Vulnerabilities (CVE)

Total 200758 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-1231 1 Phorum 1 Phorum 2008-09-05 5.0 MEDIUM N/A
code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string.
CVE-2000-1232 1 Phorum 1 Phorum 2008-09-05 5.0 MEDIUM N/A
upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method.
CVE-2000-1233 1 Phorum 1 Phorum 2008-09-05 7.5 HIGH N/A
SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter.
CVE-2000-1234 1 Phorum 1 Phorum 2008-09-05 5.0 MEDIUM N/A
violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.
CVE-2000-1235 1 Oracle 1 Application Server 2008-09-05 5.0 MEDIUM N/A
The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via HTTP requests for Database Access Descriptor (DAD) files.
CVE-2000-1237 1 Floosietek 1 Ftgate 2008-09-05 5.0 MEDIUM N/A
The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing.
CVE-2000-0466 1 Ibm 1 Aix 2008-09-05 7.2 HIGH N/A
AIX cdmount allows local users to gain root privileges via shell metacharacters.
CVE-2000-0563 1 Apple 1 Mac Os Runtime For Java 2008-09-05 10.0 HIGH N/A
The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model.
CVE-2000-0657 1 Analogx 1 Proxy 2008-09-05 5.0 MEDIUM N/A
Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol.
CVE-2000-0679 1 Cvs 1 Cvs 2008-09-05 2.1 LOW N/A
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.
CVE-2000-0680 1 Cvs 1 Cvs 2008-09-05 7.2 HIGH N/A
The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action.
CVE-2000-0681 1 Bea 1 Weblogic Server 2008-09-05 10.0 HIGH N/A
Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.
CVE-2000-0682 1 Bea 1 Weblogic Server 2008-09-05 5.0 MEDIUM N/A
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet.
CVE-2000-0683 1 Bea 1 Weblogic Server 2008-09-05 5.0 MEDIUM N/A
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet.
CVE-2000-0686 1 Cgi Script Center 1 Auction Weaver 2008-09-05 5.0 MEDIUM N/A
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.
CVE-2000-0687 1 Cgi Script Center 1 Auction Weaver 2008-09-05 10.0 HIGH N/A
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
CVE-2000-0691 1 Gert Doering 1 Mgetty 2008-09-05 2.1 LOW N/A
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file.
CVE-2000-0692 1 Iss 1 Realsecure 2008-09-05 5.0 MEDIUM N/A
ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set.
CVE-2000-0693 1 Tech-source 1 Raptor Gfx Pgx32 2008-09-05 7.2 HIGH N/A
pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary commands by modifying their path to point to an alternate "cp" program.
CVE-2000-0694 1 Tech-source 1 Raptor Gfx Pgx32 2008-09-05 7.2 HIGH N/A
pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.