| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Buffer overflow in mstm in HP-UX allows local users to gain root access. |
| AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled. |
| AIX Licensed Program Product performance tools allow local users to gain root access. |
| Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access. |
| Buffer overflow in Linux Slackware crond program allows local users to gain root access. |
| Buffer overflow in the Linux mail program "deliver" allows local users to gain root access. |
| Linux PAM modules allow local users to gain root access using temporary files. |
| A malicious Palace server can force a client to execute arbitrary programs. |
| NT users can gain debug-level access on a system process using the Sechole exploit. |
| Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. |
| CGI PHP mlog script allows an attacker to read any file on the target server. |
| Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character. |
| IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory. |
| A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands. |
| Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits. |
| FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port that was intended for use by a client. |
| ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption. |
| rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory. |
| Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message. |
| Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service. |
