CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통5.0 |
HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window. |
| 19/12/2000 |
| CVE-2000-1076 | 심각10.0 | Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server. | 11/12/2000 |
| CVE-2000-1075 | 보통5.0 | Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services. | 11/12/2000 |
| CVE-2000-0812 | 심각10.0 | The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag. | 14/11/2000 |
| CVE-2000-0697 | 심각10.0 | The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters. | 20/10/2000 |
| CVE-2000-0696 | 높음7.5 | The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script. | 20/10/2000 |
| CVE-2000-0629 | 높음7.5 | The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet. | 12/07/2000 |
| CVE-2000-0291 | 보통4.6 | Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document. | 16/04/2000 |
| CVE-2000-0175 | 심각10.0 | Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command. | 09/03/2000 |
| CVE-2000-0174 | 보통5.0 | StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | 09/03/2000 |
| CVE-2000-0210 | 낮음1.2 | The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files. | 21/02/2000 |
| CVE-2000-0164 | 높음7.2 | The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords. | 20/02/2000 |
| CVE-2000-0117 | 높음7.2 | The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root). | 30/01/2000 |
| CVE-2000-0069 | 낮음2.1 | The recover program in Solstice Backup allows local users to restore sensitive files. | 01/01/2000 |
| CVE-1999-1584 | 심각10.0 | Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586. | 31/12/1999 |
| CVE-1999-0982 | 높음7.2 | The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file. | 05/12/1999 |
| CVE-1999-1527 | 높음7.5 | Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server. | 23/11/1999 |