Vulnerabilities (CVE)

Filtered by CWE-346
Total 864 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-0174 1 Sgi 1 Irix 2026-06-16 7.5 HIGH 9.8 CRITICAL
The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.
CVE-2001-1452 1 Microsoft 2 Windows 2000, Windows Nt 2026-06-16 5.0 MEDIUM 7.5 HIGH
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses.
CVE-2000-1218 1 Microsoft 5 Windows 2000, Windows 98, Windows 98se and 2 more 2026-06-16 7.5 HIGH 9.8 CRITICAL
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.
CVE-1999-1549 1 Lynx Project 1 Lynx 2026-06-16 5.0 MEDIUM 7.8 HIGH
Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.