| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution. |
| Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111. |
| Buffer overflow in Internet Explorer 4.0(1). |
| In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program. |
| Denial of service by sending forged ICMP unreachable packets. |
| Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service. |
| Buffer overflow in NetMeeting allows denial of service and remote command execution. |
| Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. |
| HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack. |
| HP Remote Watch allows a remote user to gain root access. |
| Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access. |
| Denial of service in Slmail v2.5 through the POP3 port. |
| Buffer overflow in the Linux mail program "deliver" allows local users to gain root access. |
| Denial of service in Windows NT DNS servers by flooding port 53 with too many characters. |
| Linux PAM modules allow local users to gain root access using temporary files. |
| Remote command execution in Microsoft Internet Explorer using .lnk and .url files. |
| A malicious Palace server can force a client to execute arbitrary programs. |
| Denial of service in IIS using long URLs. |
| Denial of service through Winpopup using large user names. |
| index.php in Zen Cart 1.3.0.2 allows remote attackers to obtain sensitive information via empty (1) _GET[], (2) _SESSION[], (3) _POST[], (4) _COOKIE[], or (5) _SESSION[] array parameters, which reveals the installation path in an error message. NOTE: this issue might be resultant from a global overwrite vulnerability. |