9439 matches found
CVE-2002-2100
Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content...
CVE-2002-2058
TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...
CVE-2002-1974
The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root...
CVE-2002-1935
Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable 1 Call-ID, 2 CSeq, and 3 "To" and "From" SIP URL values in a Session Identification Protocol SIP request, which allows remote attackers to avoid registering with the SIP registrar...
CVE-2025-32926
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Path Traversal.This issue affects Grand Restaurant: from n/a through = 7.0...
CVE-2008-7289
IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0007 does not properly handle the simultaneous changing of multiple passwords, which makes it easier for remote authenticated users to cause a denial of service DB2 daemon deadlock by making password changes that trigger updates to a D...
CVE-2009-2423
SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL commands via the cateid parameter in a list action...
CVE-1999-0236
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs...
CVE-1999-0690
HP CDE program includes the current directory in root's PATH variable...
CVE-1999-0220
Attackers can do a denial of service of IRC by crashing the server...
CVE-1999-0714
Vulnerability in Compaq Tru64 UNIX edauth command...
CVE-1999-0780
KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file...
CVE-1999-0636
The discard service is running...
CVE-1999-0492
The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses...
CVE-1999-0497
Anonymous FTP is enabled...
CVE-1999-0453
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol CDP...
CVE-1999-0407
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system...
CVE-1999-0087
Denial of service in AIX telnet can freeze a system and prevent users from accessing the server...
CVE-1999-0084
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0...
CVE-2025-5020
creationtimestamp| type| source ---|---|--- 2025-05-21 17:43:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17161 2025-05-21 21:22:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppjvvscq424...