Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (357318 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-1999-0087 1 Ibm 1 Aix 2026-04-16 N/A
Denial of service in AIX telnet can freeze a system and prevent users from accessing the server.
CVE-1999-0090 1 Ibm 1 Aix 2026-04-16 N/A
Buffer overflow in AIX rcp command allows local users to obtain root access.
CVE-1999-0096 3 Bsdi, Freebsd, Sco 4 Bsd Os, Freebsd, Internet Faststart and 1 more 2026-04-16 N/A
Sendmail decode alias can be used to overwrite sensitive files.
CVE-2006-2176 1 Php Design X 1 Php Linkliste 2026-04-16 N/A
Multiple cross-site scripting (XSS) vulnerabilities in links.php in PHP Linkliste 1.0b allow remote attackers to inject arbitrary web script or HTML via the (1) new_input, (2) new_url, or (3) new_name parameter.
CVE-1999-0101 1 Ibm 1 Aix 2026-04-16 N/A
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
CVE-2006-2189 1 Servous 1 Sblog 2026-04-16 N/A
SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: this issue can be used to trigger path disclosure. In addition, it might be primary to vector 1 in CVE-2006-1135.
CVE-1999-0104 4 Caldera, Hp, Microsoft and 1 more 5 Openlinux, Hp-ux, Windows 95 and 2 more 2026-04-16 N/A
A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.
CVE-2006-2212 1 Karjasoft 1 Sami Ftp Server 2026-04-16 N/A
Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a long (1) USER or (2) PASS command.
CVE-2006-2237 1 Awstats 1 Awstats 2026-04-16 N/A
The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter.
CVE-1999-0105 2026-04-16 N/A
finger allows recursive searches by using a long string of @ symbols.
CVE-1999-0109 1 Sun 2 Solaris, Sunos 2026-04-16 N/A
Buffer overflow in ffbconfig in Solaris 2.5.1.
CVE-1999-0113 1 Ibm 1 Aix 2026-04-16 N/A
Some implementations of rlogin allow root access if given a -froot parameter.
CVE-2002-2426 1 Citrix 3 Access Essentials, Metaframe Presentation Server, Presentation Server 2026-04-16 N/A
Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the InitialProgram key in an ICA connection. NOTE: some of these details are obtained from third party information.
CVE-1999-0115 1 Ibm 1 Aix 2026-04-16 N/A
AIX bugfiler program allows local users to gain root access.
CVE-2003-0003 1 Microsoft 4 Windows 2000, Windows 2000 Terminal Services, Windows Nt and 1 more 2026-04-16 N/A
Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.
CVE-2004-0529 1 Cluecentral 1 Suexec.patch 2026-04-16 N/A
The modified suexec program in cPanel, when configured for mod_php and compiled for Apache 1.3.31 and earlier without mod_phpsuexec, allows local users to execute untrusted shared scripts and gain privileges, as demonstrated using untainted scripts such as (1) proftpdvhosts or (2) addalink.cgi, a different vulnerability than CVE-2004-0490.
CVE-1999-0127 1 Hp 1 Hp-ux 2026-04-16 N/A
swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access.
CVE-2006-2256 1 Eqdkp 1 Eqdkp 2026-04-16 N/A
PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the eqdkp_root_path parameter.
CVE-1999-0141 1 Netscape 1 Navigator 2026-04-16 N/A
Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.
CVE-2006-2294 1 Timobraun 1 Dynamic Galerie 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in (1) index.php and (2) galerie.php. NOTE: this issue might be resultant from directory traversal.