Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29815 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2004-2024 1 Zen Cart 1 Zen Cart 2025-04-03 N/A
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via password_forgotten.php.
CVE-2005-1722 1 Apple 2 Mac Os X, Mac Os X Server 2025-04-03 N/A
Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions.
CVE-2005-2237 1 Ibm 1 Aix 2025-04-03 N/A
Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via long command line arguments.
CVE-2005-3003 1 Noosoftware 1 Nootoplist 2025-04-03 N/A
SQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers to execute arbitrary SQL commands via the (1) o or (2) sort parameters.
CVE-2005-3753 1 Linux 1 Linux Kernel 2025-04-03 N/A
Linux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of service (Oops) via certain IPSec packets that cause alignment problems in standard multi-block cipher processors. NOTE: it is not clear whether this issue can be triggered by an attacker.
CVE-1999-0697 1 Sco 1 Openserver 2025-04-03 N/A
SCO Doctor allows local users to gain root privileges through a Tools option.
CVE-2000-1243 1 Dansie 1 Shopping Cart 2025-04-03 N/A
Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the product developers.
CVE-1999-0105 2025-04-03 N/A
finger allows recursive searches by using a long string of @ symbols.
CVE-2004-1192 1 Citadel 1 Ux 2025-04-03 N/A
Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.
CVE-2000-0422 1 Netwin 1 Dmail 2025-04-03 N/A
Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter.
CVE-2000-0423 1 Netwin 1 Dnews 2025-04-03 N/A
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.
CVE-1999-0153 2 Microsoft, Sco 4 Windows 2000, Windows 95, Windows Nt and 1 more 2025-04-03 N/A
Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
CVE-2000-0425 1 Lsoft 1 Listserv 2025-04-03 N/A
Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands.
CVE-2002-0834 2 Ethereal Group, Redhat 4 Ethereal, Enterprise Linux, Linux and 1 more 2025-04-03 N/A
Buffer overflow in the ISIS dissector for Ethereal 0.9.5 and earlier allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets.
CVE-1999-0160 1 Cisco 1 Ios 2025-04-03 N/A
Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections.
CVE-2004-1212 1 Blog Torrent 1 Blog Torrent Preview 2025-04-03 N/A
Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. (dot dot) in the file argument.
CVE-1999-0706 2 Isc, Redhat 2 Inn, Linux 2025-04-03 N/A
Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
CVE-1999-0708 1 Infodrom 1 Cfingerd 2025-04-03 N/A
Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.
CVE-1999-0171 1 Linux 1 Linux Kernel 2025-04-03 N/A
Denial of service in syslog by sending it a large number of superfluous messages.
CVE-2000-0427 1 Aladdin Knowledge Systems 1 Etoken 2025-04-03 N/A
The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM.