Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,710 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2000-0202 | Not scored | Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query. | Apr 10, 2000 |
| CVE-2000-0201 | Not scored | The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking. | Apr 10, 2000 |
| CVE-2000-0200 | Not scored | Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" vulnerability. | Apr 10, 2000 |
| CVE-2000-0196 | Not scored | Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message. | Apr 10, 2000 |
| CVE-2000-0194 | Not scored | buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters. | Apr 10, 2000 |
| CVE-2000-0189 | Not scored | ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files. | Apr 10, 2000 |
| CVE-2000-0186 | Not scored | Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument. | Apr 10, 2000 |
| CVE-2000-0182 | Not scored | iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic. | Apr 10, 2000 |
| CVE-2000-0178 | Not scored | ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions. | Apr 10, 2000 |
| CVE-2000-0172 | Not scored | The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges. | Apr 10, 2000 |
| CVE-2000-0170 | Not scored | Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable. | Apr 10, 2000 |
| CVE-2000-0220 | Not scored | ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event. | Mar 22, 2000 |
| CVE-2000-0219 | Not scored | Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt. | Mar 22, 2000 |
| CVE-2000-0216 | Not scored | Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that… | Mar 22, 2000 |
| CVE-2000-0214 | Not scored | FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites. | Mar 22, 2000 |
| CVE-2000-0213 | Not scored | The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters. | Mar 22, 2000 |
| CVE-2000-0205 | Not scored | Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients. | Mar 22, 2000 |
| CVE-2000-0204 | Not scored | The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%. | Mar 22, 2000 |
| CVE-2000-0203 | Not scored | The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345. | Mar 22, 2000 |
| CVE-2000-0199 | Not scored | When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and… | Mar 22, 2000 |
| CVE-2000-0198 | Not scored | Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service. | Mar 22, 2000 |
| CVE-2000-0197 | Not scored | The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file. | Mar 22, 2000 |
| CVE-2000-0190 | Not scored | AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value. | Mar 22, 2000 |
| CVE-2000-0188 | Not scored | EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters. | Mar 22, 2000 |
| CVE-2000-0187 | Not scored | EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters. | Mar 22, 2000 |
| CVE-2000-0177 | Not scored | DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters. | Mar 22, 2000 |
| CVE-2000-0176 | Not scored | The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist. | Mar 22, 2000 |
| CVE-2000-0173 | Not scored | Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service. | Mar 22, 2000 |
| CVE-2000-0162 | Not scored | The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability. | Mar 22, 2000 |
| CVE-2000-0161 | Not scored | Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands. | Mar 22, 2000 |
| CVE-2000-0156 | Not scored | Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability. | Mar 22, 2000 |
| CVE-2000-0152 | Not scored | Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000. | Mar 22, 2000 |
| CVE-2000-0150 | Not scored | Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt. | Mar 22, 2000 |
| CVE-2000-0149 | Not scored | Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL. | Mar 22, 2000 |
| CVE-2000-0148 | Not scored | MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string. | Mar 22, 2000 |
| CVE-2000-0145 | Not scored | The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions. | Mar 22, 2000 |
| CVE-2000-0139 | Not scored | Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command. | Mar 22, 2000 |
| CVE-2000-0121 | Not scored | The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability. | Mar 22, 2000 |
| CVE-2000-0098 | Not scored | Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist. | Mar 22, 2000 |
| CVE-2000-0097 | Not scored | The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability. | Mar 22, 2000 |
| CVE-2000-0089 | Not scored | The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability. | Mar 22, 2000 |
| CVE-2000-0088 | Not scored | Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability. | Mar 22, 2000 |
| CVE-2000-0041 | Not scored | Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack. | Mar 22, 2000 |
| CVE-2000-0040 | Not scored | glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command. | Mar 22, 2000 |
| CVE-2000-0039 | Not scored | AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program. | Mar 22, 2000 |
| CVE-2000-0037 | Not scored | Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file. | Mar 22, 2000 |
| CVE-2000-0036 | Not scored | Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability. | Mar 22, 2000 |
| CVE-2000-0031 | Not scored | The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack. | Mar 22, 2000 |
| CVE-2000-0029 | Not scored | UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack. | Mar 22, 2000 |
| CVE-2000-0026 | Not scored | Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string. | Mar 22, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.