| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access. |
| ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. |
| SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically linked setuid or setgid programs such as (1) login, (2) su, or (3) sendmail, that change the real and effective user ids to the same user. |
| Remote execution of arbitrary commands through Guestbook CGI program. |
| Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs. |
| php.cgi allows attackers to read any file on the system. |
| Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges. |
| Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET. |
| Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. |
| Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords. |
| Linux cfingerd could be exploited to gain root access. |
| Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root. |
| Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute arbitrary commands via a long string to the Agent port (1827), which is handled by smaxagent.exe. |
| Some configurations of NIS+ in Linux allowed attackers to log in as the user "+". |
| FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same time. |
| HP Remote Watch allows a remote user to gain root access. |
| HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address. |
| Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands. |
| A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials. |
| SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root. |