[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 414671
> CVE-1999-0040 [HIGH]
[PUBLISHED: 1997-05-01] [EPSS 1.23%]
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+40)
> CVE-1999-0112 [HIGH]
[PUBLISHED: 1997-05-01] [EPSS 0.80%]
Buffer overflow in AIX dtterm program for the CDE.
AFFECTED_PRODUCTS: IBM Aix, IBM Aix, Cde Cde
> CVE-1999-1296 [HIGH]
[PUBLISHED: 1997-04-29] [EPSS 0.34%]
Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRB_CONF environmental variable.
AFFECTED_PRODUCTS: Mit Kerberos 5
> CVE-1999-0038 [HIGH 8.4]
[PUBLISHED: 1997-04-26] [EPSS 1.32%]
Buffer overflow in xlock program allows local users to execute commands as root.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+39)
> CVE-1999-0149 [HIGH]
[PUBLISHED: 1997-04-19] [EPSS 2.75%]
The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.
AFFECTED_PRODUCTS: Sgi Irix
> CVE-1999-0058 [HIGH]
[PUBLISHED: 1997-04-17] [EPSS 1.80%]
Buffer overflow in PHP cgi program, php.cgi allows shell access.
AFFECTED_PRODUCTS: PHP PHP, PHP PHP
> CVE-1999-0042 [CRITICAL]
[PUBLISHED: 1997-04-07] [âš¡ EPSS 12.7%]
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
AFFECTED_PRODUCTS: IBM Aix, Red Hat Linux, Red Hat Linux ... (+5)
> CVE-1999-1298 [HIGH]
[PUBLISHED: 1997-04-07] [EPSS 1.32%]
Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources.
AFFECTED_PRODUCTS: FreeBSD Freebsd, FreeBSD Freebsd, FreeBSD Freebsd ... (+3)
> CVE-1999-1387 [MEDIUM]
[PUBLISHED: 1997-04-02] [âš¡ EPSS 21.2%]
Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25.
AFFECTED_PRODUCTS: Microsoft Windows Nt
> CVE-1999-0280 [HIGH]
[PUBLISHED: 1997-04-01] [âš¡ EPSS 15.6%]
Remote command execution in Microsoft Internet Explorer using .lnk and .url files.
AFFECTED_PRODUCTS: Microsoft Internet Explorer, Microsoft Internet Explorer
> CVE-1999-0292 [MEDIUM]
[PUBLISHED: 1997-04-01] [EPSS 6.04%]
Denial of service through Winpopup using large user names.
AFFECTED_PRODUCTS: Microsoft Windows Nt
> CVE-1999-0315 [HIGH]
[PUBLISHED: 1997-04-01] [EPSS 0.84%]
Buffer overflow in Solaris fdformat command gives root access to local users.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+6)
> CVE-1999-1525 [MEDIUM]
[PUBLISHED: 1997-03-14] [EPSS 1.15%]
Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.
AFFECTED_PRODUCTS: Macromedia Shockwave Flash Plugin
> CVE-1999-0299 [CRITICAL]
[PUBLISHED: 1997-03-05] [EPSS 1.30%]
Buffer overflow in FreeBSD lpd through long DNS hostnames.
AFFECTED_PRODUCTS: FreeBSD Freebsd
> CVE-1999-1408 [LOW]
[PUBLISHED: 1997-03-05] [EPSS 1.00%]
Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost.
AFFECTED_PRODUCTS: IBM Aix, IBM Aix, IBM Aix ... (+6)
> CVE-1999-1489 [HIGH]
[PUBLISHED: 1997-03-04] [EPSS 1.06%]
Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument.
AFFECTED_PRODUCTS: Slackware Slackware Linux
> CVE-1999-0105 [LOW]
[PUBLISHED: 1997-03-01] [EPSS 0.37%]
finger allows recursive searches by using a long string of @ symbols.
> CVE-1999-0106 [LOW]
[PUBLISHED: 1997-03-01] [EPSS 0.36%]
Finger redirection allows finger bombs.
> CVE-1999-0165 [CRITICAL]
[PUBLISHED: 1997-03-01] [EPSS 1.95%]
NFS cache poisoning.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+16)
> CVE-1999-0318 [HIGH]
[PUBLISHED: 1997-03-01] [EPSS 0.61%]
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+4)
> CVE-1999-0612
[PUBLISHED: 1997-03-01] [âš¡ EPSS 68.0%]
A version of finger is running that exposes valid user information to any entity on the network.
AFFECTED_PRODUCTS: Microsoft Windows Nt, Microsoft Windows 2000, GNU Finger Service ... (+1)
> CVE-1999-1128 [MEDIUM]
[PUBLISHED: 1997-03-01] [EPSS 3.59%]
Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user.
AFFECTED_PRODUCTS: Microsoft Internet Explorer
> CVE-1999-0868 [HIGH]
[PUBLISHED: 1997-02-20] [EPSS 1.50%]
ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
AFFECTED_PRODUCTS: Red Hat Linux, Red Hat Linux, Isc Inn ... (+6)
> CVE-1999-0041 [HIGH]
[PUBLISHED: 1997-02-13] [EPSS 9.09%]
Buffer overflow in NLS (Natural Language Service).
