| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Buffer overflow in Linux Slackware crond program allows local users to gain root access. |
| ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book. |
| rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory. |
| Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service. |
| Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. |
| CGI PHP mlog script allows an attacker to read any file on the target server. |
| Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting. |
| MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely. |
| SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise. |
| NetBSD netstat command allows local users to access kernel memory. |
| Lynx allows a local user to overwrite sensitive files through /tmp symlinks. |
| Debian GNU/Linux cfengine package is susceptible to a symlink attack. |
| Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root. |
| Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL. |
| The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user. |
| Buffer overflow in Thomas Boutell's cgic library version up to 1.05. |
| The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext. |
| Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address. |
| XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. |
| The rwho/rwhod service is running, which exposes machine status and user information. |
