| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| An application-critical Windows NT registry key has inappropriate permissions. |
| The echo service is running. |
| An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information. |
| A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets. |
| A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection. |
| The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button. |
| Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot. |
| Local users can gain privileges using the debug utility in the MPE/iX operating system. |
| In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters. |
| Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port. |
| XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. |
| ftp on HP-UX 11.00 allows local users to gain privileges. |
| Buffer overflow in Thomas Boutell's cgic library version up to 1.05. |
| Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting. |
| Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root. |
| ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book. |
| Netmanager Chameleon SMTPd has several buffer overflows that cause a crash. |
| The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors. |
| Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting a malicious site and accepting a malicious certificate for the Mozilla update site, which can then be used to install arbitrary code on the next update. |
| Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insert_admin.php. |