| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Solaris SUNWadmap can be exploited to obtain root access. |
| htmlscript CGI program allows remote read access to files. |
| The info2www CGI script allows remote file access or remote command execution. |
| Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution. |
| Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges. |
| PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code via the l parameter. |
| Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL via (1) the msg parameter in ModifyMessage.php or (2) the postid parameter in ModifyMessage.php. |
| MetaInfo MetaWeb web server allows users to upload, execute, and read scripts. |
| Netscape Enterprise servers may list files through the PageServices query. |
| Red Hat pump DHCP client allows remote attackers to gain root access in some configurations. |
| mSQL v2.0.1 and below allows remote execution through a buffer overflow. |
| The Java Web Server would allow remote users to obtain the source code for CGI programs. |
| Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command. |
| Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection. |
| rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file. |
| Vulnerability in the Wguest CGI program. |
| Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet. |
| NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, which allows local users to obtain sensitive information. |
| root privileges via buffer overflow in eject command on SGI IRIX systems. |
| irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackers to access the system. |