Export limit exceeded: 30000 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (30000 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2001-1119 | 1 Ti Kan | 1 Xmcd | 2026-04-16 | N/A |
| cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack. | ||||
| CVE-1999-0594 | 2026-04-16 | N/A | ||
| A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive. | ||||
| CVE-1999-0601 | 2026-04-16 | N/A | ||
| A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets. | ||||
| CVE-1999-0603 | 2026-04-16 | N/A | ||
| In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc. | ||||
| CVE-2001-1133 | 1 Bsdi | 1 Bsd Os | 2026-04-16 | N/A |
| Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions. | ||||
| CVE-1999-0611 | 2026-04-16 | N/A | ||
| A system-critical Windows NT registry key has an inappropriate value. | ||||
| CVE-2001-1136 | 1 Hp | 1 Hp-ux | 2026-04-16 | N/A |
| The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service. | ||||
| CVE-1999-0613 | 2026-04-16 | N/A | ||
| The rpc.sprayd service is running. | ||||
| CVE-2001-1139 | 1 Ascii Nt | 1 Winwrapper Professional | 2026-04-16 | N/A |
| Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request. | ||||
| CVE-1999-0627 | 1 Ibm | 1 Aix | 2026-04-16 | N/A |
| The rexd service is running, which uses weak authentication that can allow an attacker to execute commands. | ||||
| CVE-1999-0628 | 4 Freebsd, Ibm, Linux and 1 more | 4 Freebsd, Aix, Linux Kernel and 1 more | 2026-04-16 | N/A |
| The rwho/rwhod service is running, which exposes machine status and user information. | ||||
| CVE-2001-1497 | 1 Microsoft | 2 Ie, Internet Explorer | 2026-04-16 | N/A |
| Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password guessing attack. | ||||
| CVE-2001-1499 | 1 Checkpoint | 1 Vpn-1 | 2026-04-16 | N/A |
| Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks. | ||||
| CVE-2001-1514 | 1 Macromedia | 1 Coldfusion | 2026-04-16 | N/A |
| ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to (1) child processes created with <CFEXECUTE> and (2) child processes that call the CreateProcess function and are executed with <CFOBJECT> or end with the CFX extension, which allows attackers to execute programs with the permissions of the System account. | ||||
| CVE-2001-1524 | 1 Francisco Burzi | 1 Php-nuke | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) uname parameter in user.php, (2) ttitle, letter and file parameters in modules.php, (3) subject, story and storyext parameters in submit.php, (4) upload parameter in admin.php and (5) fname parameter in friend.php. | ||||
| CVE-2001-1149 | 1 Panda | 1 Panda Antivirus Platinum | 2026-04-16 | N/A |
| Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a malformed UPX packed executable file. | ||||
| CVE-2001-1502 | 1 Mountain Network Systems | 1 Webcart | 2026-04-16 | N/A |
| webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter. | ||||
| CVE-2001-1520 | 1 Intel | 1 Xircom Rex 6000 | 2026-04-16 | N/A |
| Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant (PDA) via Rextools, and capturing the cleartext PIN. | ||||
| CVE-2001-1526 | 1 Easyscripts | 1 Easynews | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the zeit parameter. | ||||
| CVE-2001-1151 | 1 Trend Micro | 2 Officescan, Virus Buster | 2026-04-16 | N/A |
| Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password. | ||||