Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6,068

Export CSV
CVE-2003-0356

security flaw

Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions.

CVSS 3.1 · 9.8 Critical EPSS 9.6% KEV · Not listed
Vendors
Ethereal Redhat
Products
Ethereal Enterprise Linux Linux
CVE-2003-0354

security flaw

Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.

CVSS 2.0 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Linux
CVE-2001-1572

security flaw

The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.

CVSS 2.0 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2003-0328

security flaw

EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation.

CVSS 2.0 · 7.5 High EPSS 8.6% KEV · Not listed
Vendors
Epic Redhat
Products
Epic4 Linux
CVE-2001-0013

security flaw

Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

CVSS 2.0 · 10.0 Critical EPSS 10.8% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Linux
CVE-2003-0282

security flaw

Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.

CVSS 2.0 · 2.6 Low EPSS 22.0% KEV · Not listed
Vendors
Info-zip Redhat Sco
Products
Unzip Enterprise Linux Linux and 2 more
CVE-2003-0255

security flaw

The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path.

CVSS 2.0 · 10.0 Critical EPSS 6.6% KEV · Not listed
Vendors
Gnu Redhat
Products
Privacy Guard Enterprise Linux Linux
CVE-2003-0254

security flaw

Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by infinite loop) when the FTP proxy server fails to create an IPv6 socket.

CVSS 2.0 · 5.0 Medium EPSS 9.2% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Linux
CVE-2001-1400

security flaw

Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadlock).

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Linux
CVE-2003-0253

security flaw

The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service.

CVSS 2.0 · 5.0 Medium EPSS 9.1% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Linux
CVE-2001-0012

security flaw

BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.

CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Linux
CVE-2003-0252

security flaw

Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.

CVSS 3.1 · 9.8 Critical EPSS 15.8% KEV · Not listed
Vendors
Linux-nfs Redhat
Products
Nfs-utils Enterprise Linux Linux
CVE-2001-1399

security flaw

Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might allow attackers to modify memory, aka "User access asm bug on x86."

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Linux
CVE-2003-0251

security flaw

ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Nis Redhat
Products
Ypserv Nis Server Enterprise Linux Linux
CVE-2003-0248

security flaw

The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.

CVSS 2.0 · 10.0 Critical EPSS 3.7% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Linux
CVE-2001-1398

security flaw

Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability.

CVSS 2.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Linux
CVE-2003-0247

security flaw

Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel oops").

CVSS 2.0 · 5.0 Medium EPSS 3.1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Linux
CVE-2001-0011

security flaw

Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

CVSS 2.0 · 10.0 Critical EPSS 7.7% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Linux