Export limit exceeded: 29994 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (29994 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2006-4680 1 Canon 7 Imagerunner 2620, Imagerunner 5020, Imagerunner 6870 and 4 more 2026-04-16 N/A
The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers to obtain sensitive information.
CVE-1999-0109 1 Sun 2 Solaris, Sunos 2026-04-16 N/A
Buffer overflow in ffbconfig in Solaris 2.5.1.
CVE-1999-0115 1 Ibm 1 Aix 2026-04-16 N/A
AIX bugfiler program allows local users to gain root access.
CVE-2006-4681 1 Ibm 1 Director 2026-04-16 N/A
Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the file parameter.
CVE-1999-0136 1 Sun 1 Sunos 2026-04-16 N/A
Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access.
CVE-2006-4717 1 Drupal 1 Drupal Pubcookie Module 2026-04-16 N/A
The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module before 1.6.2.1 2006/09/07 allows remote attackers to bypass authentication requirements and spoof identities of arbitrary users via unspecified vectors.
CVE-2006-4722 1 Openbb 1 Openbb 2026-04-16 N/A
PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) index.php and possibly (2) collector.php.
CVE-2006-4740 1 Jetbox 1 Jetbox Cms 2026-04-16 N/A
Jetbox CMS allows remote attackers to obtain sensitive information via a direct request for certain files, which reveal the path in an error message.
CVE-1999-0155 1 Aladdin Enterprises 1 Ghostscript 2026-04-16 N/A
The ghostscript command with the -dSAFER option allows remote attackers to execute commands.
CVE-1999-0157 1 Cisco 2 Ios, Pix Firewall Software 2026-04-16 N/A
Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service.
CVE-2005-2450 1 Clam Anti-virus 1 Clamav 2026-04-16 N/A
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
CVE-1999-0168 1 Sun 1 Sunos 2026-04-16 N/A
The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place. For example, NFS file systems could be mounted through the portmapper despite export restrictions.
CVE-1999-0171 1 Linux 1 Linux Kernel 2026-04-16 N/A
Denial of service in syslog by sending it a large number of superfluous messages.
CVE-2006-0069 1 Chipmunk Scripts 1 Chipmunk Guestbook 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the homepage parameter.
CVE-1999-0437 1 Ramp Networks 1 Webramp 2026-04-16 N/A
Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
CVE-1999-0443 1 Bmc 1 Patrol Agent 2026-04-16 N/A
Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.
CVE-2004-1554 1 Alexphpteam 1 Alex Guestbook 2026-04-16 N/A
PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chem_absolu parameter to reference a URL on a remote web server that contains the code.
CVE-2004-1555 1 Broadboard Instant 1 Asp Message Board 2026-04-16 N/A
Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp.
CVE-2004-1556 1 Mywebserver 1 Mywebserver 2026-04-16 N/A
MyWebServer 1.0.3 allows remote attackers to cause a denial of service (application crash) via a large number of connections within a short time.
CVE-2004-1562 1 W-agora 1 W-agora 2026-04-16 N/A
SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands via the key parameter.