13672 matches found
CVE-2017-7622
dde-daemon, the daemon process of DDE Deepin Desktop Environment 15.0 through 15.3, runs with root privileges and hardly does anything to identify the user who calls the function through D-Bus. Anybody can change the grub config, even to append some arguments to make a backdoor or privilege...
CVE-2013-2159
Monkey HTTP Daemon: broken user name authentication...
CVE-2013-1197
The XML parser in the server in Cisco Unified Presence CUP allows remote authenticated users to cause a denial of service jabberd daemon crash via crafted XML content in an XMPP message, aka Bug ID CSCue13912...
CVE-2013-2181
Cross-site scripting XSS vulnerability in the Directory Listing plugin in Monkey HTTP Daemon monkeyd 1.2.2 allows attackers to inject arbitrary web script or HTML via a file name...
CVE-2010-0389
The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an HTTP request that lacks a method token...
CVE-2010-2968
The FTP daemon in Wind River VxWorks does not close the TCP connection after a number of failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...
CVE-2011-4873
Unspecified vulnerability in the server in Certec EDV atvise before 2.1 allows remote attackers to cause a denial of service daemon crash via crafted requests to TCP port 4840...
CVE-2019-14423
A Remote Code Execution RCE issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to execute system commands as root remotely via a simple HTTP request...
CVE-2010-3060
Unspecified vulnerability in the message-protocol implementation in the Server in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to cause a denial of service daemon outage via unknown vectors...
CVE-2018-20873
cPanel before 74.0.8 allows local users to disable the ClamAV daemon SEC-409...
CVE-2011-2218
Unspecified vulnerability in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service daemon crash via unknown vectors, a different vulnerability than CVE-2011-2219...
CVE-2010-5239
Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file. NOTE: some of these details a...
CVE-2012-4442
Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check...
CVE-2010-5137
wxBitcoin and bitcoind before 0.3.5 allow remote attackers to cause a denial of service daemon crash via a Bitcoin transaction containing an OPLSHIFT script opcode...
CVE-2010-0931
The Perforce service p4s.exe in Perforce Server 2008.1 allows remote attackers to cause a denial of service daemon crash via crafted data, possibly involving a large sndbuf value...
CVE-2010-0929
The Perforce service p4s.exe in Perforce Server 2008.1 allows remote attackers to cause a denial of service daemon crash via crafted data beginning with a byte sequence of 0x4c, 0xb3, 0xff, 0xff, and 0xff...
CVE-2005-4883
Race condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial of service daemon crash via invalid "connect frames."...
CVE-2009-3089
IBM Tivoli Directory Server TDS 6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via unspecified vectors, related to 1 the ibmslapd.exe daemon on Windows and 2 the ibmdiradm daemon in the administration server on Linux, as demonstrated by certain...
CVE-2002-2390
Buffer overflow in the IDENT daemon identd in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...
CVE-2006-0751
Multiple unspecified vulnerabilities in the 1 Filesystem in USErspace FUSE client and 2 NOOFS daemon in in Network Object Oriented File System NOOFS before 0.9.0 have unspecified impact and attack vectors...