Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (370925 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2003-0281 1 Firebirdsql 1 Firebird 2026-04-16 N/A
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_drop.
CVE-1999-0843 1 Cisco 1 Router 2026-04-16 N/A
Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.
CVE-1999-0840 1 Sun 1 Sunos 2026-04-16 N/A
Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.
CVE-2003-0280 1 Youngzsoft 1 Cmailserver 2026-04-16 N/A
Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.
CVE-1999-0838 1 Deerfield 1 Serv-u Ftp-server 2026-04-16 N/A
Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
CVE-1999-0836 1 Sco 1 Unixware 2026-04-16 N/A
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
CVE-1999-0832 2 Debian, Redhat 2 Debian Linux, Linux 2026-04-16 N/A
Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.
CVE-1999-0831 4 Cobalt, Debian, Sun and 1 more 6 Qube, Debian Linux, Cobalt Raq and 3 more 2026-04-16 N/A
Denial of service in Linux syslogd via a large number of connections.
CVE-2004-0825 1 Apple 1 Mac Os X Server 2026-04-16 N/A
QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service (application deadlock) via a certain sequence of operations.
CVE-2003-0278 1 Happycgi.com 1 Happymall 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert arbitrary web script via the file parameter.
CVE-1999-0828 1 Sco 1 Unixware 2026-04-16 N/A
UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
CVE-1999-0821 1 Freebsd 1 Freebsd 2026-04-16 N/A
FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.
CVE-1999-0820 1 Freebsd 1 Freebsd 2026-04-16 N/A
FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.
CVE-2005-3288 1 Rockliffe 1 Mailsite Express 2026-04-16 N/A
Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message.
CVE-1999-0818 1 Sun 2 Solaris, Sunos 2026-04-16 N/A
Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.
CVE-2003-0277 1 Happycgi 1 Happymall 2026-04-16 N/A
Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the file parameter.
CVE-1999-0814 1 Redhat 1 Linux 2026-04-16 N/A
Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.
CVE-2003-0269 1 Youbin 1 Youbin 2026-04-16 N/A
Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable.
CVE-1999-0811 1 Samba 1 Samba 2026-04-16 N/A
Buffer overflow in Samba smbd program via a malformed message command.
CVE-1999-0808 1 Isc 1 Dhcp Client 2026-04-16 N/A
Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options.