Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29815 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-1999-0268 1 Metainfo 1 Metaweb 2025-04-03 N/A
MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
CVE-2006-0358 1 Powerportal 1 Powerportal 2025-04-03 N/A
Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute arbitrary SQL commands via the search parameter in (1) index.php and (2) search.php. NOTE: This issue might overlap CVE-2004-0663.2.
CVE-1999-0275 1 Microsoft 1 Windows Nt 2025-04-03 N/A
Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.
CVE-1999-0277 1 Sun 1 Sunos 2025-04-03 N/A
The WorkMan program can be used to overwrite any file to get root access.
CVE-2002-0310 1 Netwin 1 Webnews 2025-04-03 N/A
Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.
CVE-1999-0286 2025-04-03 N/A
In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
CVE-2001-0180 1 Lars Ellingsen 1 Guestserver 2025-04-03 N/A
Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter.
CVE-1999-0287 1 Webcom 1 Cgi Guestbook 2025-04-03 N/A
Vulnerability in the Wguest CGI program.
CVE-1999-0290 1 Qbik 1 Wingate 2025-04-03 N/A
The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost.
CVE-2001-0187 1 Washington University 1 Wu-ftpd 2025-04-03 N/A
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.
CVE-1999-0291 1 Qbik 1 Wingate 2025-04-03 N/A
The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication.
CVE-2005-3690 1 Mailenable 2 Mailenable Enterprise, Mailenable Professional 2025-04-03 N/A
Stack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the (1) select, (2) create, (3) delete, (4) rename, (5) subscribe, or (6) unsubscribe commands.
CVE-1999-0292 1 Microsoft 1 Windows Nt 2025-04-03 N/A
Denial of service through Winpopup using large user names.
CVE-2001-0190 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0).
CVE-1999-0296 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
Solaris volrmmount program allows attackers to read any file.
CVE-2002-1801 1 Bizdesign 1 Imagefolio 2025-04-03 N/A
ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a nonexistent image category, which leaks the web root in the resulting error message.
CVE-1999-0297 5 Bsdi, Freebsd, Netbsd and 2 more 5 Bsd Os, Freebsd, Netbsd and 2 more 2025-04-03 N/A
Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
CVE-1999-0298 2 Slackware, Sun 2 Slackware Linux, Sunos 2025-04-03 N/A
ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.
CVE-1999-0299 1 Freebsd 1 Freebsd 2025-04-03 N/A
Buffer overflow in FreeBSD lpd through long DNS hostnames.
CVE-2002-0311 1 Caldera 2 Openunix, Unixware 2025-04-03 N/A
Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for (1) in scoadminreg.cgi or (2) service_action.cgi.