Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
69 results · page 2 of 2
Dec 23, 2002mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separator character.CVE-2002-1362 · Other software · Matthew Smith · reported by MITREMedium 5
mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separator character.
- Product
- Micq
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 29, 2002Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string of CVE-2002-0251 · Other software · Licq · reported by MITREHigh 7.5
Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string of format string characters such as "%d".
- Product
- Licq
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 29, 2002ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains large height and width values, which cauCVE-2002-0254 · Other software · Mirabilis · reported by MITREMedium 5
ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains large height and width values, which causes the crash when viewed in Userdetails.
- Product
- ICQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 16, 2002KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.CVE-2002-0227 · Other software · Kicq · reported by MITREMedium 5
KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.
- Product
- Kicq
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 27, 2002Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request.CVE-2002-0028 · Other software · Mirabilis · reported by MITREHigh 7.5
Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request.
- Product
- ICQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 17, 2001ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-TypCVE-2001-1305 · Other software · Mirabilis · reported by MITREMedium 5
ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-Type of application/x-icq, which is processed by Internet Explorer.
- Product
- ICQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 2, 2001licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.CVE-2001-0439 · Other software · Licq · reported by MITREHigh 7.5
licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
- Product
- Licq
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comdistro.conectiva.com.br
Jul 2, 2001Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands.CVE-2001-0440 · Other software · Licq · reported by MITREHigh 7.5
Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands.
- Product
- Licq
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comdistro.conectiva.com.br
Jun 27, 2001Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % cCVE-2001-0367 · Other software · Mirabilis · reported by MITREMedium 5
Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters.
- Product
- ICQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
May 3, 2001kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.CVE-2001-0274 · Other software · Kicq · reported by MITREHigh 7.5
kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
- Product
- Kicq
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Mar 26, 2001Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long DescrCVE-2001-0233 · Other software · Matthew Smith · reported by MITREHigh 10
Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.
- Product
- Micq
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.freebsd.orgarchives.neohapsis.com
Dec 11, 2000ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.CVE-2000-1078 · Other software · Mirabilis · reported by MITREMedium 5
ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.
- Product
- ICQ Web Front
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comexchange.xforce.ibmcloud.com
Jun 6, 2000ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive informCVE-2000-0552 · Other software · ICQ · reported by MITREMedium 5.5
ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.
- Product
- ICQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
May 29, 2000The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long namCVE-2000-0564 · Other software · Mirabilis · reported by MITREMedium 5
The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long name parameter.
- Product
- ICQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Jan 10, 2000Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message.CVE-2000-0046 · Other software · Mirabilis · reported by MITREHigh 7.5
Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message.
- Product
- ICQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Oct 17, 1999ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port.CVE-1999-1342 · Other software · ICQ · reported by MITREMedium 5
ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port.
- Product
- Activelist Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 1, 1999ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing CVE-1999-1418 · Other software · Mirabilis · reported by MITREMedium 5
ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ("404 Forbidden") versus when a file does not exist ("404 not found").
- Product
- ICQ Web Front
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Apr 5, 1999The ICQ Webserver allows remote attackers to use ..CVE-1999-0474 · Other software · Mirabilis · reported by MITREMedium 5
The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.
- Product
- ICQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 1, 1999Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file wCVE-1999-1440 · Other software · Mirabilis · reported by MITREMedium 5.1
Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is safe to open from the client.
- Product
- ICQ 98a
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.