CVE mentions, exploit signals, and PoC evidence in one fast public view.
Loading current evidence
Historical archive search
Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.
Results
163,475 results · Sorted by Highest Buzz score first
3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC packets to the telnet port.
Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host.
sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
Buffer overflow in ALMail32 POP3 client via From: or To: headers.
FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, i…
A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.
The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.
Buffer overflow in ToxSoft NextFTP client through CWD command.
Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics.
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local user…
Denial of service in Gauntlet Firewall via a malformed ICMP packet.
Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifyin…
Denial of service in Windows NT messenger service through a long username.
Buffer overflow in Samba smbd program via a malformed message command.
Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions.
dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files.
Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) u…
MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File.
Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same…
IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via…
Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.
The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character.
Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
Denial of service in RAS/PPTP on NT systems.
Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang.
Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.
Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.