Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29913 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-1999-0912 1 Freebsd 1 Freebsd 2026-04-16 N/A
FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.
CVE-1999-0913 1 Network Security Wizards 1 Dragon-fire Ids 2026-04-16 N/A
dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.
CVE-2000-0010 1 Tony Greenwood 1 Webwho\+ 2026-04-16 N/A
WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.
CVE-2001-0619 1 Lucent 1 Orinoco 2026-04-16 N/A
The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to. The 'Network Name' or SSID, which is used as a shared secret to join the network, is transmitted in the clear.
CVE-2000-0011 1 Analogx 1 Simpleserver Www 2026-04-16 N/A
Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.
CVE-2001-1560 1 Microsoft 2 Windows 2000, Windows Xp 2026-04-16 N/A
Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after receiving a WM_NCCREATE message.
CVE-2002-0121 1 Php 1 Php 2026-04-16 N/A
PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.
CVE-1999-0921 1 Bmc 1 Patrol Agent 2026-04-16 N/A
BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.
CVE-2000-0012 1 Hughes 1 Msql 2026-04-16 N/A
Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.
CVE-2001-1565 1 Apple 1 Mac Os X 2026-04-16 N/A
Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via the ps command.
CVE-1999-0922 1 Allaire 1 Coldfusion Server 2026-04-16 N/A
An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.
CVE-2001-1566 2 Vanessa, Verge 2 Vanessa Logger, Perdition 2026-04-16 N/A
Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function.
CVE-1999-0927 1 Gordano 1 Ntmail 2026-04-16 N/A
NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2002-0845 1 Iplanet 1 Iplanet Web Server 2026-04-16 N/A
Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.
CVE-2001-1574 1 Trend Micro 1 Interscan Viruswall 2026-04-16 N/A
Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code.
CVE-2000-0019 1 Ipswitch 1 Imail 2026-04-16 N/A
IMail POP3 daemon uses weak encryption, which allows local users to read files.
CVE-2006-1362 1 Mini-nuke 1 Mini-nuke Cms 2026-04-16 N/A
Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter in (a) members.asp, the (2) catid parameter in (b) articles.asp and (c) programs.asp, and the (3) id parameter in (d) hpages.asp and (e) forum.asp. NOTE: The pages.asp/id vector is already covered by CVE-2006-0870.
CVE-2001-0621 1 Cisco 1 Content Services Switch 11000 2026-04-16 N/A
The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands.
CVE-2000-0020 1 Man And Mice 1 Dns Pro 2026-04-16 N/A
DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.
CVE-2000-0021 1 Lotus 1 Domino Server 2026-04-16 N/A
Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.