Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29843 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-1999-1133 1 Hp 1 Hp-ux 2025-04-03 N/A
HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, which do not authenticate users.
CVE-1999-1134 1 Hp 1 Hp-ux 2025-04-03 N/A
Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038, PHSS_4055, and PHSS_4066.
CVE-1999-1130 1 Netscape 1 Enterprise Server 2025-04-03 N/A
Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.
CVE-2000-0123 1 Filemaker 1 Filemaker 2025-04-03 N/A
The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0124 1 Surfcontrol 1 Superscout 2025-04-03 N/A
surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions.
CVE-2000-0125 1 Wired Community Software 1 Wwwthreads 2025-04-03 N/A
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
CVE-2000-0126 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
CVE-2000-0127 1 Progress 1 Webspeed 2025-04-03 N/A
The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
CVE-2000-0128 1 Daniel Beckham 1 The Finger Server 2025-04-03 N/A
The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
CVE-2000-0130 1 Sco 1 Unixware 2025-04-03 N/A
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
CVE-2000-0135 1 Atretail 1 Atretail 2025-04-03 N/A
The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0137 1 Cartit 1 Cartit 2025-04-03 N/A
The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0138 2025-04-03 N/A
A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft.
CVE-2000-0139 1 True North 1 Internet Anywhere Mail Server 2025-04-03 N/A
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
CVE-2000-0140 1 True North 1 Internet Anywhere Mail Server 2025-04-03 N/A
Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
CVE-2000-0141 1 Infopop 1 Ultimate Bulletin Board 2025-04-03 N/A
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
CVE-2000-0151 1 Gnu 1 Make 2025-04-03 N/A
GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
CVE-2000-0144 1 Axis 1 700 Network Document Server 2025-04-03 N/A
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
CVE-2000-0145 1 Debian 1 Debian Linux 2025-04-03 N/A
The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
CVE-2000-0146 1 Novell 1 Groupwise 2025-04-03 N/A
The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.