Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,711 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2000-0300 | Not scored | The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. | Apr 26, 2000 |
| CVE-2000-0299 | Not scored | Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept. | Apr 26, 2000 |
| CVE-2000-0295 | Not scored | Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command. | Apr 26, 2000 |
| CVE-2000-0293 | Not scored | aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from… | Apr 26, 2000 |
| CVE-2000-0291 | Not scored | Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document. | Apr 26, 2000 |
| CVE-2000-0288 | Not scored | Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable. | Apr 26, 2000 |
| CVE-2000-0286 | Not scored | X fontserver xfs allows local users to cause a denial of service via malformed input to the server. | Apr 26, 2000 |
| CVE-2000-0284 | Not scored | Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands. | Apr 26, 2000 |
| CVE-2000-0281 | Not scored | Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message. | Apr 26, 2000 |
| CVE-2000-0280 | Not scored | Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL. | Apr 26, 2000 |
| CVE-2000-0275 | Not scored | CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN. | Apr 26, 2000 |
| CVE-2000-0271 | Not scored | read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords. | Apr 26, 2000 |
| CVE-2000-0270 | Not scored | The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack. | Apr 26, 2000 |
| CVE-2000-0269 | Not scored | Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess. | Apr 26, 2000 |
| CVE-2000-0266 | Not scored | Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL. | Apr 26, 2000 |
| CVE-2000-0259 | Not scored | The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users. | Apr 26, 2000 |
| CVE-2000-0256 | Not scored | Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability. | Apr 26, 2000 |
| CVE-2000-0250 | Not scored | The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords. | Apr 26, 2000 |
| CVE-2000-0248 | Not scored | The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands. | Apr 26, 2000 |
| CVE-2000-0223 | Not scored | Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter. | Apr 25, 2000 |
| CVE-2000-0206 | Not scored | The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges. | Apr 25, 2000 |
| CVE-2000-0192 | Not scored | The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system. | Apr 25, 2000 |
| CVE-2000-0185 | Not scored | RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private. | Apr 25, 2000 |
| CVE-2000-0184 | Not scored | Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords. | Apr 25, 2000 |
| CVE-2000-0181 | Not scored | Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection. | Apr 25, 2000 |
| CVE-2000-0165 | Not scored | The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands. | Apr 25, 2000 |
| CVE-2000-0112 | Not scored | The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during the installation. | Apr 25, 2000 |
| CVE-2000-0070 | Not scored | NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request." | Apr 25, 2000 |
| CVE-2000-0051 | Not scored | The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL. | Apr 25, 2000 |
| CVE-2000-0050 | Not scored | The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs. | Apr 25, 2000 |
| CVE-2000-0043 | Not scored | Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request. | Apr 25, 2000 |
| CVE-2000-0042 | Not scored | Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command. | Apr 25, 2000 |
| CVE-2000-0033 | Not scored | InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments. | Apr 25, 2000 |
| CVE-2000-0024 | Not scored | IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability. | Apr 25, 2000 |
| CVE-2000-0020 | Not scored | DNS PRO allows remote attackers to conduct a denial of service via a large number of connections. | Apr 25, 2000 |
| CVE-2000-0014 | Not scored | Denial of service in Savant web server via a null character in the requested URL. | Apr 25, 2000 |
| CVE-2000-0012 | Not scored | Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands. | Apr 25, 2000 |
| CVE-2000-0010 | Not scored | WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter. | Apr 25, 2000 |
| CVE-1999-1010 | Not scored | An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy. | Apr 25, 2000 |
| CVE-1999-1007 | Not scored | Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file. | Apr 25, 2000 |
| CVE-1999-1005 | Not scored | Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter. | Apr 25, 2000 |
| CVE-1999-0997 | Not scored | wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress. | Apr 25, 2000 |
| CVE-1999-0957 | Not scored | MajorCool mj_key_cache program allows local users to modify files via a symlink attack. | Apr 25, 2000 |
| CVE-1999-0950 | Not scored | Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories. | Apr 25, 2000 |
| CVE-1999-0897 | Not scored | iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack. | Apr 25, 2000 |
| CVE-1999-0895 | Not scored | Firewall-1 does not properly restrict access to LDAP attributes. | Apr 25, 2000 |
| CVE-1999-0889 | Not scored | Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set. | Apr 25, 2000 |
| CVE-1999-0824 | Not scored | A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users. | Apr 25, 2000 |
| CVE-1999-0803 | Not scored | The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack. | Apr 25, 2000 |
| CVE-1999-0782 | Not scored | KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable. | Apr 25, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.