CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2000-1027 MEDIUM · 5.0 Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV… Cisco
- CVE-2000-1026 HIGH · 10.0 Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands. Lbl
- CVE-2000-1024 HIGH · 10.0 eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands. Unify
- CVE-2000-1023 HIGH · 7.5 The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI… Alabanza
- CVE-2000-1018 LOW · 2.1 shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's… Mendel Cooper
- CVE-2000-1016 MEDIUM · 5.0 De standaardconfiguratie van Apache (httpd.conf) op SuSE 6.4 bevat een alias voor de map/usr/doc, waarmee externe aanvallers pakketdocumentatie kunnen lezen en systeemconfiguratie-informatie kunnen verkrijgen via… Suse
- CVE-2000-1014 HIGH · 7.5 Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format… Sco
- CVE-2000-1013 HIGH · 7.2 Met de setlocale-functie in FreeBSD 5.0 en eerder, en mogelijk andere besturingssystemen, kunnen lokale gebruikers willekeurige bestanden lezen via de omgevingsvariabele LANG. Freebsd
- CVE-2000-1008 MEDIUM · 4.6 PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the… Palm
- CVE-2000-1007 MEDIUM · 5.0 I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause… Symantec
- CVE-2000-1002 MEDIUM · 5.0 POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email… Stalker
- CVE-2000-1001 HIGH · 7.5 add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable. Element N.v
- CVE-2000-0998 HIGH · 7.2 Kwetsbaarheid van de opmaakreeks in het TOP-programma stelt lokale aanvallers in staat om rootprivileges te verkrijgen via de functie "kill" of "renice". Freebsd
- CVE-2000-0515 HIGH · 10.0 The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain… Hp
- CVE-2000-0147 LOW · 2.1 snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration. Sco
- CVE-1999-0472 MEDIUM · 5.0 The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it. Snmp Network Appliance
- CVE-1999-0632 MEDIUM · 5.3 The RPC portmapper service is running.
- CVE-1999-0792 MEDIUM · 5.0 ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration. Osicom
- CVE-1999-0516 HIGH · 7.5 An SNMP community name is guessable.
- CVE-1999-0024 MEDIUM · 5.0 DNS cache poisoning via BIND, by predictable query IDs. Isc Bsdi Ibm Nec
- CVE-1999-0524 MEDIUM · 4.0 ICMP-informatie zoals (1) netmask en (2) timestamp is toegestaan van willekeurige hosts. Apple Cisco Hp Ibm
- CVE-1999-0517 MEDIUM · 5.9 An SNMP community name is the default (e.g. public), null, or missing. Hp Sun
- CVE-1999-0511 CRITICAL · 9.1 IP forwarding is ingeschakeld op een machine die geen router of firewall is. Microsoft