Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (350298 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-1999-0388 1 Datalynx 1 Suguard 2026-04-16 N/A
DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.
CVE-1999-0390 2 Redhat, Suse 2 Linux, Suse Linux 2026-04-16 N/A
Buffer overflow in Dosemu Slang library in Linux.
CVE-1999-0459 2026-04-16 N/A
Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.
CVE-1999-0402 1 Gnu 1 Wget 2026-04-16 N/A
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
CVE-1999-0403 1 Cyrix 1 Linux 2026-04-16 N/A
A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.
CVE-1999-0401 1 Linux 1 Linux Kernel 2026-04-16 N/A
A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.
CVE-1999-0414 1 Linux 1 Linux Kernel 2026-04-16 N/A
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
CVE-2006-2571 1 Alkacon 1 Opencms 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action.
CVE-1999-0407 1 Microsoft 1 Internet Information Server 2026-04-16 N/A
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
CVE-2006-2572 1 Dian Gemilang 1 Dgbook 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) email, and (4) address parameters.
CVE-2006-2581 1 Rwiki 1 Rwiki 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in Wiki content in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVE-1999-0446 1 Netbsd 1 Netbsd 2026-04-16 N/A
Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS.
CVE-2006-2582 1 Rwiki 1 Rwiki 2026-04-16 N/A
The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors.
CVE-2006-2583 1 Nucleus Group 1 Nucleus Cms 2026-04-16 N/A
PHP remote file inclusion vulnerability in nucleus/libs/PLUGINADMIN.php in Nucleus 3.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[DIR_LIBS] parameter.
CVE-1999-0470 1 Novell 1 Netware 2026-04-16 N/A
A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.
CVE-1999-0492 2026-04-16 N/A
The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.
CVE-1999-0503 1 Microsoft 2 Windows 2000, Windows Nt 2026-04-16 N/A
A Windows NT local user or administrator account has a guessable password.
CVE-1999-0495 2026-04-16 N/A
A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares.
CVE-1999-0501 2026-04-16 N/A
A Unix account has a guessable password.
CVE-1999-0504 1 Microsoft 2 Windows 2000, Windows Nt 2026-04-16 N/A
A Windows NT local user or administrator account has a default, null, blank, or missing password.