CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2004-2761 CRITICAL · 9.8 The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the… Ietf
- CVE-2008-5161 LOW · 3.7 Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8;… Openbsd Ssh
- CVE-2008-4309 HIGH · 7.5 Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause… Net-snmp
- CVE-2007-5894 HIGH · 9.3 The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain… Mit
- CVE-2007-0896 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script or… Sage
- CVE-2006-5407 HIGH · 7.5 PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the include_dir parameter. Enhancesoft
- CVE-2006-4339 CRITICAL · 9.1 A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash.… Openssl
- CVE-2006-2389 HIGH · 9.3 Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code… Microsoft
- CVE-2006-1316 HIGH · 9.3 Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code… Microsoft
- CVE-2006-0033 HIGH · 9.3 Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code… Microsoft
- CVE-2006-2936 HIGH · 7.8 The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory… Linux
- CVE-2006-2451 MEDIUM · 4.6 The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of… Linux
- CVE-2006-2910 MEDIUM · 5.1 Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with… Cowon America
- CVE-2006-2934 MEDIUM · 5.0 SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash)… Linux
- CVE-2006-2199 HIGH · 7.6 Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox… Openoffice Sun
- CVE-2006-2198 HIGH · 7.6 OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious… Openoffice Sun
- CVE-2006-2200 MEDIUM · 5.1 Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of… Mimms Xine
- CVE-2006-1471 MEDIUM · 4.6 Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via… Apple
- CVE-2006-1470 MEDIUM · 5.0 OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request… Apple
- CVE-2006-1469 HIGH · 7.5 Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibly… Apple
- CVE-2006-1468 MEDIUM · 5.0 Unspecified vulnerability in Apple File Protocol (AFP) server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and folders… Apple
- CVE-2006-3011 MEDIUM · 4.6 The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a… Php
- CVE-2006-2310 MEDIUM · 5.0 BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm file… New Atlanta Communications
- CVE-2006-2918 MEDIUM · 5.0 The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it… Lanap Botdetect
- CVE-2006-3014 MEDIUM · 5.1 Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player… Microsoft
- CVE-2006-3096 HIGH · 7.5 Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) forum parameter in messagepost.cfm… Ipostmx
- CVE-2006-2656 HIGH · 7.5 Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE:… Libtiff
- CVE-2006-2073 MEDIUM · 5.0 Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated… Isc
- CVE-2006-1283 HIGH · 7.2 opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which… Freebsd
- CVE-2006-0987 MEDIUM · 5.0 The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary… Isc
- CVE-2005-4459 HIGH · 10.0 Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote… Vmware
- CVE-2005-2096 HIGH · 7.5 zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description… Zlib
- CVE-2005-1794 MEDIUM · 6.4 Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows… Microsoft
- CVE-2005-1439 HIGH · 7.5 Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter. Enhancesoft
- CVE-2005-1436 MEDIUM · 6.8 Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2)… Enhancesoft
- CVE-1999-1373 MEDIUM · 5.0 FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g. via… Fore
- CVE-2004-2320 MEDIUM · 5.3 The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds… Bea
- CVE-2004-0230 MEDIUM · 5.0 TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss)… Juniper Microsoft Oracle Openpgp
- CVE-1999-1263 LOW · 2.6 Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the… Metamail Corporation
- CVE-2002-1117 MEDIUM · 5.0 Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing… Symantec Veritas
- CVE-2002-0510 MEDIUM · 5.0 The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine… Linux
- CVE-2002-0478 MEDIUM · 5.0 The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via arbitrary SNMP community strings. Foundrynet
- CVE-2002-0109 MEDIUM · 6.4 Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via… Linksys
- CVE-2002-0062 HIGH · 7.2 Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines… Debian Freebsd Redhat Suse
- CVE-1999-1091 MEDIUM · 5.0 UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files… Rtin Tin
- CVE-1999-1081 MEDIUM · 5.0 Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. Novell
- CVE-2001-1210 MEDIUM · 6.4 Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers… Cisco
- CVE-1999-1174 MEDIUM · 4.6 ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a… Iomega
- CVE-2001-1184 MEDIUM · 5.0 wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier,… Denicomp
- CVE-1999-1024 HIGH · 7.5 ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an… Lbl