Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29911 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2000-0376 1 I-drive 1 Filo 2026-04-16 N/A
Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request.
CVE-2000-0334 1 Allaire 1 Spectra 2026-04-16 N/A
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.
CVE-2001-0477 1 Webcalendar 1 Webcalendar 2026-04-16 N/A
Vulnerability in WebCalendar 0.9.26 allows remote command execution.
CVE-2000-0467 1 Sam Lantinga 1 Splitvt 2026-04-16 N/A
Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function.
CVE-2000-0478 1 Symantec 1 Norton Antivirus 2026-04-16 N/A
In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server.
CVE-2000-0446 1 Marty Bochane 1 Mdbms 2026-04-16 N/A
Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string.
CVE-2000-0456 1 Netbsd 1 Netbsd 2026-04-16 N/A
NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka "cpu-hog".
CVE-2000-0488 1 Ithouse 1 Ithouse Mail Server 2026-04-16 N/A
Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command.
CVE-2000-0529 1 Network Associates 1 Net Tools Pki Server 2026-04-16 N/A
Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request.
CVE-2000-0542 1 Ericsson 1 Axc Tigris Multiservice Access Platform 2026-04-16 N/A
Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds.
CVE-2000-0539 1 Macromedia 1 Jrun 2026-04-16 N/A
Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet.
CVE-2000-0600 2 Netscape, Novell 2 Enterprise Server, Netware 2026-04-16 N/A
Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL.
CVE-2000-1044 1 Suse 1 Suse Linux 2026-04-16 N/A
Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacker to gain root privileges.
CVE-2000-0590 1 Cgi-world 1 Poll It 2026-04-16 N/A
Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter.
CVE-2000-0660 1 Alt-n 1 Worldclient 2026-04-16 N/A
The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0670 1 Cvsweb Developer 1 Cvsweb 2026-04-16 N/A
The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters.
CVE-2000-0690 1 Cgi Script Center 1 Auction Weaver 2026-04-16 N/A
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.
CVE-2000-0731 1 Jeremy Arnold 1 Worm Webserver 2026-04-16 N/A
Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2001-0492 1 Netcruiser Software 1 Netcruiser Web Server 2026-04-16 N/A
Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing (1) con, (2) com2, or (3) com3.
CVE-2000-0810 1 Cgi Script Center 1 Auction Weaver 2026-04-16 N/A
Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.