| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| wu-ftpd FTP daemon allows any user and password combination. |
| The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs. |
| Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option. |
| serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program. |
| websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable). |
| Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by the WORKDIR variable. |
| Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise. |
| ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. |
| Remote execution of arbitrary commands through Guestbook CGI program. |
| Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter. |
| Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands. |
| Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability." |
| Denial of service in talk program allows remote attackers to disrupt a user's display. |
| Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack. |
| Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable. |
| Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting. |
| Buffer overflow in Solaris kcms_configure command allows local users to gain root access. |
| Linux PAM modules allow local users to gain root access using temporary files. |
| A malicious Palace server can force a client to execute arbitrary programs. |
| Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges. |
