Lucene search
+L
CertMost viewed

3724 matches found

CERT
CERT
added 2005/01/27 12:00 a.m.44 views

Apple Mac OS X "at" utilities fail to drop privileges properly

Overview Apple's Mac OS X operating system may allow local privilege escalation in family of "at" commands. Description Mac OS X includes the "at" family of commands in order to schedule tasks. However, a flaw in these commands results in the commands not dropping privileges correctly. This may...

7.2CVSS6.5AI score0.00358EPSS
SaveExploits1References5
CERT
CERT
added 2005/01/25 12:00 a.m.44 views

BIND 9.3.0 vulnerable to denial of service in validator code

Overview A vulnerability in the BIND name server could allow a remote attacker to cause a denial of service against an affected system. Description The Berkeley Internet Name Domain BIND is a popular Domain Name System DNS implementation from Internet Systems Consortium ISC. BIND supports the DNS...

4.3CVSS6.4AI score0.06354EPSS
SaveExploits0References2
CERT
CERT
added 2004/11/19 12:00 a.m.44 views

CUPS stores user account details in plain text in log file

Overview When an SMB printer is configured, CUPS stores plain text login information to the log file. Description CUPS is a cross-platform printing system for UNIX environments. It can use the IPP, LPD, SMB, and JetDirect protocols to interact with printers. The SMB protocol is used to communicat...

2.1CVSS5.5AI score0.00445EPSS
SaveExploits0References4
CERT
CERT
added 2004/10/13 12:00 a.m.44 views

Microsoft Internet Explorer does not properly handle navigations from plug-ins

Overview Microsoft Internet Explorer contains a vulnerability in its handling of navigation commands from plug-ins. This could let an attacker spoof the address of a website. Description Microsoft Internet Explorer improperly handles navigations from plug-ins, such as ActiveX controls. This...

5CVSS7.3AI score0.33792EPSS
SaveExploits0References2
CERT
CERT
added 2004/03/25 12:00 a.m.44 views

Ethereal ISUP protocol dissector fails to properly decode ISUP packets

Overview Ethereal fails to properly decode ISDN User Part ISUP packets containing an overly long Interworking Function Address IWFA value. Description Ethereal is a network traffic analysis package. It includes the ability to decode packets containing ISUP data. There is a vulnerability in the wa...

5CVSS7.6AI score0.67092EPSS
SaveExploits2References3
CERT
CERT
added 2004/03/24 12:00 a.m.44 views

Ethereal contains multiple vulnerabilities in the EIGRP protocol dissector

Overview Ethereal contains multiple vulnerabilities in the Enhanced Interior Gateway Routing Protocol EIGRP protocol dissector. These vulnerabilities could allow a remote, unauthenticated attacker to execute arbitrary code. Description Ethereal is a network traffic analysis package. It includes t...

5CVSS8.2AI score0.67092EPSS
SaveExploits2References3
CERT
CERT
added 2003/01/21 12:00 a.m.44 views

Concurrent Versions System (CVS) server improperly deallocates memory

Overview A "double-free" vulnerability in the Concurrent Versions System CVS server could allow a remote attacker to execute arbitrary code or commands or cause a denial of service on a vulnerable system. Description CVS is a source code maintenance system that is widely used by open-source...

7.5CVSS7.4AI score0.2387EPSS
SaveExploits2References5
CERT
CERT
added 2002/08/07 12:00 a.m.44 views

Nevrona Designs MiraMail stores all configuration and user account information in unencrypted text file

Overview Some versions of MiraMail store username and passwords in a text file without using encryption. Description MiraMail is a news server for Windows-based hosts. Versions of MiraMail up to and including 1.04 store MiraMail user data, including usernames and passwords, in unencrypted plainte...

2.1CVSS6AI score0.00424EPSS
SaveExploits0References2
CERT
CERT
added 2002/07/11 12:00 a.m.44 views

Buffer overflow in Windows Multiple UNC Provider (MUP) service

Overview A buffer overflow in the Microsoft Windows Multiple UNC Provider MUP could allow a local user to execute code with system privileges. Description Microsoft Windows recognizes resources identified by the Uniform Naming Convention UNC. Requests for resources identified by UNC references ar...

7.2CVSS7.1AI score0.03257EPSS
SaveExploits0References2
CERT
CERT
added 2002/05/09 12:00 a.m.45 views

Sun Solaris cachefsd vulnerable to stack overflow in fscache_setup() function

Overview Sun's NFS/RPC cachefs daemon cachefsd is shipped and installed by default with Sun Solaris 2.5.1, 2.6, 7, and 8 SPARC and Intel architectures. Cachefsd caches requests for operations on remote file systems mounted via the use of NFS protocol. An exploitable stack overflow exists in...

7.2CVSS7.2AI score0.20716EPSS
SaveExploits1References4
CERT
CERT
added 2002/02/25 12:00 a.m.44 views

Oracle9i Application Server Apache PL/SQL module does not properly handle HTTP Authorization header

Overview A vulnerability exists in the way the Apache Procedural Language/Structured Query Language PL/SQL module used by Oracle9i Application Server iAS handles HTTP Authorization headers. This vulnerability could allow an unauthenticated remote attacker to crash the Apache service. Description...

