CVE-1999-0341

Buffer overflow in the Linux mail program "deliver" allows local users to gain root access...

CVE-1999-0317

Buffer overflow in Linux su command gives root access to local users...

CVE-1999-0309

HP-UX vgdisplay program gives root access to local users...

CVE-1999-0038

Buffer overflow in xlock program allows local users to execute commands as root...

CVE-1999-0246

HP Remote Watch allows a remote user to gain root access...

CVE-1999-0192

Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable...

CVE-1999-0182

Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password...

CVE-1999-0462

suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk...

CVE-1999-0120

Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root...

CVE-1999-0121

Buffer overflow in dtaction command gives root access...

CVE-1999-0092

Various vulnerabilities in the AIX portmir command allows local users to obtain root access...

CVE-1999-0093

AIX nslookup command allows local users to obtain root access by not dropping privileges correctly...

CVE-1999-0056

Buffer overflow in Sun's ping program can give root access to local users...

CVE-1999-0263

Solaris SUNWadmap can be exploited to obtain root access...

CVE-2025-20112

CVE-2025-20112 affects multiple Cisco Unified Communications and Contact Center Solutions. Affected component/impact: privilege escalation to root on the device via exploitation of excessive permissions on system commands, leading to escape from restricted shell. Exploitation requires local, auth...

CVE-2025-4008

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote...

CVE-2025-48416 Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations

An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in via SSH. This configuration can be...

CVE-2025-48413

CVE-2025-48413 affects the eCharge Hardy Barth cPH2 and cPP2 charging stations. The root cause is hard-coded password hashes stored in the system files /etc/passwd and /etc/shadow that are shipped with update files. This allows an attacker to log into the device, potentially via an SSH backdoor o...

CVE-2025-48413 Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations

The /etc/passwd and /etc/shadow files reveal hard-coded password hashes for the operating system "root" user. The credentials are shipped with the update files. There is no option for deleting or changing their passwords for an enduser. An attacker can use the credentials to log into the device...

PT-2025-22487 · Infoblox · Infoblox Netmri

Name of the Vulnerable Software and Affected Versions: Infoblox NETMRI versions prior to 7.6.1 Description: The issue allows remote authenticated users to read arbitrary files with root access. Recommendations: For versions prior to 7.6.1, update to version 7.6.1 or later to resolve the issue...