/// Known vulnerabilities, CVSS scores and affected products

CVE database

Archive of known vulnerabilities (CVEs) with CVSS scores, severity, affected products and vendors. Filter by year and severity, linked to our coverage.

Actively exploited vulnerabilitiesThe CISA KEV catalog lists vulnerabilities that are being exploited in real attacks, not ones that might be. It is the list to start from when deciding what to patch first.

CVE-2005-2773Critical9.8Sep 2, 2005
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
hp1 affected products
CVE-2004-1464Medium5.9Dec 31, 2004
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
cisco1 affected products
CVE-2004-0210High7.8Aug 6, 2004
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
microsoft3 affected products
CVE-2002-0367High7.8Jun 25, 2002
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
microsoft2 affected products
CVE-2026-84869
A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

This product uses the NVD API but is not endorsed or certified by the NVD.