Tue, Dec 19 · 05:00 AM CSTCVE-2000-0952
10.0/10 · Must read/watchNVDvuln
Summary
global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters.
CVECVE-2000-0952
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2000-0954
10.0/10 · Must read/watchNVDvuln
Summary
Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.
CVECVE-2000-0954
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2000-0961
10.0/10 · Must read/watchNVDvuln
Summary
Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.
CVECVE-2000-0961
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2000-0964
10.0/10 · Must read/watchNVDvuln
Summary
Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
CVECVE-2000-0964
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2000-0968
10.0/10 · Must read/watchNVDvuln
Summary
Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command.
CVECVE-2000-0968
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2000-1024
10.0/10 · Must read/watchNVDvuln
Summary
eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.
CVECVE-2000-1024
SeverityHIGH
TypeUPDATED
PublishedMon, Dec 11 · 05:00 AM CST
ModifiedWed, Sep 23 · 02:10 PM CDT
CVE-2000-1026
10.0/10 · Must read/watchNVDvuln
Summary
Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.
CVECVE-2000-1026
SeverityHIGH
TypeUPDATED
PublishedMon, Dec 11 · 05:00 AM CST
ModifiedWed, Sep 23 · 02:10 PM CDT
CVE-2000-1029
10.0/10 · Must read/watchNVDvuln
Summary
Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.
CVECVE-2000-1029
SeverityHIGH
TypeUPDATED
PublishedMon, Dec 11 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2000-1034
10.0/10 · Must read/watchNVDvuln
Summary
Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability.
CVECVE-2000-1034
SeverityHIGH
TypeUPDATED
PublishedMon, Dec 11 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2000-1035
10.0/10 · Must read/watchNVDvuln
Summary
Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command.
CVECVE-2000-1035
SeverityHIGH
TypeUPDATED
PublishedMon, Dec 11 · 05:00 AM CST
ModifiedWed, Sep 23 · 02:10 PM CDT
CVE-2000-1042
10.0/10 · Must read/watchNVDvuln
Summary
Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
CVECVE-2000-1042
SeverityHIGH
TypeUPDATED
PublishedMon, Dec 11 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2000-1046
10.0/10 · Must read/watchNVDvuln
Summary
Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) "RCPT TO," (2) "SAML FROM," or (3) "SOML FROM" commands.
CVECVE-2000-1046
SeverityHIGH
TypeUPDATED
PublishedMon, Dec 11 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2000-1074
10.0/10 · Must read/watchNVDvuln
Summary
csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory.
CVECVE-2000-1074
SeverityHIGH
TypeUPDATED
PublishedMon, Dec 11 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2000-1077
10.0/10 · Must read/watchNVDvuln
Summary
Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.
CVECVE-2000-1077
SeverityHIGH
TypeUPDATED
PublishedMon, Dec 11 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2006-0033
9.3/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed.
CVECVE-2006-0033
SeverityHIGH
TypeUPDATED
PublishedTue, Jul 11 · 09:05 PM CDT
ModifiedWed, Sep 23 · 11:10 AM CDT
CVE-2006-1316
9.3/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with malformed string that triggers memory corruption related to record lengths, aka "Microsoft Office Parsing Vulnerability," a
CVECVE-2006-1316
SeverityHIGH
TypeUPDATED
PublishedTue, Jul 11 · 09:05 PM CDT
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2006-2389
9.3/10 · Must read/watchNVDvuln
Summary
Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Office Property Vulnerabilit
CVECVE-2006-2389
SeverityHIGH
TypeUPDATED
PublishedTue, Jul 11 · 09:05 PM CDT
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2005-10004
8.8/10 · Worth your timeNVDvuln
Summary
Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph_view.php script. An authenticated user can inject arbitrary shell commands via the graph_start GET parameter, which is improperly handled during graph rendering. This flaw allows attackers to execute commands on the underlying
CVECVE-2005-10004
SeverityHIGH
TypeUPDATED
PublishedSat, Aug 30 · 02:15 PM CDT
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2008-4128
8.1/10 · Worth your timeNVDvuln
Summary
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to t
CVECVE-2008-4128
SeverityHIGH
TypeUPDATED
PublishedThu, Sep 18 · 08:00 PM CDT
ModifiedThu, Sep 24 · 04:17 AM CDT
CVE-2006-2936
7.8/10 · Worth your timeNVDvuln
Summary
The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be queued.
CVECVE-2006-2936
SeverityHIGH
TypeUPDATED
PublishedMon, Jul 10 · 07:05 PM CDT
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2025-64699
7.8/10 · Worth your timeNVDvuln
Summary
An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw disk operations, which
CVECVE-2025-64699
SeverityHIGH
TypeUPDATED
PublishedWed, Dec 31 · 04:15 PM CST
ModifiedWed, Sep 23 · 05:10 PM CDT
CVE-2006-2198
7.6/10 · Worth your timeNVDvuln
Summary
OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user.
CVECVE-2006-2198
SeverityHIGH
TypeUPDATED
PublishedFri, Jun 30 · 06:05 PM CDT
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2006-2199
7.6/10 · Worth your timeNVDvuln
Summary
Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents.
CVECVE-2006-2199
SeverityHIGH
TypeUPDATED
PublishedFri, Jun 30 · 06:05 PM CDT
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2000-0923
7.5/10 · Worth your timeNVDvuln
Summary
authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.
CVECVE-2000-0923
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
CVE-2000-0955
7.5/10 · Worth your timeNVDvuln
Summary
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges.
CVECVE-2000-0955
SeverityHIGH
TypeUPDATED
PublishedTue, Dec 19 · 05:00 AM CST
ModifiedWed, Sep 23 · 01:10 PM CDT
