
- CVE-2000-0928 LOW · 2.1 WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares. Wquinn
- CVE-2000-0927 MEDIUM · 4.6 WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions. Wquinn
- CVE-2000-0925 MEDIUM · 5.0 The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain… Smartwin Technology
- CVE-2000-0924 MEDIUM · 5.0 Directory traversal kwetsbaarheid in search.cgi CGI script in Armada Master Index stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot… Armada Design
- CVE-2000-0923 HIGH · 7.5 authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter. Aplio
- CVE-2000-0922 MEDIUM · 5.0 Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a ..… Bytes Interactive
- CVE-2000-0921 MEDIUM · 5.0 Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the… Hassan Consulting
- CVE-2000-0920 MEDIUM · 5.0 Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in… Boa
- CVE-2000-0919 MEDIUM · 5.0 Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. Phpix
- CVE-2000-0918 HIGH · 7.2 Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters. Kde
- CVE-2000-0917 HIGH · 10.0 Opmaakstringkwetsbaarheid in use_syslog() -functie in LPRng 3.6.24 stelt externe aanvallers in staat om willekeurige opdrachten uit te voeren. Caldera Redhat Trustix
- CVE-2000-0916 HIGH · 7.5 FreeBSD 4.1.1 en eerder, en mogelijk andere op BSD gebaseerde besturingssystemen, gebruiken een onvoldoende random number generator om initiële TCP-sequentienummers (ISN) te genereren, waarmee externe… Freebsd
- CVE-2000-0915 MEDIUM · 5.0 Fingerd in FreeBSD 4.1.1 stelt externe aanvallers in staat om willekeurige bestanden te lezen door de naam van het doelbestand op te geven in plaats… Freebsd
- CVE-2000-0914 MEDIUM · 5.0 OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests. Openbsd
- CVE-2000-0913 MEDIUM · 5.0 mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name… Apache
- CVE-2000-0912 MEDIUM · 5.0 MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter. Jcs Web Works
- CVE-2000-0911 MEDIUM · 5.0 IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the… Horde
- CVE-2000-0910 MEDIUM · 4.6 Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address. Horde
- CVE-2000-0909 HIGH · 7.5 Een bufferoverloop in de automatische e-mailcontrolecomponent van Pine 4.21 en eerdere versies stelt externe aanvallers in staat om willekeurige commando's uit te voeren via een… University Of Washington
- CVE-2000-0908 MEDIUM · 5.0 BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the… Netcplus
- CVE-2000-0907 HIGH · 7.5 EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands. Etype
- CVE-2000-0906 MEDIUM · 5.0 Directory traversal kwetsbaarheid in Moreover.com cached_feed.cgi script versie 4.July.00 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot dot) aanval… Moreover.com
- CVE-2000-0905 MEDIUM · 5.0 QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information… Qnx
- CVE-2000-0904 MEDIUM · 5.0 Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root,… Qnx
- CVE-2000-0903 MEDIUM · 5.0 Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a ..… Qnx
- CVE-2000-0902 MEDIUM · 5.0 getalbum.php in PhotoAlbum voor 0.9.9 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot dot) -aanval. Nathan Purciful
- CVE-2000-0901 MEDIUM · 4.6 Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable. Juergen
- CVE-2000-0900 HIGH · 7.5 Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation… Acme Labs
- CVE-2000-0888 MEDIUM · 5.0 named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the… Isc Debian
- CVE-2000-0887 MEDIUM · 5.0 genoemd in BIND 8.2 tot en met 8.2.2-P6 kunnen externe aanvallers een denial of service veroorzaken door een verzoek voor gecomprimeerde zoneoverdracht (ZXFR) te doen… Isc
- CVE-2000-0886 HIGH · 7.5 IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands,… Microsoft
- CVE-2000-0885 HIGH · 7.5 Bufferoverloop in Microsoft Network Monitor (Netmon) stelt externe aanvallers in staat om willekeurige commando's uit te voeren via een lange browsernaam in een CIFS-browseframe, een… Microsoft
- CVE-2000-0884 HIGH · 7.5 IIS 4.0 en 5.0 stellen externe aanvallers in staat om documenten buiten de webroot te lezen en mogelijk willekeurige opdrachten uit te voeren via onjuist… Microsoft