5CVSS9.1AI score0.03575EPSS
SaveExploits0References8
CERT
CERT
added 2001/12/10 12:00 a.m.44 views

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

Overview There is a format string vulnerability in GNU Privacy Guard. By sending a GPG message with a carefully crafted malicious filename, an attacker may be able to execute arbitrary code as the user who decrypts the message. Description GNU Privacy Guard GPG is a free, RFC2440 compliant...

7.5CVSS6.8AI score0.13728EPSS
SaveExploits1References13
CERT
CERT
added 2001/07/24 12:00 a.m.44 views

Debian glibc 2 symlink issue could allow arbitrary file overwriting

Overview Some versions of ld.so, the loader for shared libraries in UNIX/LINUX, do not properly clear risky environment variables, allowing a symlink attack to overwrite arbitrary files. Description LDDEBUGOUTPUT specifies a directory in which ld.so creates a file with a predictable name based on...

1.2CVSS6.2AI score0.00303EPSS
SaveExploits0References1
CERT
CERT
added 2001/04/05 12:00 a.m.44 views

Network Time Protocol ([x]ntpd) daemon contains buffer overflow in ntp_control:ctl_getitem() function

Overview There is a buffer overflow defect in the ctlgetitem function of the Network Time Protocol NTP daemon responsible for providing accurate time reports used for synchronizing the clocks on installed systems. All NTP daemons based on code maintained at the University of Delaware since NTPv2...

10CVSS7.6AI score0.91679EPSS
SaveExploits7References7
CERT
CERT
added 2000/11/02 12:00 a.m.44 views

Adobe Acrobat products have buffer overflow in the CIDFont /Registry and /Ordering entries

Overview By embedding malicious code in a Portable Document Format PDF file, an attacker can cause arbitrary code to execute on the victim's system. Description The Adobe Acrobat PDF file format facility for specifying fonts contains buffer overflows in the /Registry and /Ordering entries. Each o...

7.6CVSS7.2AI score0.04882EPSS
SaveExploits0References2
CERT
CERT
added 2022/06/21 12:00 a.m.43 views

SMA Technologies OpCon UNIX agent adds the same SSH key to all installations

Overview SMA Technologies OpCon UNIX agent adds the same SSH key on every installation and subsequent updates. An attacker with access to the private key can gain root access on affected systems. Description During OpCon UNIX agent installation and updates, an SSH public key is added to the root...

5.3AI score
SaveExploits0References2
CERT
CERT
added 2016/10/04 12:00 a.m.43 views

Animas OneTouch Ping insulin pump contains multiple vulnerabilities

Overview The Animas OneTouch Ping insulin pump contains multiple vulnerabilities that may allow an unauthenticated remote attacker to obtain patient treatment or device data, or execute commands on the device. The attacker cannot obtain personally identifiable information. Description CWE-319:...

9.8CVSS9.4AI score0.04519EPSS
SaveExploits0References2
CERT
CERT
added 2016/02/02 12:00 a.m.43 views

OpenELEC and RasPlex have a hard-coded SSH root password

Overview OpenELEC and derivatives utilize a hard-coded default root password, and enable SSH root access by default. Description CWE-259: Use of Hard-coded Password OpenELEC has a hard-coded root password. The root partition is by default read-only, preventing a user from changing the password on...

7.3AI score
SaveExploits0References4
CERT
CERT
added 2016/01/04 12:00 a.m.43 views

Furuno Voyage Data Recorder (VDR) moduleserv firmware update utility fails to properly sanitize user-provided input

Overview Furuno Voyage Data Recorder VDR VR-3000/VR-3000S and VR-7000 moduleserv firmware update utility fails to properly sanitize user-provided input and is vulnerable to arbitrary command execution with root privileges. Description According to the Furuno VDR product page, the VDR "records all...

8.3AI score
SaveExploits0References2
CERT
CERT
added 2015/10/27 12:00 a.m.43 views

EPSON Network Utility installs EpsonBidirectionalService with insecure permissions

Overview EPSON Network Utility contains a local privilege escalation vulnerability, which allows a local attacker to execute arbitrary code with SYSTEM privileges. Description CWE-276: Incorrect Default Permissions - CVE-2015-6034EPSON Network Utility v4.10 is an application that checks the print...

6.9CVSS7.3AI score0.00319EPSS
SaveExploits0References2
CERT
CERT
added 2015/06/15 12:00 a.m.43 views

Retrospect Backup Client uses weak password hashing

Overview Retrospect Backup Client is a client to a network-based backup utility. This client stores passwords in a hashed format that is weak and susceptible to collision, allowing an attacker to generate a password hash collision and gain access to the target's backup files. Description CWE-916:...

