Tue, Dec 19 · 05:00 AM CSTCVE-2000-0944
9.8/10 · Must read/watchNVDvuln
Summary
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.
CVECVE-2000-0944
SeverityCRITICAL
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 10:10 AM CDT
CVE-2024-26305
9.8/10 · Must read/watchNVDvuln
Summary
There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to
CVECVE-2024-26305
SeverityCRITICAL
TypeUPDATED
PublishedWed, May 01 · 03:15 PM CDT
ModifiedTue, Sep 22 · 07:52 PM CDT
CVE-2000-0803
10.0/10 · Must read/watchNVDvuln
Summary
GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff.
CVECVE-2000-0803
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 10:10 AM CDT
CVE-2000-0818
10.0/10 · Must read/watchNVDvuln
Summary
The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and execute commands via the SET TRC_FILE or SET LOG_FILE commands.
CVECVE-2000-0818
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 10:10 AM CDT
CVE-2000-0917
10.0/10 · Must read/watchNVDvuln
Summary
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
CVECVE-2000-0917
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 10:10 AM CDT
CVE-2000-0941
10.0/10 · Must read/watchNVDvuln
Summary
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.
CVECVE-2000-0941
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 09:10 AM CDT
CVE-2000-0945
10.0/10 · Must read/watchNVDvuln
Summary
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.
CVECVE-2000-0945
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 10:10 AM CDT
CVE-2000-0947
10.0/10 · Must read/watchNVDvuln
Summary
Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.
CVECVE-2000-0947
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 10:10 AM CDT
CVE-2000-0967
10.0/10 · Must read/watchNVDvuln
Summary
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
CVECVE-2000-0967
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 09:10 AM CDT
CVE-2000-0969
10.0/10 · Must read/watchNVDvuln
Summary
Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon.
CVECVE-2000-0969
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 09:10 AM CDT
CVE-2000-0971
10.0/10 · Must read/watchNVDvuln
Summary
Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command.
CVECVE-2000-0971
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 10:10 AM CDT
CVE-2000-0973
10.0/10 · Must read/watchNVDvuln
Summary
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.
CVECVE-2000-0973
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 10:10 AM CDT
CVE-2000-0985
10.0/10 · Must read/watchNVDvuln
Summary
Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.
CVECVE-2000-0985
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 10:10 AM CDT
CVE-2000-1241
10.0/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a "grave security fault."
CVECVE-2000-1241
SeverityHIGH
TypeUPDATED
PublishedSun, Dec 31 · 05:00 AM CST
ModifiedWed, Sep 23 · 09:10 AM CDT
CVE-2000-1239
9.0/10 · Must read/watchNVDvuln
Summary
The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.
CVECVE-2000-1239
SeverityHIGH
TypeUPDATED
PublishedSun, Dec 31 · 05:00 AM CST
ModifiedWed, Sep 23 · 09:10 AM CDT
CVE-2000-1242
9.0/10 · Must read/watchNVDvuln
Summary
The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access.
CVECVE-2000-1242
SeverityHIGH
TypeUPDATED
PublishedSun, Dec 31 · 05:00 AM CST
ModifiedWed, Sep 23 · 09:10 AM CDT
CVE-2020-11753
8.8/10 · Worth your timeNVDvuln
Summary
An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, modify, and execute scripting tasks without use of the UI or API. NOTE: in 3.22.0, scripting is disabled by default (making this not exploitable).
CVECVE-2020-11753
SeverityHIGH
TypeUPDATED
PublishedMon, Apr 20 · 07:15 PM CDT
ModifiedTue, Sep 22 · 06:13 PM CDT
CVE-2020-15871
8.8/10 · Worth your timeNVDvuln
Summary
Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.
CVECVE-2020-15871
SeverityHIGH
TypeUPDATED
PublishedFri, Jul 31 · 08:15 PM CDT
ModifiedTue, Sep 22 · 06:11 PM CDT
CVE-2021-40143
8.2/10 · Worth your timeNVDvuln
Summary
Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP request, a remote attacker may disclose sensitive information or request external resources from a vulnerable instance.
CVECVE-2021-40143
SeverityHIGH
TypeUPDATED
PublishedTue, Sep 07 · 08:15 PM CDT
ModifiedTue, Sep 22 · 06:12 PM CDT
CVE-2024-52059
7.8/10 · Worth your timeNVDvuln
Summary
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.
CVECVE-2024-52059
SeverityHIGH
TypeUPDATED
PublishedFri, Dec 13 · 11:15 AM CST
ModifiedTue, Sep 22 · 06:17 PM CDT
CVE-2025-1253
7.8/10 · Worth your timeNVDvuln
Summary
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from
CVECVE-2025-1253
SeverityHIGH
TypeUPDATED
PublishedThu, May 08 · 09:15 AM CDT
ModifiedTue, Sep 22 · 06:17 PM CDT
CVE-2000-0810
7.5/10 · Worth your timeNVDvuln
Summary
Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.
CVECVE-2000-0810
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 10:10 AM CDT
CVE-2000-0817
7.5/10 · Worth your timeNVDvuln
Summary
Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability.
CVECVE-2000-0817
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 10:10 AM CDT
CVE-2000-0884
7.5/10 · Worth your timeNVDvuln
Summary
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
CVECVE-2000-0884
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 10:10 AM CDT
CVE-2000-0885
7.5/10 · Worth your timeNVDvuln
Summary
Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is highly likely that this c
CVECVE-2000-0885
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 09:10 AM CDT
