CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2000-1200 MEDIUM · 5.0 Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null… Microsoft
- CVE-2001-0514 HIGH · 7.5 SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested… Atmel Linksys Netgear
- CVE-2001-0380 MEDIUM · 6.4 Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community… Crosscom Olicom
- CVE-2000-1244 HIGH · 7.5 Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows… Broadcom
- CVE-2000-1243 MEDIUM · 5.0 Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the… Dansie
- CVE-2000-1242 HIGH · 9.0 The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access. Apc
- CVE-2000-1241 HIGH · 10.0 Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a "grave security fault." Sips
- CVE-2000-1240 MEDIUM · 5.0 Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute… Anyportal Php
- CVE-2000-1239 HIGH · 9.0 The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote… Ibm
- CVE-2000-1238 HIGH · 7.5 BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL… Bea
- CVE-2000-1237 MEDIUM · 5.0 The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid… Floosietek
- CVE-2000-1236 HIGH · 7.5 SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query… Oracle
- CVE-2000-1235 MEDIUM · 5.0 The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view… Oracle
- CVE-2000-1234 MEDIUM · 5.0 violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod… Phorum
- CVE-2000-1233 HIGH · 7.5 SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter. Phorum
- CVE-2000-1232 MEDIUM · 5.0 upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method. Phorum
- CVE-2000-1231 MEDIUM · 5.0 code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string. Phorum
- CVE-2000-1230 MEDIUM · 5.0 Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman". Phorum
- CVE-2000-1229 MEDIUM · 5.0 Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (dot dot) sequences in the default .langfile name field… Phorum
- CVE-2000-1228 MEDIUM · 5.0 Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword… Phorum
- CVE-2000-1227 MEDIUM · 5.0 Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but… Microsoft
- CVE-2000-1226 MEDIUM · 5.0 Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause… Snort
- CVE-2000-1225 MEDIUM · 5.0 Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuration information about the web server… Imatix
- CVE-1999-0307 HIGH · 7.2 Buffer overflow in HP-UX cstm program allows local users to gain root privileges. Hp
- CVE-2000-0931 HIGH · 7.5 Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message… David Harris
- CVE-2000-0926 HIGH · 7.5 SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable. Smartwin Technology
- CVE-2000-0997 HIGH · 7.2 Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges. Netbsd Openbsd
- CVE-2000-0996 HIGH · 7.2 Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell. Openbsd
- CVE-2000-0995 HIGH · 7.2 Kwetsbaarheid van de opmaakreeks in het OpenBSD yp_passwd-programma (en mogelijk andere op BSD gebaseerde besturingssystemen) stelt aanvallers in staat om rootprivileges te verkrijgen van een… Openbsd
- CVE-2000-0994 HIGH · 7.2 Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable. Openbsd
- CVE-2000-0993 HIGH · 7.2 Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as… Freebsd Netbsd Openbsd
- CVE-2000-0992 MEDIUM · 5.0 Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack. Openbsd Ssh
- CVE-2000-0991 HIGH · 7.5 Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL,… Hilgraeve
- CVE-2000-0990 HIGH · 7.5 cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username. Krzysztof Dabrowski
- CVE-2000-0989 MEDIUM · 5.0 Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a… Intel
- CVE-2000-0988 HIGH · 7.2 WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration. Bardon Data Systems
- CVE-2000-0987 MEDIUM · 4.6 Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter. Oracle
- CVE-2000-0986 MEDIUM · 4.6 Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via… Oracle
- CVE-2000-0985 HIGH · 10.0 Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command. Nevis Systems
- CVE-2000-0984 MEDIUM · 5.0 The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing… Cisco
- CVE-2000-0983 MEDIUM · 5.0 Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to… Microsoft
- CVE-2000-0982 HIGH · 7.5 Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote… Microsoft
- CVE-2000-0981 HIGH · 7.2 MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password. Oracle
- CVE-2000-0980 MEDIUM · 5.0 NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause… Microsoft
- CVE-2000-0979 MEDIUM · 6.4 File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows… Microsoft
- CVE-2000-0978 HIGH · 7.5 bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter. Bb4
- CVE-2000-0977 MEDIUM · 5.0 mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a… Oatmeal Studios
- CVE-2000-0976 MEDIUM · 4.6 Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command… Xfree86 Project
- CVE-2000-0975 MEDIUM · 5.0 Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack. Anaconda Partners
- CVE-2000-0974 HIGH · 7.5 GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents… Gnu