Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29815 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2000-0982 1 Microsoft 1 Internet Explorer 2025-04-03 N/A
Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.
CVE-2000-0984 1 Cisco 1 Ios 2025-04-03 N/A
The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string.
CVE-2000-1135 1 Debian 1 Debian Linux 2025-04-03 N/A
fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.
CVE-1999-0088 1 Ibm 1 Aix 2025-04-03 N/A
IRIX and AIX automountd services (autofsd) allow remote users to execute root commands.
CVE-2006-2202 1 Invision Power Services 1 Invision Gallery 2025-04-03 N/A
SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter.
CVE-2006-1323 1 Webtoolmaster Software 1 Winhki 2025-04-03 N/A
Directory traversal vulnerability in WinHKI 1.6 and earlier allows user-assisted attackers to overwrite arbitrary files via a (1) RAR, (2) TAR, (3) ZIP, or (4) TAR.GZ archive with a file whose file name contains ".." sequences.
CVE-2000-0996 1 Openbsd 1 Openbsd 2025-04-03 N/A
Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell.
CVE-1999-0077 1 Microsoft 1 Windows Nt 2025-04-03 N/A
Predictable TCP sequence numbers allow spoofing.
CVE-1999-0091 1 Ibm 1 Aix 2025-04-03 N/A
Buffer overflow in AIX writesrv command allows local users to obtain root access.
CVE-1999-0066 1 John S. Roberts 1 Anyform 2025-04-03 9.8 Critical
AnyForm CGI remote execution.
CVE-2000-0974 1 Gnu 1 Privacy Guard 2025-04-03 N/A
GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection.
CVE-2006-2209 1 Php Arena 1 Pacheckbook 2025-04-03 N/A
Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via (1) the transtype parameter in an add action or (2) entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVE-2000-0961 1 Netscape 2 Messaging Server, Netscape Messaging Server Multiplexor 2025-04-03 N/A
Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.
CVE-2000-0967 1 Php 1 Php 2025-04-03 N/A
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
CVE-2006-1340 1 Cutephp 1 Cutenews 2025-04-03 N/A
CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path.
CVE-1999-0069 1 Sun 1 Sunos 2025-04-03 8.4 High
Solaris ufsrestore buffer overflow.
CVE-1999-0517 2 Hp, Sun 2 Hp-ux, Sunos 2025-04-03 N/A
An SNMP community name is the default (e.g. public), null, or missing.
CVE-2006-1349 1 Musicbox 1 Musicbox 2025-04-03 N/A
Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) type and (3) show parameters in a top action in (a) index.php; and the (4) message1 parameter in (b) cart.php.
CVE-2000-0530 2 Caldera, Kde 2 Openlinux, Kde 2025-04-03 N/A
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files.
CVE-2001-0818 1 Marty Bochane 1 Mdbms 2025-04-03 N/A
A buffer overflow the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending the command a large amount of data.