| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error. |
| The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect. |
| userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack. |
| Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals. |
| Firewall-1 does not properly restrict access to LDAP attributes. |
| Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password. |
| iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request. |
| The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider. |
| genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767. |
| Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username. |
| Denial of service in Axent Raptor firewall via malformed zero-length IP options. |
| Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable. |
| sccw allows local users to read arbitrary files. |
| The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password. |
| Cross-site scripting (XSS) vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a 404 ("Not Found") error page. NOTE: some of these details are obtained from third party information. |
| Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories. |
| dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters. |
| The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files. |
| A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections. |