3620 matches found
CVE-2000-0424
The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-1999-0863
Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI...
CVE-1999-1005
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. dot dot attack using the HELP parameter...
CVE-1999-1547
Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded hex equivalent...
CVE-1999-0191
IIS newdsn.exe CGI script allows remote users to overwrite files...
CVE-2000-0005
HP-UX aserver program allows local users to gain privileges via a symlink attack...
CVE-1999-0958
sudo 1.5.x allows local users to execute arbitrary commands via a .. dot dot attack...
CVE-2025-52979
CVE-2025-52979 entry is rejected/not used and does not represent an active vulnerability.
CVE-2024-36604
Tenda O3V2 v1.0.0.123880 was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows attackers to execute arbitrary commands with root privileges...
PHP Code Injection
phpWhois PHP Code Injection\nVulnerability Overview\nphpWhois and some of its forks in versions before 5.1.0 are prone to a\ncode injection vulnerability due to insufficient sanitization of returned\nWHOIS data. This allows attackers controlling the WHOIS information of a\nrequested domain to...