CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2000-0918 HIGH · 7.2 Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters. Kde
- CVE-2000-0917 HIGH · 10.0 Opmaakstringkwetsbaarheid in use_syslog() -functie in LPRng 3.6.24 stelt externe aanvallers in staat om willekeurige opdrachten uit te voeren. Caldera Redhat Trustix
- CVE-2000-0916 HIGH · 7.5 FreeBSD 4.1.1 en eerder, en mogelijk andere op BSD gebaseerde besturingssystemen, gebruiken een onvoldoende random number generator om initiële TCP-sequentienummers (ISN) te genereren, waarmee externe… Freebsd
- CVE-2000-0915 MEDIUM · 5.0 Fingerd in FreeBSD 4.1.1 stelt externe aanvallers in staat om willekeurige bestanden te lezen door de naam van het doelbestand op te geven in plaats… Freebsd
- CVE-2000-0914 MEDIUM · 5.0 OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests. Openbsd
- CVE-2000-0913 MEDIUM · 5.0 mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name… Apache
- CVE-2000-0912 MEDIUM · 5.0 MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter. Jcs Web Works
- CVE-2000-0911 MEDIUM · 5.0 IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the… Horde
- CVE-2000-0910 MEDIUM · 4.6 Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address. Horde
- CVE-2000-0909 HIGH · 7.5 Een bufferoverloop in de automatische e-mailcontrolecomponent van Pine 4.21 en eerdere versies stelt externe aanvallers in staat om willekeurige commando's uit te voeren via een… University Of Washington
- CVE-2000-0908 MEDIUM · 5.0 BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the… Netcplus
- CVE-2000-0907 HIGH · 7.5 EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands. Etype
- CVE-2000-0906 MEDIUM · 5.0 Directory traversal kwetsbaarheid in Moreover.com cached_feed.cgi script versie 4.July.00 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot dot) aanval… Moreover.com
- CVE-2000-0905 MEDIUM · 5.0 QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information… Qnx
- CVE-2000-0904 MEDIUM · 5.0 Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root,… Qnx
- CVE-2000-0903 MEDIUM · 5.0 Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a ..… Qnx
- CVE-2000-0902 MEDIUM · 5.0 getalbum.php in PhotoAlbum voor 0.9.9 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot dot) -aanval. Nathan Purciful
- CVE-2000-0901 MEDIUM · 4.6 Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable. Juergen
- CVE-2000-0900 HIGH · 7.5 Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation… Acme Labs
- CVE-2000-0888 MEDIUM · 5.0 named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the… Isc Debian
- CVE-2000-0887 MEDIUM · 5.0 genoemd in BIND 8.2 tot en met 8.2.2-P6 kunnen externe aanvallers een denial of service veroorzaken door een verzoek voor gecomprimeerde zoneoverdracht (ZXFR) te doen… Isc
- CVE-2000-0886 HIGH · 7.5 IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands,… Microsoft
- CVE-2000-0885 HIGH · 7.5 Bufferoverloop in Microsoft Network Monitor (Netmon) stelt externe aanvallers in staat om willekeurige commando's uit te voeren via een lange browsernaam in een CIFS-browseframe, een… Microsoft
- CVE-2000-0884 HIGH · 7.5 IIS 4.0 en 5.0 stellen externe aanvallers in staat om documenten buiten de webroot te lezen en mogelijk willekeurige opdrachten uit te voeren via onjuist… Microsoft
- CVE-2000-0818 HIGH · 10.0 The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files… Oracle
- CVE-2000-0817 HIGH · 7.5 Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon… Microsoft
- CVE-2000-0811 MEDIUM · 5.0 Auction Weaver 1.0 tot en met 1.04 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (punt punt) aanval op de… Cgi Script Center
- CVE-2000-0810 HIGH · 7.5 Auction Weaver 1.0 tot en met 1.04 valideert de namen van formuliervelden niet correct, waardoor externe aanvallers willekeurige bestanden en mappen kunnen verwijderen via een… Cgi Script Center
- CVE-2000-0803 HIGH · 10.0 GNU Groff gebruikt de huidige werkmap om een apparaatbeschrijvingsbestand te vinden, waarmee een lokale gebruiker extra privileges kan krijgen door een kwaadaardige postpro-richtlijn op te… Gnu
- CVE-2000-0963 HIGH · 7.2 Bufferoverloop in ncurses-bibliotheek stelt lokale gebruikers in staat om willekeurige opdrachten uit te voeren via lange omgevingsinformatie zoals TERM of TERMINFO_DIRS. Immunix Freebsd Redhat Invisible-island
- CVE-2000-1212 MEDIUM · 5.0 Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to… Zope
- CVE-2000-1211 HIGH · 7.5 Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers… Zope
- CVE-1999-1579 MEDIUM · 5.0 De Cenroll ActiveX-besturing (xenroll.dll) voor Terminal Server-edities van Windows NT 4.0 en Windows NT Server 4.0 vóór SP6 stelt externe aanvallers in staat een denial-of-service-aanval… Microsoft
- CVE-2000-1078 MEDIUM · 5.0 ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character. Mirabilis
- CVE-2000-1077 HIGH · 10.0 Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a… Iplanet
- CVE-2000-1074 HIGH · 10.0 csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain… Netscape
- CVE-2000-1065 MEDIUM · 5.0 Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via… Hp
- CVE-2000-1062 MEDIUM · 5.0 Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service. Hp
- CVE-2000-1057 MEDIUM · 4.6 Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions. Hp
- CVE-2000-1056 HIGH · 7.5 CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords. Cisco
- CVE-2000-1052 MEDIUM · 5.0 Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet. Macromedia
- CVE-2000-1051 MEDIUM · 5.0 Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet. Macromedia
- CVE-2000-1050 MEDIUM · 5.0 Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in… Macromedia
- CVE-2000-1046 HIGH · 10.0 Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute… Lotus
- CVE-2000-1042 HIGH · 10.0 Bufferoverloop in ypserv in Mandrake Linux 7.1 en eerder, en mogelijk andere Linux-besturingssystemen, stelt een aanvaller in staat rootprivileges te verkrijgen wanneer ypserv is gebouwd… Mandrakesoft
- CVE-2000-1035 HIGH · 10.0 Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a… Typsoft
- CVE-2000-1034 HIGH · 10.0 Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML… Microsoft
- CVE-2000-1033 HIGH · 7.5 Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to… Cat Soft
- CVE-2000-1029 HIGH · 10.0 Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query. Isc
- CVE-2000-1028 HIGH · 7.2 Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument. Hp