CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2007-5894 HIGH · 9.3 The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain… Mit
- CVE-2007-0896 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script or… Sage
- CVE-2006-5407 HIGH · 7.5 PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the include_dir parameter. Enhancesoft
- CVE-2006-4339 CRITICAL · 9.1 A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash.… Openssl
- CVE-2006-2389 HIGH · 9.3 Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code… Microsoft
- CVE-2006-1316 HIGH · 9.3 Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code… Microsoft
- CVE-2006-0033 HIGH · 9.3 Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code… Microsoft
- CVE-2006-2936 HIGH · 7.8 The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory… Linux
- CVE-2006-2451 MEDIUM · 4.6 The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of… Linux
- CVE-2006-2910 MEDIUM · 5.1 Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with… Cowon America
- CVE-2006-2934 MEDIUM · 5.0 SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash)… Linux
- CVE-2006-2199 HIGH · 7.6 Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox… Openoffice Sun
- CVE-2006-2198 HIGH · 7.6 OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious… Openoffice Sun
- CVE-2006-2200 MEDIUM · 5.1 Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of… Mimms Xine
- CVE-2006-1471 MEDIUM · 4.6 Format string kwetsbaarheid in de CF_syslog functie gestart in Apple Mac OS X 10.4 tot 10.4.6 stelt lokale gebruikers in staat om willekeurige code uit… Apple
- CVE-2006-1470 MEDIUM · 5.0 OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request… Apple
- CVE-2006-1469 HIGH · 7.5 Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibly… Apple
- CVE-2006-1468 MEDIUM · 5.0 Unspecified vulnerability in Apple File Protocol (AFP) server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and folders… Apple
- CVE-2006-3011 MEDIUM · 4.6 The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a… Php
- CVE-2006-2310 MEDIUM · 5.0 BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm file… New Atlanta Communications
- CVE-2006-2918 MEDIUM · 5.0 The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it… Lanap Botdetect
- CVE-2006-3014 MEDIUM · 5.1 Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player… Microsoft
- CVE-2006-3096 HIGH · 7.5 Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) forum parameter in messagepost.cfm… Ipostmx
- CVE-2006-2656 HIGH · 7.5 Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE:… Libtiff
- CVE-2006-2073 MEDIUM · 5.0 Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated… Isc
- CVE-2006-1283 HIGH · 7.2 opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which… Freebsd
- CVE-2006-0987 MEDIUM · 5.0 The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary… Isc
- CVE-2005-4459 HIGH · 10.0 Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote… Vmware
- CVE-2005-2096 HIGH · 7.5 zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description… Zlib
- CVE-2005-1794 MEDIUM · 6.4 Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows… Microsoft
- CVE-2005-1439 HIGH · 7.5 Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter. Enhancesoft
- CVE-2005-1436 MEDIUM · 6.8 Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2)… Enhancesoft
- CVE-2001-1420 MEDIUM · 5.0 AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a long filename, possibly caused by a buffer… Aol
- CVE-1999-1373 MEDIUM · 5.0 FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g. via… Fore
- CVE-2004-2320 MEDIUM · 5.3 The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds… Bea
- CVE-2004-0230 MEDIUM · 5.0 TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss)… Juniper Microsoft Oracle Openpgp
- CVE-2001-1411 HIGH · 7.2 Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs. Apple
- CVE-1999-1263 LOW · 2.6 Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the… Metamail Corporation
- CVE-2002-1117 MEDIUM · 5.0 Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing… Symantec Veritas
- CVE-2000-1209 HIGH · 10.0 The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE)… Compaq Microsoft
- CVE-2002-0510 MEDIUM · 5.0 The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine… Linux
- CVE-2002-0478 MEDIUM · 5.0 De standaardconfiguratie van Foundry Networks EdgeIron 4802F stelt externe aanvallers in staat om gevoelige informatie te wijzigen via willekeurige SNMP-communitystrings. Foundrynet
- CVE-2001-1334 MEDIUM · 5.0 Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as… Phpslash
- CVE-2001-1175 HIGH · 7.2 vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform… Andries Brouwer
- CVE-2001-1174 HIGH · 7.5 Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header. Elm Development Group
- CVE-2001-1171 HIGH · 7.2 Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users… Checkpoint
- CVE-2001-1165 MEDIUM · 4.6 Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with… Intego
- CVE-2001-1222 MEDIUM · 5.0 Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid… Plesk
- CVE-2002-0109 MEDIUM · 6.4 Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via… Linksys
- CVE-2002-0062 HIGH · 7.2 Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines… Debian Freebsd Redhat Suse