Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
399,298 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2000-0992 | Not scored | Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack. | Jan 22, 2001 |
| CVE-2000-0991 | Not scored | Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability. | Jan 22, 2001 |
| CVE-2000-0990 | Not scored | cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username. | Jan 22, 2001 |
| CVE-2000-0989 | Not scored | Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username. | Jan 22, 2001 |
| CVE-2000-0984 | Not scored | The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string. | Jan 22, 2001 |
| CVE-2000-0983 | Not scored | Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to the NetMeeting port, aka the "NetMeeting Desktop Sharing" vulnerability. | Jan 22, 2001 |
| CVE-2000-0982 | Not scored | Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the… | Jan 22, 2001 |
| CVE-2000-0981 | Not scored | MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password. | Jan 22, 2001 |
| CVE-2000-0980 | Not scored | NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network. | Jan 22, 2001 |
| CVE-2000-0979 | Not scored | File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the… | Jan 22, 2001 |
| CVE-2000-0978 | Not scored | bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter. | Jan 22, 2001 |
| CVE-2000-0977 | Not scored | mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email"… | Jan 22, 2001 |
| CVE-2000-0975 | Not scored | Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack. | Jan 22, 2001 |
| CVE-2000-0974 | Not scored | GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection. | Jan 22, 2001 |
| CVE-2000-0973 | Not scored | Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated. | Jan 22, 2001 |
| CVE-2000-0972 | Not scored | HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates. | Jan 22, 2001 |
| CVE-2000-0970 | Not scored | IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID… | Jan 22, 2001 |
| CVE-2000-0969 | Not scored | Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon. | Jan 22, 2001 |
| CVE-2000-0968 | Not scored | Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command. | Jan 22, 2001 |
| CVE-2000-0967 | Not scored | PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs. | Jan 22, 2001 |
| CVE-2000-0966 | Not scored | Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges. | Jan 22, 2001 |
| CVE-2000-0965 | Not scored | The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization). | Jan 22, 2001 |
| CVE-2000-0962 | Not scored | The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service. | Jan 22, 2001 |
| CVE-2000-0961 | Not scored | Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command. | Jan 22, 2001 |
| CVE-2000-0960 | Not scored | The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses… | Jan 22, 2001 |
| CVE-2000-0959 | Not scored | glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack. | Jan 22, 2001 |
| CVE-2000-0958 | Not scored | HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window. | Jan 22, 2001 |
| CVE-2000-0957 | Not scored | The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes. | Jan 22, 2001 |
| CVE-2000-0956 | Not scored | cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions. | Jan 22, 2001 |
| CVE-2000-0953 | Not scored | Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection. | Jan 22, 2001 |
| CVE-2000-0952 | Not scored | global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters. | Jan 22, 2001 |
| CVE-2000-0951 | Not scored | A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search. | Jan 22, 2001 |
| CVE-2000-0949 | Not scored | Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option. | Jan 22, 2001 |
| CVE-2000-0948 | Not scored | GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack. | Jan 22, 2001 |
| CVE-2000-0947 | Not scored | Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command. | Jan 22, 2001 |
| CVE-2000-0946 | Not scored | Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization. | Jan 22, 2001 |
| CVE-2000-0944 | Not scored | CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password. | Jan 22, 2001 |
| CVE-2000-0943 | Not scored | Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER command. | Jan 22, 2001 |
| CVE-2000-0942 | Not scored | The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site… | Jan 22, 2001 |
| CVE-2000-0941 | Not scored | Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter. | Jan 22, 2001 |
| CVE-2000-0938 | Not scored | Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server. | Jan 22, 2001 |
| CVE-2000-0937 | Not scored | Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks. | Jan 22, 2001 |
| CVE-2000-0936 | Not scored | Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords. | Jan 22, 2001 |
| CVE-2000-0935 | Not scored | Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file. | Jan 22, 2001 |
| CVE-2000-0934 | Not scored | Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. | Jan 22, 2001 |
| CVE-2000-0933 | Not scored | The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified… | Jan 22, 2001 |
| CVE-2000-0932 | Not scored | MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service. | Jan 22, 2001 |
| CVE-2000-0930 | Not scored | Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch. | Jan 22, 2001 |
| CVE-2000-0929 | Not scored | Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability. | Jan 22, 2001 |
| CVE-2000-0928 | Not scored | WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares. | Jan 22, 2001 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.