AFFECTED_PRODUCTS: Cray Unicos, Cray Unicos, Cray Unicos ... (+9)
> CVE-1999-0109 [HIGH]
[PUBLISHED: 1997-02-10] [EPSS 0.80%]
Buffer overflow in ffbconfig in Solaris 2.5.1.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Solaris ... (+1)
> CVE-1999-0228 [MEDIUM]
[PUBLISHED: 1997-02-07] [EPSS 4.97%]
Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT.
AFFECTED_PRODUCTS: Microsoft Windows Nt
> CVE-1999-0046 [CRITICAL]
[PUBLISHED: 1997-02-06] [âš¡ EPSS 51.9%]
Buffer overflow of rlogin program using TERM environmental variable.
AFFECTED_PRODUCTS: Oracle Solaris, Oracle Solaris, Oracle Solaris ... (+36)
> CVE-1999-0298 [HIGH]
[PUBLISHED: 1997-02-05] [EPSS 2.03%]
ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Slackware Slackware Linux ... (+2)
> CVE-1999-1299 [CRITICAL]
[PUBLISHED: 1997-02-03] [EPSS 1.84%]
rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.
AFFECTED_PRODUCTS: Red Hat Linux, Slackware Slackware Linux
> CVE-1999-1160 [CRITICAL]
[PUBLISHED: 1997-02-02] [EPSS 4.37%]
Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux
> CVE-1999-0174 [MEDIUM]
[PUBLISHED: 1997-02-01] [EPSS 6.90%]
The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
AFFECTED_PRODUCTS: Netscape Communicator, Netscape Communicator, Netscape Communicator ... (+4)
> CVE-1999-0309 [HIGH]
[PUBLISHED: 1997-02-01] [EPSS 0.53%]
HP-UX vgdisplay program gives root access to local users.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+2)
> CVE-1999-0369 [HIGH]
[PUBLISHED: 1997-02-01] [EPSS 0.81%]
The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+11)
> CVE-1999-0959 [HIGH]
[PUBLISHED: 1997-02-01] [EPSS 0.71%]
IRIX startmidi program allows local users to modify arbitrary files via a symlink attack.
AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+4)
> CVE-1999-1144 [HIGH]
[PUBLISHED: 1997-01-30] [EPSS 0.51%]
Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+1)
> CVE-1999-0047 [CRITICAL]
[PUBLISHED: 1997-01-28] [EPSS 3.11%]
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
AFFECTED_PRODUCTS: Eric Allman Sendmail, Eric Allman Sendmail, Bsdi Bsd Os ... (+1)
> CVE-1999-0048 [CRITICAL]
[PUBLISHED: 1997-01-27] [EPSS 3.13%]
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
AFFECTED_PRODUCTS: IBM Aix, IBM Aix, IBM Aix ... (+4)
> CVE-1999-0966 [HIGH]
[PUBLISHED: 1997-01-27] [EPSS 0.40%]
Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0].
AFFECTED_PRODUCTS: Sun Sunos
> CVE-1999-0081 [MEDIUM]
[PUBLISHED: 1997-01-11] [EPSS 1.58%]
wu-ftp allows files to be overwritten via the rnfr command.
AFFECTED_PRODUCTS: Washington University Wu Ftpd
> CVE-1999-1088 [HIGH]
[PUBLISHED: 1997-01-09] [EPSS 0.51%]
Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+3)
> CVE-1999-0049 [HIGH]
[PUBLISHED: 1997-01-08] [EPSS 0.44%]
Csetup under IRIX allows arbitrary file creation or overwriting.
AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+2)
> CVE-1999-1145 [HIGH]
[PUBLISHED: 1997-01-07] [EPSS 0.52%]
Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+1)
> CVE-1999-1311 [MEDIUM]
[PUBLISHED: 1997-01-07] [EPSS 0.51%]
Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux
> CVE-1999-0051 [HIGH]
[PUBLISHED: 1997-01-06] [EPSS 1.30%]
Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+46)
> CVE-1999-1249 [MEDIUM]
[PUBLISHED: 1997-01-06] [EPSS 0.48%]
movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.
AFFECTED_PRODUCTS: HP Hp Ux
> CVE-1999-1120 [MEDIUM]
[PUBLISHED: 1997-01-04] [EPSS 0.85%]
netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.
AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+4)
> CVE-1999-0100 [CRITICAL]
[PUBLISHED: 1997-01-01]
Remote access in AIX innd 1.5.1, using control messages.
AFFECTED_PRODUCTS: Isc Inn
> CVE-1999-0163 [HIGH]
[PUBLISHED: 1997-01-01]
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
AFFECTED_PRODUCTS: Eric Allman Sendmail
> CVE-1999-0166 [MEDIUM]
[PUBLISHED: 1997-01-01]
NFS allows users to use a "cd .." command to access other directories besides the exported file system.
AFFECTED_PRODUCTS: Sun Nfs
> CVE-1999-0170 [HIGH]
[PUBLISHED: 1997-01-01]
Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
AFFECTED_PRODUCTS: Digital Ultrix