Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,803 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2000-0772 | Not scored | The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password. | Sep 21, 2000 |
| CVE-2000-0769 | Not scored | O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe. | Sep 21, 2000 |
| CVE-2000-0760 | Not scored | The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension. | Sep 21, 2000 |
| CVE-2000-0759 | Not scored | Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path. | Sep 21, 2000 |
| CVE-2000-0757 | Not scored | The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed. | Sep 21, 2000 |
| CVE-2000-0756 | Not scored | Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service. | Sep 21, 2000 |
| CVE-2000-0755 | Not scored | Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges. | Sep 21, 2000 |
| CVE-2000-0752 | Not scored | Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments. | Sep 21, 2000 |
| CVE-2000-0748 | Not scored | OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse. | Sep 21, 2000 |
| CVE-2000-0746 | Not scored | Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error… | Sep 21, 2000 |
| CVE-2000-0736 | Not scored | Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user forwards a message. | Sep 21, 2000 |
| CVE-2000-0735 | Not scored | Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user replies to a message. | Sep 21, 2000 |
| CVE-2000-0734 | Not scored | eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections. | Sep 21, 2000 |
| CVE-2000-0724 | Not scored | The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files. | Sep 21, 2000 |
| CVE-2000-0723 | Not scored | Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config. | Sep 21, 2000 |
| CVE-2000-0722 | Not scored | Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages. | Sep 21, 2000 |
| CVE-2000-0721 | Not scored | The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace them with Trojan horses. | Sep 21, 2000 |
| CVE-2000-0719 | Not scored | VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program. | Sep 21, 2000 |
| CVE-2000-0715 | Not scored | DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file. | Sep 21, 2000 |
| CVE-2000-0714 | Not scored | umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files. | Sep 21, 2000 |
| CVE-2000-0713 | Not scored | Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier. | Sep 21, 2000 |
| CVE-2000-0710 | Not scored | The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name. | Sep 21, 2000 |
| CVE-2000-0709 | Not scored | The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name. | Sep 21, 2000 |
| CVE-2000-0704 | Not scored | Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands. | Sep 21, 2000 |
| CVE-2000-0701 | Not scored | The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges. | Sep 21, 2000 |
| CVE-2000-0697 | Not scored | The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters. | Sep 21, 2000 |
| CVE-2000-0696 | Not scored | The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling… | Sep 21, 2000 |
| CVE-2000-0695 | Not scored | Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options. | Sep 21, 2000 |
| CVE-2000-0692 | Not scored | ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set. | Sep 21, 2000 |
| CVE-2000-0691 | Not scored | The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file. | Sep 21, 2000 |
| CVE-2000-0690 | Not scored | Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter. | Sep 21, 2000 |
| CVE-2000-0689 | Not scored | Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd… | Sep 21, 2000 |
| CVE-2000-0688 | Not scored | Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter. | Sep 21, 2000 |
| CVE-2000-0687 | Not scored | Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter. | Sep 21, 2000 |
| CVE-2000-0686 | Not scored | Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter. | Sep 21, 2000 |
| CVE-2000-0680 | Not scored | The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names,… | Sep 21, 2000 |
| CVE-2000-0667 | Not scored | Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service. | Aug 3, 2000 |
| CVE-2000-0659 | Not scored | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 CONNECT request. | Aug 3, 2000 |
| CVE-2000-0658 | Not scored | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the POP3 protocol. | Aug 3, 2000 |
| CVE-2000-0657 | Not scored | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol. | Aug 3, 2000 |
| CVE-2000-0656 | Not scored | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol. | Aug 3, 2000 |
| CVE-2000-0653 | Not scored | Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability. | Aug 3, 2000 |
| CVE-2000-0649 | Not scored | IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined. | Aug 3, 2000 |
| CVE-2000-0648 | Not scored | WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command. | Aug 3, 2000 |
| CVE-2000-0647 | Not scored | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server. | Aug 3, 2000 |
| CVE-2000-0646 | Not scored | WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred. | Aug 3, 2000 |
| CVE-2000-0645 | Not scored | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE (STOU),… | Aug 3, 2000 |
| CVE-2000-0629 | Not scored | The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet. | Aug 3, 2000 |
| CVE-2000-0626 | Not scored | Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request. | Aug 3, 2000 |
| CVE-2000-0625 | Not scored | NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password. | Aug 3, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.