| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system. |
| verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting the code into the body parameter. NOTE: if a FlatNuke administrator is normally assumed to be able to modify arbitrary content, then this issue does not cross privilege boundaries and would not be a vulnerability. |
| Untrusted search path vulnerability in Gauche before 0.8.6-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH. |
| Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname that is obtained via a reverse DNS lookup. |
| Race condition in signal handling routine in ftpd, allowing read/write arbitrary files. |
| Denial of service by sending forged ICMP unreachable packets. |
| Buffer overflows in Sun libnsl allow root access. |
| WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a resource. |
| Buffer overflow in AIX libDtSvc library can allow local users to gain root access. |
| IRIX and AIX automountd services (autofsd) allow remote users to execute root commands. |
| Buffer overflow in AIX rcp command allows local users to obtain root access. |
| Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line. |
| The daytime service is running. |
| Vulnerability in PureTLS before 0.9b2 related to injection attacks, which could possibly allow remote attackers to corrupt or hijack user sessions. |
| The ghostscript command with the -dSAFER option allows remote attackers to execute commands. |
| In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. |
| The passwd command in Solaris can be subjected to a denial of service. |
| IIS newdsn.exe CGI script allows remote users to overwrite files. |
| finger 0@host on some systems may print information on some user accounts. |
| rpc.ypupdated (NIS) allows remote users to execute arbitrary commands. |
