9691 matches found
CVE-1999-0136
Kodak Color Management System KCMS on Solaris allows a local user to write to arbitrary files and gain root access...
CVE-1999-0172
FormMail CGI program allows remote execution of commands...
CVE-1999-0325
vheumnt program in HP-UX allows local users to create root files through symlinks...
CVE-1999-0158
Cisco PIX firewall manager PFM on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known...
CVE-1999-0491
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute...
CVE-1999-0105
finger allows recursive searches by using a long string of @ symbols...
CVE-1999-0420
umapfs allows local users to gain root privileges by changing their uid through a malicious mountumap program...
CVE-1999-0697
SCO Doctor allows local users to gain root privileges through a Tools option...
CVE-1999-0060
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool...
CVE-1999-0169
NFS allows attackers to read and write any file on the system by specifying a false UID...
CVE-1999-0215
Routed allows attackers to append data to files...
CVE-2019-7909
A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with...
CVE-2019-16968
An issue was discovered in FusionPBX up to 4.5.7. In the file app\conferencecontrols\conferencecontroldetails.php, an unsanitized id variable coming from the URL is reflected in HTML on 2 occasions, leading to XSS...
CVE-2019-16519
ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks...
CVE-2019-16393
SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character...
CVE-2019-12105
In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inethttpserver, is not enabled by default but if the user enables it and does not set a password, Supervisor logs a warning message. The...
CVE-2019-12043
In remarkable 1.7.1, lib/parserinline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as demonstrated by a \x0ejavascript: URL...
CVE-2019-12182
Directory Traversal in Safescan Timemoto and TA-8000 series version 1.0 allows unauthenticated remote attackers to execute code via the administrative API...