Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (365171 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2002-2029 1 Apache 1 Http Server 2026-04-16 N/A
PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.
CVE-1999-0137 1 Fred N. Van Kempen 1 Dip 2026-04-16 N/A
The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
CVE-1999-0160 1 Cisco 1 Ios 2026-04-16 N/A
Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections.
CVE-1999-0139 1 Sun 2 Solaris, Sunos 2026-04-16 N/A
Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access.
CVE-1999-0140 1 Microsoft 1 Windows Nt 2026-04-16 N/A
Denial of service in RAS/PPTP on NT systems.
CVE-1999-0161 1 Cisco 1 Ios 2026-04-16 N/A
In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.
CVE-1999-0169 1 Sun 1 Nfs 2026-04-16 N/A
NFS allows attackers to read and write any file on the system by specifying a false UID.
CVE-2003-0364 1 Redhat 2 Enterprise Linux, Linux 2026-04-16 N/A
The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.
CVE-1999-0170 1 Digital 1 Ultrix 2026-04-16 N/A
Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
CVE-2004-1413 1 Kayako 1 Esupport 2026-04-16 N/A
Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (2) rate, (3) questiondetails, (4) ticketkey22, (5) email22 parameters to index.php, or (6) the e-mail field of the Forgot Key feature.
CVE-2004-2465 1 Efs Software 1 Easy Chat Server 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
CVE-1999-0176 1 Webgais Development Team 1 Webgais 2026-04-16 N/A
The Webgais program allows a remote user to execute arbitrary commands.
CVE-1999-0183 2 Linux, Tftp 2 Linux Kernel, Tftp 2026-04-16 N/A
Linux implementations of TFTP would allow access to files outside the restricted directory.
CVE-1999-0184 1 Isc 1 Bind 2026-04-16 N/A
When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.
CVE-2004-1414 1 Gadu-gadu 1 Gadu-gadu Instant Messenger 2026-04-16 N/A
Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service (application hang) via a message that contains many special strings that are converted to images.
CVE-1999-0194 2026-04-16 N/A
Denial of service in in.comsat allows attackers to generate messages.
CVE-2004-1415 1 Ben3w 1 2bgal 2026-04-16 N/A
SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal 2.4 and 2.5.1 allows remote attackers to execute arbitrary SQL commands via the id_album parameter.
CVE-2004-2467 1 Efs Software 1 Easy Chat Server 2026-04-16 N/A
chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a denial of service (server crash).
CVE-1999-0201 1 Ftp 1 Ftp 2026-04-16 N/A
A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.
CVE-2004-2662 1 Soft3304 1 04webserver 2026-04-16 N/A
Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or crash) via certain data related to OpenSSL, which causes a thread to terminate but continue to hold resources.