CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2000-0973 HIGH · 10.0 Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message… Daniel Stenberg
- CVE-2000-0972 MEDIUM · 5.5 HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab… Hp
- CVE-2000-0971 HIGH · 10.0 Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or… Avirt
- CVE-2000-0970 HIGH · 7.5 IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack… Microsoft
- CVE-2000-0969 HIGH · 10.0 Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the… Valve Software
- CVE-2000-0968 HIGH · 10.0 Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command. Valve Software
- CVE-2000-0967 HIGH · 10.0 PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are… Php
- CVE-2000-0966 MEDIUM · 4.6 Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges. Hp
- CVE-2000-0965 MEDIUM · 5.0 The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service… Hp
- CVE-2000-0964 HIGH · 10.0 Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbitrary… Siemens
- CVE-2000-0961 HIGH · 10.0 Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command. Netscape
- CVE-2000-0960 MEDIUM · 5.0 The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine… Netscape
- CVE-2000-0959 LOW · 1.2 glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users… Gnu
- CVE-2000-0958 MEDIUM · 5.0 HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window. Sun
- CVE-2000-0957 HIGH · 7.5 The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext… Pam Mysql
- CVE-2000-0956 MEDIUM · 4.6 cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass… Carnegie Mellon University
- CVE-2000-0955 HIGH · 7.5 Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the… Cisco
- CVE-2000-0954 HIGH · 10.0 Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server. Evolvable Corporation
- CVE-2000-0953 MEDIUM · 5.0 Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection. Evolvable Corporation
- CVE-2000-0952 HIGH · 10.0 global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters. Shigio Yamaguchi
- CVE-2000-0951 MEDIUM · 5.0 A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via… Microsoft
- CVE-2000-0950 HIGH · 7.2 Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name. Tis
- CVE-2000-0949 HIGH · 7.2 Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option. Lbl Sun
- CVE-2000-0948 HIGH · 7.2 GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack. Gnome
- CVE-2000-0947 HIGH · 10.0 Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command. Gnu
- CVE-2000-0946 MEDIUM · 4.6 Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to… Compaq
- CVE-2000-0945 HIGH · 10.0 The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set,… Cisco
- CVE-2000-0944 CRITICAL · 9.8 CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to… Cgi
- CVE-2000-0943 HIGH · 7.5 Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER… Max-wilhelm Bruker
- CVE-2000-0942 MEDIUM · 5.1 The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter… Microsoft
- CVE-2000-0941 HIGH · 10.0 Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter. Kootenay Web Inc
- CVE-2000-0940 MEDIUM · 6.4 Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter. Metertek
- CVE-2000-0939 MEDIUM · 5.0 Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the… Samba
- CVE-2000-0938 MEDIUM · 5.0 Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows… Samba
- CVE-2000-0936 LOW · 2.1 Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information… Samba
- CVE-2000-0935 HIGH · 7.2 Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file. Samba
- CVE-2000-0934 HIGH · 7.2 Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. Redhat
- CVE-2000-0933 MEDIUM · 4.6 The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted,… Microsoft
- CVE-2000-0932 MEDIUM · 5.0 MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial… Clearswift
- CVE-2000-0930 MEDIUM · 5.0 Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch. David Harris
- CVE-2000-0929 MEDIUM · 5.0 Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not… Microsoft
- CVE-2000-0928 LOW · 2.1 WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares. Wquinn
- CVE-2000-0927 MEDIUM · 4.6 WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions. Wquinn
- CVE-2000-0925 MEDIUM · 5.0 The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain… Smartwin Technology
- CVE-2000-0924 MEDIUM · 5.0 Directory traversal kwetsbaarheid in search.cgi CGI script in Armada Master Index stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot… Armada Design
- CVE-2000-0923 HIGH · 7.5 authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter. Aplio
- CVE-2000-0922 MEDIUM · 5.0 Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a ..… Bytes Interactive
- CVE-2000-0921 MEDIUM · 5.0 Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the… Hassan Consulting
- CVE-2000-0920 MEDIUM · 5.0 Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in… Boa
- CVE-2000-0919 MEDIUM · 5.0 Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. Phpix