Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29815 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2002-0494 1 Websight Directory System 1 Websight Directory System 2025-04-03 N/A
Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access to the WebSight administrator via a new link submission containing the script in a website name.
CVE-2005-4645 1 3cfr 1 3cfr 2025-04-03 N/A
SQL injection vulnerability in index.php in 3CFR allows remote attackers to execute arbitrary SQL commands via the LangueID parameter.
CVE-2000-1125 1 Redhat 1 Linux 2025-04-03 N/A
restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
CVE-1999-0907 1 Steven J. Merrifield 1 Soundcard Cw 2025-04-03 N/A
sccw allows local users to read arbitrary files.
CVE-2002-0496 1 Southwest 1 Southwest 2025-04-03 N/A
The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) via a malformed URL to port 5002.
CVE-1999-0908 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.
CVE-1999-0912 1 Freebsd 1 Freebsd 2025-04-03 N/A
FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.
CVE-2002-0497 1 Mtr 1 Mtr 2025-04-03 N/A
Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS environment variable.
CVE-1999-0915 1 Pacific Software 1 Url Live 2025-04-03 N/A
URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-1128 1 Mcafee 1 Virusscan 2025-04-03 N/A
The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows local users to place a Trojan horse "common.exe" program in the C:\Program Files directory.
CVE-1999-0916 1 Webtrends 5 Webtrends Enterprise Suite, Webtrends For Firewalls, Webtrends Log Analyzer and 2 more 2025-04-03 N/A
WebTrends software stores account names and passwords in a file which does not have restricted access permissions.
CVE-2002-0498 1 Etnus 1 Totalview 2025-04-03 N/A
Etnus TotalView 5.0.0-4 installs certain files with UID 5039 and GID 59, which could allow local users with that UID or GID to modify the files and gain privileges as other TotalView users.
CVE-1999-0919 1 Motorola 1 Motorola Cablerouter 2025-04-03 N/A
A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections.
CVE-2000-1129 1 Network Associates 1 Webshield Smtp 2025-04-03 N/A
McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.
CVE-1999-0920 1 University Of Washington 2 Imap, Pop2d 2025-04-03 N/A
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.
CVE-2005-4323 1 Hitachi 3 Cosminexus Collaboration Portal, Groupmax Collaboration Portal, Groupmax Collaboration Web Client 2025-04-03 N/A
Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to cause a denial of service of unspecified impact via repeated invalid requests to the Schedule component.
CVE-1999-0921 1 Bmc 1 Patrol Agent 2025-04-03 N/A
BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.
CVE-1999-0926 1 Apache 1 Http Server 2025-04-03 N/A
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
CVE-1999-0927 1 Gordano 1 Ntmail 2025-04-03 N/A
NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2001-0268 2 Netbsd, Openbsd 2 Netbsd, Openbsd 2025-04-03 N/A
The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table (LDT) with a target that specifies an arbitrary kernel address.