Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (345464 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-1999-0439 2 Caldera, Procmail 2 Openlinux, Procmail 2026-04-16 N/A
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
CVE-1999-0683 1 Network Associates 1 Gauntlet Firewall 2026-04-16 N/A
Denial of service in Gauntlet Firewall via a malformed ICMP packet.
CVE-1999-0687 4 Cde, Digital, Ibm and 1 more 5 Cde, Unix, Aix and 2 more 2026-04-16 N/A
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
CVE-1999-0688 1 Hp 1 Hp-ux 2026-04-16 N/A
Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
CVE-1999-0690 2 Cde, Hp 2 Cde, Hp-ux 2026-04-16 N/A
HP CDE program includes the current directory in root's PATH variable.
CVE-1999-0457 1 Debian 1 Debian Linux 2026-04-16 N/A
Linux ftpwatch program allows local users to gain root privileges.
CVE-1999-0461 2 Linux, Sgi 2 Linux Kernel, Irix 2026-04-16 N/A
Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
CVE-2004-1935 1 Sct Corporation 1 Campus Pipeline 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment.
CVE-1999-0692 2 Cray, Sgi 2 Unicos, Irix 2026-04-16 N/A
The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
CVE-2002-0499 1 Linux 1 Linux Kernel 2026-04-16 N/A
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.
CVE-1999-0466 1 Netbsd 1 Netbsd 2026-04-16 N/A
The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.
CVE-2006-1608 1 Php 1 Php 2026-04-16 N/A
The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.
CVE-1999-0694 1 Ibm 1 Aix 2026-04-16 N/A
Denial of service in AIX ptrace system call allows local users to crash the system.
CVE-1999-0695 1 Sybase 1 Powerdynamo 2026-04-16 N/A
The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.
CVE-2006-4254 1 Ibm 1 Aix 2026-04-16 N/A
Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors.
CVE-1999-0470 1 Novell 1 Netware 2026-04-16 N/A
A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.
CVE-1999-0696 2 Hp, Sun 3 Hp-ux, Solaris, Sunos 2026-04-16 N/A
Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).
CVE-1999-0473 1 Andrew Tridgell 1 Rsync 2026-04-16 N/A
The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.
CVE-1999-0698 2026-04-16 N/A
Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux.
CVE-1999-0702 1 Microsoft 1 Internet Explorer 2026-04-16 N/A
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability.