Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29815 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-1999-0019 7 Data General, Ibm, Ncr and 4 more 10 Dg Ux, Aix, Mp-ras and 7 more 2025-04-03 N/A
Delete or create a file via rpc.statd, due to invalid information.
CVE-2006-2527 1 Smartisoft 1 Phpbazar 2025-04-03 N/A
Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain unauthorized access to the administrative section by setting the action parameter to edit_member and the value parameter to 1.
CVE-1999-0021 1 Muhammad A. Muquit 1 Wwwcount 2025-04-03 N/A
Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.
CVE-2002-0236 1 Lucent 5 Vitalanalysis, Vitalevent, Vitalhelp and 2 more 2025-04-03 N/A
Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.
CVE-1999-0024 6 Bsdi, Ibm, Isc and 3 more 12 Bsd Os, Aix, Bind and 9 more 2025-04-03 N/A
DNS cache poisoning via BIND, by predictable query IDs.
CVE-1999-0026 1 Sgi 1 Irix 2025-04-03 N/A
root privileges via buffer overflow in pset command on SGI IRIX systems.
CVE-2002-0239 1 Hanterm 1 Hanterm 2025-04-03 N/A
Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -fn, (2) -hfb, or (3) -hfn argument.
CVE-2002-0290 1 Netwin 1 Webnews 2025-04-03 N/A
Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers to execute arbitrary code via a long group argument.
CVE-2002-0291 1 Funsoft 1 Dinos Webserver 2025-04-03 N/A
Dino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via several large HTTP requests within a short time.
CVE-2002-1763 1 Sun 1 Sunos 2025-04-03 N/A
The dtscreen Sun Solaris 8 CDE screensaver crashes when the "Shift" and "Return" keys are pressed repeatedly and quickly, which allows local users to access the current session.
CVE-2000-0714 1 University Of Massachusetts 1 Scheme 2025-04-03 N/A
umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.
CVE-2000-0175 1 Sun 1 Staroffice 2025-04-03 N/A
Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.
CVE-1999-0028 1 Sgi 1 Irix 2025-04-03 N/A
root privileges via buffer overflow in login/scheme command on SGI IRIX systems.
CVE-1999-0029 1 Sgi 1 Irix 2025-04-03 8.4 High
root privileges via buffer overflow in ordist command on SGI IRIX systems.
CVE-2002-1765 1 Ximian 1 Evolution 2025-04-03 N/A
Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory consumption and crash) via an email with a malformed MIME header.
CVE-2000-0185 1 Realnetworks 2 Realserver, Realserver G2 2025-04-03 N/A
RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
CVE-2000-0717 1 Goodtech 2 Ftp Server 95 98, Ftp Server Nt 2000 2025-04-03 N/A
GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.
CVE-2000-0719 1 Varicad 1 Varicad 2025-04-03 N/A
VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program.
CVE-1999-0030 1 Sgi 1 Irix 2025-04-03 N/A
root privileges via buffer overflow in xlock command on SGI IRIX systems.
CVE-2002-0240 1 Apache 1 Http Server 2025-04-03 N/A
PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message.