CVE-database
132.662 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2002-1117 MEDIUM · 5.0 Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing… Symantec Veritas
- CVE-2000-1209 HIGH · 10.0 The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE)… Compaq Microsoft
- CVE-2002-0510 MEDIUM · 5.0 The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine… Linux
- CVE-2002-0478 MEDIUM · 5.0 De standaardconfiguratie van Foundry Networks EdgeIron 4802F stelt externe aanvallers in staat om gevoelige informatie te wijzigen via willekeurige SNMP-communitystrings. Foundrynet
- CVE-2001-1334 MEDIUM · 5.0 Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as… Phpslash
- CVE-2001-1175 HIGH · 7.2 vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform… Andries Brouwer
- CVE-2001-1174 HIGH · 7.5 Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header. Elm Development Group
- CVE-2001-1171 HIGH · 7.2 Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users… Checkpoint
- CVE-2001-1165 MEDIUM · 4.6 Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with… Intego
- CVE-2001-1222 MEDIUM · 5.0 Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid… Plesk
- CVE-2002-0109 MEDIUM · 6.4 Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via… Linksys
- CVE-2002-0062 HIGH · 7.2 Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines… Debian Freebsd Redhat Suse
- CVE-2001-1377 MEDIUM · 5.0 Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via… Freeradius Gnu Icradius Livingston
- CVE-2001-1376 HIGH · 7.5 Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via… Ascend Freeradius Gnu Icradius
- CVE-2001-0891 HIGH · 7.2 Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by… Sgi Cray
- CVE-2001-1457 HIGH · 7.5 Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable. Nobreak Technologies
- CVE-1999-1091 MEDIUM · 5.0 UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files… Rtin Tin
- CVE-1999-1081 MEDIUM · 5.0 Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. Novell
- CVE-2001-1210 MEDIUM · 6.4 Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers… Cisco
- CVE-1999-1174 MEDIUM · 4.6 ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a… Iomega
- CVE-2001-1184 MEDIUM · 5.0 wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier,… Denicomp
- CVE-1999-1024 HIGH · 7.5 ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an… Lbl
- CVE-2000-1202 HIGH · 7.2 ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious… Ibm
- CVE-2000-1199 MEDIUM · 4.6 PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases. Postgresql
- CVE-2000-1195 HIGH · 7.5 telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line… Caldera
- CVE-2000-1194 HIGH · 7.5 Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1)… Argosoft
- CVE-2000-1200 MEDIUM · 5.0 Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null… Microsoft
- CVE-2000-0892 LOW · 2.6 Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain… U Win Caldera
- CVE-2001-0514 HIGH · 7.5 SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested… Atmel Linksys Netgear
- CVE-2001-0380 MEDIUM · 6.4 Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community… Crosscom Olicom
- CVE-2000-0351 MEDIUM · 4.6 Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages. Sco
- CVE-2000-0314 MEDIUM · 5.0 traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is… Debian Digital Netbsd Redhat
- CVE-2000-0313 MEDIUM · 4.6 Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations. Openbsd
- CVE-2000-0312 HIGH · 7.2 cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake… Openbsd
- CVE-2000-0310 MEDIUM · 5.0 IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets. Openbsd
- CVE-2000-0308 HIGH · 10.0 Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to… Netscape Sco
- CVE-2000-1149 HIGH · 7.5 Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal… Microsoft
- CVE-2000-1116 HIGH · 7.5 Buffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a… Transsoft
- CVE-2000-1104 HIGH · 7.5 Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link… Microsoft
- CVE-2000-1244 HIGH · 7.5 Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows… Broadcom
- CVE-2000-1243 MEDIUM · 5.0 Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the… Dansie
- CVE-2000-1242 HIGH · 9.0 The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access. Apc
- CVE-2000-1241 HIGH · 10.0 Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a "grave security fault." Sips
- CVE-2000-1240 MEDIUM · 5.0 Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute… Anyportal Php
- CVE-2000-1239 HIGH · 9.0 The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote… Ibm
- CVE-2000-1238 HIGH · 7.5 BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL… Bea
- CVE-2000-1237 MEDIUM · 5.0 The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid… Floosietek
- CVE-2000-1236 HIGH · 7.5 SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query… Oracle
- CVE-2000-1235 MEDIUM · 5.0 The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view… Oracle
- CVE-2000-1234 MEDIUM · 5.0 violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod… Phorum