Export limit exceeded: 377148 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (377148 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2006-4881 | 1 David Bennett | 1 Php-post | 2026-04-16 | N/A |
| Multiple cross-site scripting (XSS) vulnerabilities in David Bennett PHP-Post (PHPp) 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the replyuser parameter in (a) pm.php; (2) the txt_jumpto parameter in (b) dropdown.php; the (3) txt_error and (4) txt_templatenotexist parameters in (c) template.php; the (5) split parameter in certain files, as demonstrated by (d) editprofile.php, (e) search.php, (f) index.php, and (g) pm.php; and the (6) txt_login parameter in (h) loginline.php; and allow remote authenticated users to inject arbitrary web script or HTML via the (7) txt_logout parameter in (i) loginline.php. | ||||
| CVE-2006-4889 | 1 Telekorn | 1 Signkorn Guestbook | 2026-04-16 | N/A |
| Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter in (1) index.php, (2) includes/functions.gb.php, (3) includes/functions.admin.php, (4) includes/admin.inc.php, (5) help.php, (6) smile.php, (7) entry.php; (8) adminhelp0.php, (9) adminhelp1.php, (10) adminhelp2.php, and (11) adminhelp3.php in (a) help/en and (b) help/de directories; and the (12) preview.php, (13) log.php, (14) index.php, (15) config.php, and (16) admin.php in the (c) admin directory, a different set of vectors than CVE-2006-4788. | ||||
| CVE-1999-0111 | 1 Ibm | 1 Aix | 2026-04-16 | N/A |
| RIP v1 is susceptible to spoofing. | ||||
| CVE-1999-0116 | 1 Ibm | 2 Aix, Sng | 2026-04-16 | N/A |
| Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood. | ||||
| CVE-1999-0117 | 1 Ibm | 1 Aix | 2026-04-16 | N/A |
| AIX passwd allows local users to gain root access. | ||||
| CVE-1999-0122 | 1 Ibm | 1 Aix | 2026-04-16 | N/A |
| Buffer overflow in AIX lchangelv gives root access. | ||||
| CVE-1999-0127 | 1 Hp | 1 Hp-ux | 2026-04-16 | N/A |
| swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access. | ||||
| CVE-1999-0273 | 1 Sun | 1 Sunos | 2026-04-16 | N/A |
| Denial of service through Solaris 2.5.1 telnet by sending ^D characters. | ||||
| CVE-1999-0128 | 5 Digital, Ibm, Linux and 2 more | 9 Osf 1, Aix, Sng and 6 more | 2026-04-16 | N/A |
| Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. | ||||
| CVE-1999-0132 | 2 Hp, Sun | 3 Hp-ux, Solaris, Sunos | 2026-04-16 | N/A |
| Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access. | ||||
| CVE-1999-0134 | 1 Sun | 1 Sunos | 2026-04-16 | N/A |
| vold in Solaris 2.x allows local users to gain root access. | ||||
| CVE-2006-0941 | 1 Cynical Games | 1 Shoutlive | 2026-04-16 | N/A |
| Multiple cross-site scripting (XSS) vulnerabilities in post.php in ShoutLIVE 1.1.0 allow remote attackers to inject arbitrary web script or HTML via certain variables when posting new messages. | ||||
| CVE-2006-0942 | 1 Pwsphp | 1 Pwsphp | 2026-04-16 | N/A |
| SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the aff_news_form parameter, a different vulnerability than CVE-2005-1509. | ||||
| CVE-1999-0284 | 2 Ibm, Microsoft | 2 Lotus Domino Mail Server, Exchange Server | 2026-04-16 | N/A |
| Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command. | ||||
| CVE-1999-0290 | 1 Qbik | 1 Wingate | 2026-04-16 | N/A |
| The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost. | ||||
| CVE-2006-0943 | 1 Pwsphp | 1 Pwsphp | 2026-04-16 | N/A |
| SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. | ||||
| CVE-1999-0293 | 1 Cisco | 1 Ios | 2026-04-16 | N/A |
| AAA authentication on Cisco systems allows attackers to execute commands without authorization. | ||||
| CVE-2006-0945 | 1 Archangelmgt | 1 Weblog | 2026-04-16 | N/A |
| PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL (%00) in the index parameter. | ||||
| CVE-1999-0296 | 1 Sun | 2 Solaris, Sunos | 2026-04-16 | N/A |
| Solaris volrmmount program allows attackers to read any file. | ||||
| CVE-2006-0946 | 1 Thomson | 1 Speedtouch | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter to the LocalNetwork page. | ||||