Export limit exceeded: 30000 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (30000 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2006-2436 1 Ibm 1 Websphere Application Server 2026-04-16 N/A
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
CVE-2006-2437 1 Caucho Technology 1 Resin 2026-04-16 N/A
The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code for file under the web root via the file parameter.
CVE-2006-2438 1 Caucho Technology 1 Resin 2026-04-16 N/A
Directory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to read arbitrary files under other web roots via the contextpath parameter. NOTE: this issue can produce resultant path disclosure when the parameter is invalid.
CVE-2003-1306 1 Microsoft 1 Urlscan 2026-04-16 N/A
Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive information (server name and version) via an HTTP request that generates certain errors such as 400 "Bad Request," which leak the Server header in the response.
CVE-1999-0249 1 Microsoft 2 Windows 2000, Windows Nt 2026-04-16 N/A
Windows NT RSHSVC program allows remote users to execute arbitrary commands.
CVE-1999-0250 1 Dan Bernstein 1 Qmail 2026-04-16 N/A
Denial of service in Qmail through long SMTP commands.
CVE-1999-0251 1 Talkd 1 Talkd 2026-04-16 N/A
Denial of service in talk program allows remote attackers to disrupt a user's display.
CVE-1999-0252 1 Lsoft 1 Listserv 2026-04-16 N/A
Buffer overflow in listserv allows arbitrary command execution.
CVE-1999-0253 1 Microsoft 2 Internet Information Server, Internet Information Services 2026-04-16 N/A
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.
CVE-1999-0254 1 Sun 1 Solaris 2026-04-16 N/A
A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information.
CVE-1999-0255 2026-04-16 N/A
Buffer overflow in ircd allows arbitrary command execution.
CVE-1999-0256 2 Jgaa, Microsoft 3 Warftpd, Windows 95, Windows Nt 2026-04-16 N/A
Buffer overflow in War FTP allows remote execution of commands.
CVE-1999-0257 1 Linux 1 Linux Kernel 2026-04-16 N/A
Nestea variation of teardrop IP fragmentation denial of service.
CVE-1999-0258 1 Microsoft 2 Windows 95, Windows Nt 2026-04-16 N/A
Bonk variation of teardrop IP fragmentation denial of service.
CVE-1999-0259 1 Infodrom 1 Cfingerd 2026-04-16 N/A
cfingerd lists all users on a system via search.**@target.
CVE-1999-0260 1 Renaud Deraison 1 Jj 2026-04-16 N/A
The jj CGI program allows command execution via shell metacharacters.
CVE-1999-0261 2026-04-16 N/A
Netmanager Chameleon SMTPd has several buffer overflows that cause a crash.
CVE-1999-0262 1 Renaud Deraison 1 Faxsurvey 2026-04-16 N/A
Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
CVE-1999-0263 1 Sun 1 Sunos 2026-04-16 N/A
Solaris SUNWadmap can be exploited to obtain root access.
CVE-1999-0264 1 Miva 1 Htmlscript 2026-04-16 N/A
htmlscript CGI program allows remote read access to files.