CVE-1999-0232

Buffer overflow in NCSA WebServer version 1.5c gives remote access...

CVE-1999-0235

Buffer overflow in NCSA WebServer 1.4.1 and below gives remote access...

EUVD-1999-0146

Malware in sbrugna...

EUVD-1999-0235

Malware in sbrugna...

EUVD-1999-0267

Malware in sbrugna...

EUVD-2014-3439

Malware in sbrugna...

EUVD-2014-3438

Malware in sbrugna...

EUVD-1999-1071

Malware in sbrugna...

EUVD-1999-0236

Malware in sbrugna...

EUVD-1999-0232

Malware in sbrugna...

The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files.

...

CVE-2025-34116

A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, leading to command execution with web server...

PT-2025-29557 · Ipfire · Ipfire

Name of the Vulnerable Software and Affected Versions: IPFire versions prior to 2.19 Core Update 101 Description: A remote command execution issue exists in IPFire due to a flaw in the proxy.cgi CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in...

CVE-2025-34116: Improper Neutralization of Special Elements used in an OS Command

A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, leading to command execution with web server...

edu.uiuc.ncsa.myproxy:oa4mp-client-loader-oauth2 (>=3.0, <=3.2.1), edu.uiuc.ncsa.myproxy:oa4mp-client-oauth2 (>=3.0, <=3.2.1) +5 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (3.8)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - edu.uiuc.ncsa.myproxy:oa4mp-client-loader-oauth2 =3.0, =3.0, =3.0, =3.0, =3.0, =3.0, =3.0, =3.2.1 Source...

CVE-1999-0236

ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs...

CVE-1999-0267

Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution...

CVE-1999-0146

The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file...

edu.uiuc.ncsa.myproxy:oa4mp-client-loader-oauth2 (>=3.0, <=3.2.1), edu.uiuc.ncsa.myproxy:oa4mp-client-oauth2 (>=3.0, <=3.2.1) +5 more potentially affected by CVE-2017-12973 via com.nimbusds:nimbus-jose-jwt (3.8)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - edu.uiuc.ncsa.myproxy:oa4mp-client-loader-oauth2 =3.0, =3.0, =3.0, =3.0, =3.0, =3.0, =3.0, =3.2.1 Source...

edu.uiuc.ncsa.myproxy:oa4mp-client-loader-oauth2 (>=3.0, <=3.2.1), edu.uiuc.ncsa.myproxy:oa4mp-client-oauth2 (>=3.0, <=3.2.1) +5 more potentially affected by CVE-2017-12974 via com.nimbusds:nimbus-jose-jwt (3.8)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - edu.uiuc.ncsa.myproxy:oa4mp-client-loader-oauth2 =3.0, =3.0, =3.0, =3.0, =3.0, =3.0, =3.0, =3.2.1 Source...