Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,724 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2000-0403 | Not scored | The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables, aka the "HostAnnouncement Flooding" or… | Jul 12, 2000 |
| CVE-2000-0402 | Not scored | The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability. | Jul 12, 2000 |
| CVE-2000-0399 | Not scored | Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name. | Jul 12, 2000 |
| CVE-2000-0398 | Not scored | Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long query_string parameter in the HTTP GET request. | Jul 12, 2000 |
| CVE-2000-0397 | Not scored | The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account. | Jul 12, 2000 |
| CVE-2000-0396 | Not scored | The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files. | Jul 12, 2000 |
| CVE-2000-0395 | Not scored | Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request. | Jul 12, 2000 |
| CVE-2000-0394 | Not scored | NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Middle signature. | Jul 12, 2000 |
| CVE-2000-0393 | Not scored | The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute. | Jul 12, 2000 |
| CVE-2000-0392 | Not scored | Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges. | Jul 12, 2000 |
| CVE-2000-0391 | Not scored | Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges. | Jul 12, 2000 |
| CVE-2000-0390 | Not scored | Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges. | Jul 12, 2000 |
| CVE-2000-0389 | Not scored | Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges. | Jul 12, 2000 |
| CVE-2000-0388 | Not scored | Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable. | Jul 12, 2000 |
| CVE-2000-0387 | Not scored | The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files. | Jul 12, 2000 |
| CVE-2000-0382 | Not scored | ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site. | Jul 12, 2000 |
| CVE-2000-0381 | Not scored | The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter. | Jul 12, 2000 |
| CVE-2000-0380 | Not scored | The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string. | Jul 12, 2000 |
| CVE-2000-0379 | Not scored | The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so. | Jul 12, 2000 |
| CVE-2000-0377 | Not scored | The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability. | Jul 12, 2000 |
| CVE-2000-0376 | Not scored | Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request. | Jul 12, 2000 |
| CVE-2000-0373 | Not scored | Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges. | Jul 12, 2000 |
| CVE-2000-0372 | Not scored | Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges. | Jul 12, 2000 |
| CVE-2000-0371 | Not scored | The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack. | Jul 12, 2000 |
| CVE-2000-0370 | Not scored | The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command. | Jul 12, 2000 |
| CVE-2000-0367 | Not scored | Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges. | Jul 12, 2000 |
| CVE-2000-0363 | Not scored | Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory. | Jul 12, 2000 |
| CVE-2000-0362 | Not scored | Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges. | Jul 12, 2000 |
| CVE-2000-0361 | Not scored | The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information. | Jul 12, 2000 |
| CVE-2000-0360 | Not scored | Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article. | Jul 12, 2000 |
| CVE-2000-0359 | Not scored | Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header. | Jul 12, 2000 |
| CVE-2000-0356 | Not scored | Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts. | Jul 12, 2000 |
| CVE-2000-0354 | Not scored | mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory. | Jul 12, 2000 |
| CVE-2000-0353 | Not scored | Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine. | Jul 12, 2000 |
| CVE-2000-0352 | Not scored | Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL. | Jul 12, 2000 |
| CVE-2000-0350 | Not scored | A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events. | Jul 12, 2000 |
| CVE-2000-0346 | Not scored | AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server. | Jul 12, 2000 |
| CVE-2000-0342 | Not scored | Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment." | Jul 12, 2000 |
| CVE-2000-0339 | Not scored | ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules. | Jul 12, 2000 |
| CVE-2000-0337 | Not scored | Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter. | Jul 12, 2000 |
| CVE-2000-0336 | Not scored | Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. | Jul 12, 2000 |
| CVE-2000-0334 | Not scored | The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule. | Jul 12, 2000 |
| CVE-2000-0331 | Not scored | Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability. | Jul 12, 2000 |
| CVE-2000-0316 | Not scored | Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option. | Jul 12, 2000 |
| CVE-2000-0311 | Not scored | The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability. | Jul 12, 2000 |
| CVE-2000-0305 | Not scored | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly"… | Jul 12, 2000 |
| CVE-2000-0304 | Not scored | Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability. | Jul 12, 2000 |
| CVE-2000-0303 | Not scored | Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack. | Jul 12, 2000 |
| CVE-2000-0297 | Not scored | Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables. | Jul 12, 2000 |
| CVE-2000-0279 | Not scored | BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers. | Jul 12, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.