| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access. |
| Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy. |
| The SunView (SunTools) selection_svc facility allows remote users to read files. |
| Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords. |
| mSQL v2.0.1 and below allows remote execution through a buffer overflow. |
| Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root. |
| wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value. |
| Remote command execution in Microsoft Internet Explorer using .lnk and .url files. |
| In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). |
| Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port. |
| Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command. |
| Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service (hang) via an RPC message with a zero length payload, which causes NFS to reference a previous payload and enter an infinite loop. |
| A service or application has a backdoor password that was placed there by the developer. |
| Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf. |
| Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service. |
| eStara SIP softphone allows remote attackers to cause a denial of service (crash) via a SIP OPTIONS request with a negative Expires field. |
| Denial of service in HP-UX sendmail 8.8.6 related to accepting connections. |
| The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length. |
| The Logon box of a Windows NT system displays the name of the last user who logged in. |
| Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable. |