42350 matches found
CVE-1999-0909
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability...
CVE-1999-0703
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices...
CVE-1999-0437
Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port...
CVE-1999-0293
AAA authentication on Cisco systems allows attackers to execute commands without authorization...
CVE-1999-0769
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable...
CVE-1999-0033
Command execution in Sun systems via buffer overflow in the at program...
CVE-1999-0404
Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution...
CVE-1999-0242
Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords...
CVE-1999-0305
The system configuration control sysctl facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the 1 dosourceroute or 2 forwarding variables are set, which allows remote attackers to spoof TCP...
CVE-2019-7280
Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session and bypass authentication...
CVE-2019-7666
Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash value of the password, which may allow an attacker with access to the database to login as admin without decrypting the password...
CVE-2019-7671
Prima Systems FlexAir, Versions 2.3.38 and prior. Parameters sent to scripts are not properly sanitized before being returned to the user, which may allow an attacker to execute arbitrary code in a user’s browser session in context of an affected site...
CVE-2019-7281
Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website...
CVE-2019-7672
Prima Systems FlexAir, Versions 2.3.38 and prior. The flash version of the web interface contains a hard-coded username and password, which may allow an authenticated attacker to escalate privileges...
CVE-2025-1951
IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges...
CVE-2017-6738
The Simple Network Management Protocol SNMP subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these...
MAL-2026-108 Malicious code in @nestor_hexom/garfield (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f17544d86efc038d88ce2e378bcf87c4f0c79d2341d955b6b420500f923a862 The package @nestorhexom/garfield was found to contain malicious code. Source: ghsa-malware...
GHSA-9CXG-GRMQ-54MQ vulnerabilities
Vulnerabilities for packages: wordpress...