Export limit exceeded: 29997 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (29997 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2002-0473 1 Phpbb Group 1 Phpbb 2026-04-16 N/A
db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path parameter.
CVE-1999-0356 2026-04-16 N/A
ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.
CVE-2001-0037 1 Keware Technologies 1 Homeseer 2026-04-16 N/A
Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. (dot dot) specifiers.
CVE-2001-0040 1 Apc 1 Apcupsd 2026-04-16 N/A
APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file.
CVE-1999-0361 2026-04-16 N/A
NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.
CVE-2001-0043 1 Phpgroupware 1 Phpgroupware 2026-04-16 N/A
phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info parameter of the phpgw.inc.php program.
CVE-2001-0045 1 Microsoft 1 Windows Nt 2026-04-16 N/A
The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the "Registry Permissions" vulnerabilities.
CVE-2001-0044 1 Lexmark 1 Markvision 2026-04-16 N/A
Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long arguments to the cat_network, cat_paraller, and cat_serial commands.
CVE-1999-0362 1 Ipswitch 1 Ws Ftp Server 2026-04-16 N/A
WS_FTP server remote denial of service through cwd command.
CVE-2002-0476 1 Macromedia 1 Flash Player 2026-04-16 N/A
Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand.
CVE-1999-0364 2 Fms Inc., Microsoft 2 Total Vb Sourcebook, Access 2026-04-16 N/A
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
CVE-2001-0047 1 Microsoft 1 Windows Nt 2026-04-16 N/A
The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages and gain privileges, aka one of the "Registry Permissions" vulnerabilities.
CVE-1999-0365 1 Metainfo 2 Metaip, Sendmail 2026-04-16 N/A
The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
CVE-2002-0477 1 Macromedia 1 Flash Player 2026-04-16 N/A
Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF file containing the "exec" FSCommand.
CVE-1999-0371 1 University Of Kansas 1 Lynx 2026-04-16 N/A
Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
CVE-2005-3687 1 Whm Autopilot 1 Whm Autopilot 2026-04-16 N/A
cancel_account.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary accounts via a modified c parameter.
CVE-1999-0373 1 Debian 1 Debian Linux 2026-04-16 N/A
Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.
CVE-1999-0377 1 Unix 1 Unix 2026-04-16 N/A
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
CVE-2006-3470 1 Dell 1 Openmanage Cd 2026-04-16 N/A
The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers to gain privileges.
CVE-2001-0052 1 Ibm 1 Db2 Universal Database 2026-04-16 N/A
IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.