Vulnerabilities (CVE)

Filter

118910 total CVE
CVE Vendors Products Updated CVSS
CVE-2000-0713 1 Adobe 3 Acrobat Reader, Acrobat, Acrobat Business Tools 2008-09-05 7.6
Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier.
CVE-2000-0712 1 Lids 1 Lids 2008-09-05 7.2
Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option.
CVE-2000-0711 2 Netscape, Microsoft 2 Virtual Machine, Communicator 2008-09-05 7.5
Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.
CVE-2000-0709 1 Microsoft 1 Frontpage 2008-09-05 5.0
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.
CVE-2000-0708 1 Pragma Systems 1 Telnetserver 2008-09-05 5.0
Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to the rexec port.
CVE-2000-0707 1 Pccs-linux 1 Mysqldatabase Admin Tool 2008-09-05 7.5
PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password.
CVE-2000-0700 1 Cisco 4 Ios, Gigabit Switch Router 12008, Gigabit Switch Router 12016 and 1 more 2008-09-05 5.0
Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs...
CVE-2000-0699 1 Hp 1 Hp-ux 2008-09-05 10.0
Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.
CVE-2000-0695 1 Tech-source 1 Raptor Gfx Pgx32 2008-09-05 7.2
Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options.
CVE-2000-0694 1 Tech-source 1 Raptor Gfx Pgx32 2008-09-05 7.2
pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.
CVE-2000-0693 1 Tech-source 1 Raptor Gfx Pgx32 2008-09-05 7.2
pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary commands by modifying their path to point to an alternate "cp" program.
CVE-2000-0692 1 Iss 1 Realsecure 2008-09-05 5.0
ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set.
CVE-2000-0691 1 Gert Doering 1 Mgetty 2008-09-05 2.1
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file.
CVE-2000-0687 1 Cgi Script Center 1 Auction Weaver 2008-09-05 10.0
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
CVE-2000-0686 1 Cgi Script Center 1 Auction Weaver 2008-09-05 5.0
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.
CVE-2000-0683 1 Bea 1 Weblogic Server 2008-09-05 5.0
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet.
CVE-2000-0682 1 Bea 1 Weblogic Server 2008-09-05 5.0
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet.
CVE-2000-0681 1 Bea 1 Weblogic Server 2008-09-05 10.0
Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.
CVE-2000-0680 1 Cvs 1 Cvs 2008-09-05 7.2
The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then...
CVE-2000-0679 1 Cvs 1 Cvs 2008-09-05 2.1
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.