Search

Expected end of text, found '.' (at char 22), (line:1, col:23)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (344911 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-1999-0607 1 I-soft 1 Quikstore 2026-04-16 N/A
quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.
CVE-2001-0949 1 Valicert 1 Enterprise Validation Authority 2026-04-16 N/A
Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length.
CVE-1999-0610 1 Mountain Network Systems 1 Webcart 2026-04-16 N/A
An incorrect configuration of the Webcart CGI program could disclose private information.
CVE-1999-0625 2026-04-16 N/A
The rpc.rquotad service is running.
CVE-1999-0630 2026-04-16 N/A
The NT Alerter and Messenger services are running.
CVE-1999-0637 2026-04-16 N/A
The systat service is running.
CVE-1999-0638 2026-04-16 N/A
The daytime service is running.
CVE-1999-0653 2026-04-16 N/A
A component service related to NIS+ is running.
CVE-1999-0654 2026-04-16 N/A
The OS/2 or POSIX subsystem in NT is enabled.
CVE-1999-0664 2026-04-16 N/A
An application-critical Windows NT registry key has inappropriate permissions.
CVE-1999-0677 1 Ramp Networks 2 Webramp 200i, Webramp M3 2026-04-16 N/A
The WebRamp web administration utility has a default password.
CVE-2001-1537 1 Symfony 1 Twig 2026-04-16 7.5 High
The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, which could allow attackers to obtain authentication information and gain privileges.
CVE-1999-0698 2026-04-16 N/A
Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux.
CVE-1999-0720 1 Linux 1 Linux Kernel 2026-04-16 N/A
The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.
CVE-2001-0956 1 Speechio 1 Speechd 2026-04-16 N/A
speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters.
CVE-2001-0959 2 Broadcom, Ca 3 Arcserve Backup, Arcserve Backup 2000, Arcserve Backup 2000 2026-04-16 N/A
Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files.
CVE-1999-0722 1 Sun 1 Cobalt Raq 2 2026-04-16 N/A
The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.
CVE-1999-0724 1 Openbsd 1 Openbsd 2026-04-16 N/A
Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
CVE-1999-0734 1 Cisco 1 Ciscosecure 2026-04-16 N/A
A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication.
CVE-1999-0746 2 Slackware, Suse 2 Slackware Linux, Suse Linux 2026-04-16 N/A
A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.