Export limit exceeded: 29920 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (29920 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-1999-1571 1 Sco 1 Openserver 2026-04-16 N/A
Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570.
CVE-2005-3878 1 Alex King 1 Php Doc System 2026-04-16 N/A
Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or include arbitrary files via a .. (dot dot) in the show parameter.
CVE-1999-1583 1 Ibm 1 Aix 2026-04-16 N/A
Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.
CVE-1999-1584 1 Sun 2 Openwindows, Sunos 2026-04-16 N/A
Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586.
CVE-1999-1591 1 Microsoft 2 Internet Information Server, Visual Interdev 2026-04-16 N/A
Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.
CVE-1999-1587 1 Sun 2 Solaris, Sunos 2026-04-16 N/A
/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.
CVE-2005-3888 1 Gadu-gadu 1 Gadu-gadu Instant Messenger 2026-04-16 N/A
Memory leak in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code other than 2 and a large size field, which allocates memory for the packet but does not free it after the packet has been dropped.
CVE-2000-0015 1 Ascend 1 Cascadeview Ux 2026-04-16 N/A
CascadeView TFTP server allows local users to gain privileges via a symlink attack.
CVE-2000-0018 1 Windowmaker 1 Wmmon 2026-04-16 N/A
wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.
CVE-2005-1213 1 Microsoft 1 Outlook Express 2026-04-16 N/A
Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.
CVE-2000-0032 1 Sun 2 Solaris, Sunos 2026-04-16 N/A
Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
CVE-2000-0039 1 Altavista 1 Search Intranet 2026-04-16 N/A
AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.
CVE-2000-0053 1 Microsoft 1 Commercial Internet System 2026-04-16 N/A
Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.
CVE-2000-0048 1 Corel 1 Linux 2026-04-16 N/A
get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program.
CVE-2000-0049 1 Nullsoft 1 Winamp 2026-04-16 N/A
Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.
CVE-2000-0051 1 Allaire 1 Spectra 2026-04-16 N/A
The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL.
CVE-2006-2793 1 Aspsitem 1 Aspsitem 2026-04-16 N/A
SQL injection vulnerability in Anket.asp in ASPSitem 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter.
CVE-2000-0058 1 Handspring 1 Visor Network Hotsync 2026-04-16 N/A
Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files.
CVE-2000-0067 1 Cybercash 1 Merchant Connection Kit 2026-04-16 N/A
CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack.
CVE-2000-0069 1 Sun 1 Solstice Backup 2026-04-16 N/A
The recover program in Solstice Backup allows local users to restore sensitive files.