Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (364861 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-1999-0887 1 Floosietek 1 Ftgate 2026-04-16 N/A
FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.
CVE-1999-0881 1 Blueface 1 Falcon Web Server 2026-04-16 N/A
Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2002-1807 1 Phpwebsite 1 Phpwebsite 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in phpWebSite 0.8.3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.
CVE-2003-1066 1 Sun 2 Solaris, Sunos 2026-04-16 N/A
Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (syslogd crash) and possibly execute arbitrary code via long syslog UDP packets.
CVE-2005-3861 1 Phpgreetz 1 Phpgreetz 2026-04-16 N/A
PHP remote file inclusion vulnerability in content.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content parameter.
CVE-2002-1810 1 Dlink 2 Dwl-900ap\+, Dwl-900ap\+ Firmware 2026-04-16 7.5 High
D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the administrative password, the WEP encryption keys, and network configuration information.
CVE-2006-2881 1 Dreamcost 1 Dreamaccount 2026-04-16 N/A
Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the da_path parameter in the (1) auth.cookie.inc.php, (2) auth.header.inc.php, or (3) auth.sessions.inc.php scripts.
CVE-2006-3036 1 Andy Mack 1 35mmslidegallery 2026-04-16 N/A
Multiple cross-site scripting (XSS) vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) imgdir parameter in (a) index.php, and the (2) w, (3) h, and (4) t parameters in (b) popup.php.
CVE-1999-0458 1 L0pht 1 L0phtcrack 2026-04-16 N/A
L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.
CVE-1999-0459 2026-04-16 N/A
Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.
CVE-1999-0462 1 Suse 1 Suse Linux 2026-04-16 N/A
suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.
CVE-1999-0463 1 L0pht 1 L0phtcrack 2026-04-16 N/A
Remote attackers can perform a denial of service using IRIX fcagent.
CVE-1999-0464 1 Tripwire 1 Tripwire 2026-04-16 N/A
Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.
CVE-1999-0479 2 Hp, Netscape 2 Hp-ux, Enterprise Server 2026-04-16 N/A
Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.
CVE-1999-0484 1 Openbsd 1 Openbsd 2026-04-16 N/A
Buffer overflow in OpenBSD ping.
CVE-2006-3415 1 Tor 1 Tor 2026-04-16 N/A
Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a man-in-the-middle (MITM) attack via unspecified vectors.
CVE-1999-0491 1 Gnu 1 Bash 2026-04-16 N/A
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.
CVE-1999-0492 2026-04-16 N/A
The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.
CVE-1999-0494 1 Wingate 1 Wingate 2026-04-16 N/A
Denial of service in WinGate proxy through a buffer overflow in POP3.
CVE-1999-0495 2026-04-16 N/A
A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares.