Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,724 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2000-0264 | Not scored | Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods. | Jul 12, 2000 |
| CVE-2000-0262 | Not scored | The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request. | Jul 12, 2000 |
| CVE-2000-0261 | Not scored | The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | Jul 12, 2000 |
| CVE-2000-0251 | Not scored | HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses. | Jul 12, 2000 |
| CVE-2000-0249 | Not scored | The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program. | Jul 12, 2000 |
| CVE-2000-0236 | Not scored | Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump. | Jul 12, 2000 |
| CVE-2000-0195 | Not scored | setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file. | Jul 12, 2000 |
| CVE-2000-0175 | Not scored | Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command. | Jul 12, 2000 |
| CVE-2000-0174 | Not scored | StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | Jul 12, 2000 |
| CVE-2000-0168 | Not scored | Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability. | Jul 12, 2000 |
| CVE-2000-0157 | Not scored | NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process. | Jul 12, 2000 |
| CVE-2000-0092 | Not scored | The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. | Jul 12, 2000 |
| CVE-2000-0045 | Not scored | MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege. | Jul 12, 2000 |
| CVE-2000-0034 | Not scored | Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords." | Jul 12, 2000 |
| CVE-2000-0032 | Not scored | Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database. | Jul 12, 2000 |
| CVE-2000-0030 | Not scored | Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database. | Jul 12, 2000 |
| CVE-2000-0018 | Not scored | wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file. | Jul 12, 2000 |
| CVE-2000-0015 | Not scored | CascadeView TFTP server allows local users to gain privileges via a symlink attack. | Jul 12, 2000 |
| CVE-2000-0013 | Not scored | IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program. | Jul 12, 2000 |
| CVE-2000-0011 | Not scored | Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request. | Jul 12, 2000 |
| CVE-2000-0001 | Not scored | RealMedia server allows remote attackers to cause a denial of service via a long ramgen request. | Jul 12, 2000 |
| CVE-1999-0959 | Not scored | IRIX startmidi program allows local users to modify arbitrary files via a symlink attack. | Jul 12, 2000 |
| CVE-1999-0820 | Not scored | FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands. | Jul 12, 2000 |
| CVE-1999-0416 | Not scored | Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port. | Jul 12, 2000 |
| CVE-1999-0415 | Not scored | The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration. | Jul 12, 2000 |
| CVE-1999-0387 | Not scored | A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords. | Jul 12, 2000 |
| CVE-1999-0378 | Not scored | InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands. | Jul 12, 2000 |
| CVE-2000-0450 | Not scored | Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands. | Jun 15, 2000 |
| CVE-2000-0449 | Not scored | Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields. | Jun 15, 2000 |
| CVE-2000-0444 | Not scored | HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000. | Jun 15, 2000 |
| CVE-2000-0434 | Not scored | The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers. | Jun 15, 2000 |
| CVE-2000-0433 | Not scored | The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles. | Jun 15, 2000 |
| CVE-2000-0429 | Not scored | A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands. | Jun 15, 2000 |
| CVE-2000-0423 | Not scored | Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag. | Jun 15, 2000 |
| CVE-2000-0422 | Not scored | Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter. | Jun 15, 2000 |
| CVE-2000-0420 | Not scored | The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System (EFS) data. | Jun 15, 2000 |
| CVE-2000-0415 | Not scored | Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name. | Jun 15, 2000 |
| CVE-2000-0413 | Not scored | The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error… | Jun 15, 2000 |
| CVE-2000-0412 | Not scored | The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file. | Jun 15, 2000 |
| CVE-2000-0401 | Not scored | Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string. | Jun 15, 2000 |
| CVE-2000-0400 | Not scored | The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news… | Jun 15, 2000 |
| CVE-2000-0386 | Not scored | FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email. | Jun 15, 2000 |
| CVE-2000-0385 | Not scored | FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities. | Jun 15, 2000 |
| CVE-2000-0384 | Not scored | NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access. | Jun 15, 2000 |
| CVE-2000-0383 | Not scored | The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient. | Jun 15, 2000 |
| CVE-2000-0330 | Not scored | The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability. | Jun 2, 2000 |
| CVE-2000-0329 | Not scored | A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability. | Jun 2, 2000 |
| CVE-2000-0328 | Not scored | Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking. | Jun 2, 2000 |
| CVE-2000-0327 | Not scored | Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the "Virtual Machine Verifier" vulnerability. | Jun 2, 2000 |
| CVE-2000-0323 | Not scored | The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability. | Jun 2, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.