CVE-2002-1580

CVE-2002-1580 affects Cyrus IMAP server (versions 1.4 and 2.1.10) due to an integer/buffer overflow in imapparse.c. A large length value can trigger a pre-authentication buffer overflow, potentially allowing remote code execution. Related OpenVAS/Nessus entries describe pre-login heap/buffer over...

CVE-2003-0352

CVE-2003-0352 describes a buffer overflow vulnerability in the DCOM RPC interface (RPCSS) of Windows NT 4.0 SP3-6a, Windows 2000, XP, and Server 2003. The issue is a stack/heap buffer overflow triggered by a malformed DCERPC DCOM object activation request with modified length fields, allowing rem...

CVE-2002-0367

CVE-2002-0367 affects Windows NT/2000 and involves the smss.exe debugging subsystem not properly authenticating connections to privileged processes. This allows a local attacker to gain Administrator or SYSTEM privileges by duplicating a handle to a privileged process. The vulnerability is charac...

CVE-2003-0127

CVE-2003-0127 affects the Linux kernel 2.2.x before 2.2.25 and 2.4.x before 2.4.21. A local attacker can gain root privileges by using ptrace to attach to a child process spawned by the kernel. The description explicitly states the root cause is the kernel module loader’s handling of ptrace with ...

CVE-2002-0649

CVE-2002-0649 describes a remote buffer-overflow in the SQL Server Resolution Service of Microsoft SQL Server 2000 and MSDE (port 1434/UDP). The vulnerability is triggered by UDP packets beginning with 0x04 (long registry key name) or 0x08 (long string), which can cause a denial of service or arb...

CVE-2001-0537

CVE-2001-0537 affects Cisco IOS HTTP Server in Cisco IOS 11.3–12.2. The vulnerability allows bypassing local authentication and executing arbitrary commands by specifying a high access level in the URL. Impact is authenticated command execution with full privileges on affected devices. Public det...

CVE-2022-28958

CVE-2022-28958 maps to a D-Link DIR816L remote code execution vulnerability. CNVD/CNNVD describe an RCE in DIR816L_FW206b01 due to improper filtering of the value parameter in shareport.php, allowing arbitrary code execution on affected devices. No specific affected versions or patch details are ...

CVE-2025-66478

CVE-2025-66478 describes an unauthenticated remote code execution vulnerability in React Server Components, affecting Next.js apps that use the App Router with React Server Components (including packages like react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack). The ...