Export limit exceeded: 29909 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (29909 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2000-0022 1 Lotus 1 Domino Server 2025-04-03 N/A
Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.
CVE-2000-0023 1 Lotus 1 Domino Server 2025-04-03 N/A
Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.
CVE-2000-0024 1 Microsoft 3 Internet Information Server, Site Server, Site Server Commerce 2025-04-03 N/A
IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.
CVE-2000-0025 1 Microsoft 3 Internet Information Server, Site Server, Site Server Commerce 2025-04-03 N/A
IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.
CVE-2000-0026 2 Sco, Windowmaker 2 Unixware, Wmmon 2025-04-03 N/A
Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.
CVE-2000-0027 1 Ibm 1 Network Station Manager 2025-04-03 N/A
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.
CVE-2000-0028 1 Microsoft 2 Ie, Internet Explorer 2025-04-03 N/A
Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.
CVE-2000-0029 1 Sco 1 Unixware 2025-04-03 N/A
UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
CVE-2000-0030 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
CVE-2000-0031 1 Redhat 1 Linux 2025-04-03 N/A
The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.
CVE-2000-0032 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
CVE-2000-0033 1 Trend Micro 1 Interscan Viruswall 2025-04-03 N/A
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.
CVE-2000-0034 1 Netscape 1 Communicator 2025-04-03 N/A
Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."
CVE-2000-0035 1 Great Circle Associates 1 Majordomo 2025-04-03 N/A
resend command in Majordomo allows local users to gain privileges via shell metacharacters.
CVE-2000-0036 1 Microsoft 2 Ie, Outlook Express 2025-04-03 N/A
Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.
CVE-2000-0037 1 Great Circle Associates 1 Majordomo 2025-04-03 N/A
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
CVE-2000-0038 1 Glftpd 1 Glftpd 2025-04-03 N/A
glFtpD includes a default glftpd user account with a default password and a UID of 0.
CVE-2000-0039 1 Altavista 1 Search Intranet 2025-04-03 N/A
AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.
CVE-2000-0040 1 Glftpd 1 Glftpd 2025-04-03 N/A
glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.
CVE-2000-0041 1 Apple 1 Macos 2025-04-03 N/A
Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack.