| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands. |
| FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument. |
| Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command. |
| Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument. |
| The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail. |
| Buffer overflow in FreeBSD angband allows local users to gain privileges. |
| By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing. |
| UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack. |
| NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging. |
| Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname. |
| Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option. |
| Denial of service in MDaemon WorldClient and WebConfig services via a long URL. |
| Buffer overflow in SCO su program allows local users to gain root access via a long username. |
| Denial of service in MDaemon 2.7 via a large number of connection attempts. |
| The default permissions for Endymion MailMan allow local users to read email or modify files. |
| Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly. |
| SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user. |
| Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character. |
| Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code. |
| UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers. |