Vulnerabilities (CVE)

Total 420880 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-1056 1 Cisco 1 Secure Access Control Server 2026-09-23 7.5 HIGH N/A
CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.
CVE-2000-0934 1 Redhat 1 Linux 2026-09-23 7.2 HIGH N/A
Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack.
CVE-2000-0966 1 Hp 1 Hp-ux 2026-09-23 4.6 MEDIUM N/A
Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges.
CVE-2006-1469 1 Apple 2 Mac Os X, Mac Os X Server 2026-09-23 7.5 HIGH N/A
Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image.
CVE-2000-0948 1 Gnome 1 Gnorpm 2026-09-23 7.2 HIGH N/A
GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.
CVE-2000-1046 1 Lotus 1 Domino 2026-09-23 10.0 HIGH N/A
Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) "RCPT TO," (2) "SAML FROM," or (3) "SOML FROM" commands.
CVE-2000-0968 1 Valve Software 1 Half-life Dedicated Server 2026-09-23 10.0 HIGH N/A
Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command.
CVE-2000-0955 1 Cisco 1 Virtual Central Office 4000 2026-09-23 7.5 HIGH N/A
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges.
CVE-2000-0960 1 Netscape 1 Messaging Server 2026-09-23 5.0 MEDIUM N/A
The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.
CVE-2026-77997 2026-09-23 N/A N/A
Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with com_template editing permissions to access information about arbitrary modules without the respective com_modules permissions.
CVE-2000-0918 1 Kde 1 Kvt 2026-09-23 7.2 HIGH N/A
Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters.
CVE-2000-0924 1 Armada Design 1 Master Index 2026-09-23 5.0 MEDIUM N/A
Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter.
CVE-2000-0946 1 Compaq 1 Easy Access Keyboard Software 2026-09-23 4.6 MEDIUM N/A
Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization.
CVE-2004-2771 4 Bsd Mailx Project, Heirloom, Oracle and 1 more 4 Bsd Mailx, Mailx, Linux and 1 more 2026-09-23 7.5 HIGH N/A
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
CVE-2000-0925 1 Smartwin Technology 1 Cyberoffice Shopping Cart 2026-09-23 5.0 MEDIUM N/A
The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.
CVE-2000-1042 1 Mandrakesoft 1 Mandrake Linux 2026-09-23 10.0 HIGH N/A
Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
CVE-2006-1470 1 Apple 2 Mac Os X, Mac Os X Server 2026-09-23 5.0 MEDIUM N/A
OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request that triggers an assert error.
CVE-2006-2200 2 Mimms, Xine 2 Mimms, Xine-lib 2026-09-23 5.1 MEDIUM N/A
Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions.
CVE-2006-2936 1 Linux 1 Linux Kernel 2026-09-23 7.8 HIGH N/A
The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be queued.
CVE-2024-27253 2026-09-23 N/A 10.0 CRITICAL
IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.