CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| MEDIO5.0 |
HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window. |
| 19/12/2000 |
| CVE-2000-1076 | CRÍTICO10.0 | Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server. | 11/12/2000 |
| CVE-2000-1075 | MEDIO5.0 | Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services. | 11/12/2000 |
| CVE-2000-0812 | CRÍTICO10.0 | The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag. | 14/11/2000 |
| CVE-2000-0697 | CRÍTICO10.0 | The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters. | 20/10/2000 |
| CVE-2000-0696 | ALTO7.5 | The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script. | 20/10/2000 |
| CVE-2000-0629 | ALTO7.5 | The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet. | 12/07/2000 |
| CVE-2000-0291 | MEDIO4.6 | Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document. | 16/04/2000 |
| CVE-2000-0175 | CRÍTICO10.0 | Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command. | 09/03/2000 |
| CVE-2000-0174 | MEDIO5.0 | StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | 09/03/2000 |
| CVE-2000-0210 | BAJO1.2 | The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files. | 21/02/2000 |
| CVE-2000-0164 | ALTO7.2 | The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords. | 20/02/2000 |
| CVE-2000-0117 | ALTO7.2 | The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root). | 30/01/2000 |
| CVE-2000-0069 | BAJO2.1 | The recover program in Solstice Backup allows local users to restore sensitive files. | 01/01/2000 |
| CVE-1999-1584 | CRÍTICO10.0 | Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586. | 31/12/1999 |
| CVE-1999-0982 | ALTO7.2 | The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file. | 05/12/1999 |
| CVE-1999-1527 | ALTO7.5 | Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server. | 23/11/1999 |