| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server. |
| Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems. |
| UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself. |
| Buffer overflow in Solaris lpset program allows local users to gain root access. |
| Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack. |
| Denial of service in HP-UX SharedX recserv program. |
| BMC Patrol allows remote attackers to gain access to an agent by spoofing frames. |
| Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter. |
| A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands. |
| Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP. |
| FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system. |
| Arkiea nlservd allows remote attackers to conduct a denial of service. |
| Buffer overflow in AIX ftpd in the libc library. |
| A remote attacker can read information from a Netscape user's cache via JavaScript. |
| The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters. |
| Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location. |
| FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks. |
| Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed". |
| Buffer overflow in Samba smbd program via a malformed message command. |
| wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress. |