Export limit exceeded: 386257 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (29993 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-1999-0075 | 1 Washington University | 1 Wu-ftpd | 2026-04-16 | N/A |
| PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password. | ||||
| CVE-1999-0076 | 1 Washington University | 1 Wu-ftpd | 2026-04-16 | N/A |
| Buffer overflow in wu-ftp from PASV command causes a core dump. | ||||
| CVE-1999-0083 | 1 Sgi | 1 Irix | 2026-04-16 | N/A |
| getcwd() file descriptor leak in FTP. | ||||
| CVE-2006-2317 | 1 Ideal Science | 1 Idealbb | 2026-04-16 | N/A |
| Unspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to read arbitrary files under the web root via unspecified attack vectors related to the OpenTextFile method in Scripting.FileSystemObject. | ||||
| CVE-1999-0143 | 3 Mit, Process Software, Sun | 4 Kerberos, Kerberos 5, Multinet and 1 more | 2026-04-16 | N/A |
| Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys. | ||||
| CVE-1999-0150 | 1 Gnu | 1 Fingerd | 2026-04-16 | N/A |
| The Perl fingerd program allows arbitrary command execution from remote users. | ||||
| CVE-1999-0162 | 1 Cisco | 1 Ios | 2026-04-16 | N/A |
| The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering. | ||||
| CVE-1999-0167 | 1 Sun | 1 Sunos | 2026-04-16 | N/A |
| In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system. | ||||
| CVE-1999-0174 | 1 Netscape | 1 Communicator | 2026-04-16 | N/A |
| The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack. | ||||
| CVE-1999-0177 | 1 Oreilly | 1 Website | 2026-04-16 | N/A |
| The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs. | ||||
| CVE-2006-0465 | 1 Active121 | 1 Site Manager | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in risultati_ricerca.php in active121 Site Manager allows remote attackers to inject arbitrary web script or HTML via the cerca parameter. | ||||
| CVE-2005-3296 | 1 Hp | 1 Hp-ux | 2026-04-16 | N/A |
| The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in. | ||||
| CVE-2006-4386 | 1 Apple | 1 Quicktime | 2026-04-16 | N/A |
| Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie, a different issue than CVE-2006-4381. | ||||
| CVE-2006-4438 | 1 Doctor Web Ltd | 1 Dr.web | 2026-04-16 | N/A |
| Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name. | ||||
| CVE-2006-2590 | 1 E107 | 1 E107 | 2026-04-16 | N/A |
| SQL injection vulnerability in e107 before 0.7.5 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. | ||||
| CVE-2006-2591 | 1 E107 | 1 E107 | 2026-04-16 | N/A |
| Unspecified vulnerability in e107 before 0.7.5 has unknown impact and remote attack vectors related to an "emailing exploit". | ||||
| CVE-2006-2605 | 1 Dschat | 1 Dschat | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php. | ||||
| CVE-2006-3821 | 1 Adaptive Technology Resource Centre | 1 Atutor | 2026-04-16 | N/A |
| Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in (a) index_list.php and (2) year, (3) month, and (4) day parameter in (b) registration.php. | ||||
| CVE-2006-3824 | 1 Sun | 1 Solaris | 2026-04-16 | N/A |
| systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which causes a -1 argument to be used by the copyout function. NOTE: this issue has been referred to as an integer overflow, but it is probably more like a signedness error or integer underflow. | ||||
| CVE-2006-3827 | 1 Kailash Nadh | 1 Boastmachine | 2026-04-16 | N/A |
| SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the blog parameter. | ||||