| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter. |
| Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. |
| Buffer overflow in NLS (Natural Language Service). |
| quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges. |
| An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information. |
| Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others. |
| An incorrect configuration of the Webcart CGI program could disclose private information. |
| List of arbitrary files on Web host via nph-test-cgi script. |
| MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4. |
| Csetup under IRIX allows arbitrary file creation or overwriting. |
| IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash. |
| The rpc.rquotad service is running. |
| Sun's ftpd daemon can be subjected to a denial of service. |
| Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool. |
| File creation and deletion, and remote execution, in the BSD line printer daemon (lpd). |
| The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage. |
| Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long LSF_From_PC parameter. |
| Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands. |
| CGI PHP mylog script allows an attacker to read any file on the target server. |
| ParaChat Server 4.0 does not log users off if the browser's back button is used, which allows remote attackers to cause a denial of service by repeatedly logging into a chat room, hitting the back button, then logging into the same chat room as a different user, which fills the chat room with invalid users. |