5CVSS7.1AI score0.03338EPSS
SaveExploits1References3
CERT
CERT
added 2015/03/03 12:00 a.m.43 views

ShareLaTeX vulnerable to remote command execution and information disclosure

Overview ShareLaTeX is a server-based software allowing group collaboration on LaTeX documents. ShareLaTeX prior to version 0.1.3 has been found to be vulnerable to command injections and information disclosure. Description CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path...

6.5CVSS6.4AI score0.01927EPSS
SaveExploits0References3
CERT
CERT
added 2015/02/02 12:00 a.m.43 views

SerVision HVG Video Gateway web interface contains multiple vulnerabilities

Overview SerVision HVG Video Gateway web interface contains multiple vulnerabilities affecting multiple firmware versions. Description CWE-288: Authentication Bypass Using an Alternate Path or Channel, andCWE-284: Improper Access Control - CVE-2015-0929By visiting time.htm, a user is issued a...

10CVSS7AI score0.03445EPSS
SaveExploits1References4
CERT
CERT
added 2014/07/11 12:00 a.m.43 views

Datum Systems satellite modem devices contain multiple vulnerabilities

Overview Datum Systems PSM-4500 and PSM-500 series satellite modem devices contain multiple vulnerabilities Description CWE-220:Sensitive Data Under FTP Root - CVE-2014-2950The Datum Systems SnIP operating system on PSM-4500 and PSM-500 satellite modem devices has FTP enabled by default with no...

10CVSS7.1AI score0.02294EPSS
SaveExploits0References3
CERT
CERT
added 2014/04/10 12:00 a.m.43 views

Microsoft Office file format converter memory corruption vulnerability

Overview The Microsoft Office file format converter contains a memory corruption vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code with the privileges of the user. Description Microsoft Office file format converter is a component that converts legacy...

9.3CVSS8AI score0.17315EPSS
SaveExploits0References2
CERT
CERT
added 2014/02/18 12:00 a.m.43 views

Belkin Wemo Home Automation devices contain multiple vulnerabilities

Overview Belkin Wemo Home Automation devices contain multiple vulnerabilities. Description CWE-321: Use of Hard-coded Cryptographic Key -CVE-2013-6952 Belkin Wemo Home Automation firmware contains a hard-coded cryptographic key and password. An attacker may be able to extract the key and password...

10CVSS7.2AI score0.03836EPSS
SaveExploits5References7
CERT
CERT
added 2013/10/15 12:00 a.m.43 views

HR Systems Strategies info:HR HRIS allows read access to weakly obfuscated shared database password

Overview HR Systems Strategies info:HR HRIS 7.9 and possibly earlier versions allow read access to a weakly obfuscated database password. This password is shared by all clients within an info:HR site. A local attacker can decipher the password and gain complete control of the database and...

4.1CVSS6.9AI score0.00291EPSS
SaveExploits0References3
CERT
CERT
added 2010/12/15 12:00 a.m.43 views

Invensys Wonderware InBatch and Foxboro I/A Series Batch database lock manager service (lm_tcp) buffer overflow vulnerability

Overview The lmtcp service in Invensys Wonderware InBatch and Foxboro I/A Series Batch contains a buffer overflow vulnerability when coping string data into a buffer in a fixed structure. Description From the Invensys Wonderware website: "InBatch is powerful software that can be used in the most...

8.3AI score
SaveExploits0References5
CERT
CERT
added 2010/08/05 12:00 a.m.43 views

FreeType 2 CFF font stack corruption vulnerability

Overview FreeType 2 contains a vulnerability in the processing of CFF fonts, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description FreeType is a font engine that can open and process font files. FreeType 2 includes the ability to handle a...

9.3CVSS8.2AI score0.30653EPSS
SaveExploits8References8
CERT
CERT
added 2010/04/06 12:00 a.m.43 views

IntelliCom NetBiter devices have default HICP passwords

Overview IntelliCom NetBiter devices ship with default passwords for the HICP network configuration service. An attacker with network access could change network settings and prevent legitimate users from accessing the HICP service. Description IntelliCom NetBiter products use the proprietary HIC...

10CVSS5.9AI score0.03389EPSS
SaveExploits1References4
CERT
CERT
added 2010/03/01 12:00 a.m.43 views

Internet Explorer VBScript Windows Help arbitrary code execution

Overview Microsoft Internet Explorer is vulnerable to arbitrary code execution through the use of VBScript and Windows Help. Description Microsoft Internet Explorer supports the use of VBScript, in addition to the more widely-used JavaScript scripting language. Several VBScript commands allow a...

7.6CVSS6.3AI score0.86367EPSS
SaveExploits8References6
CERT
CERT
added 2009/12/15 12:00 a.m.43 views

Adobe Acrobat and Reader contain a use-after-free vulnerability in the JavaScript Doc.media.newPlayer method

Overview The Doc.media.newPlayer method in Adobe Acrobat and Reader contains a use-after-free vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Adobe Reader and the Adobe Acrobat family of software are designed to creat...

9.3CVSS8.7AI score0.81933EPSS
SaveExploits21References8
CERT
CERT
added 2009/11/30 12:00 a.m.43 views

Clientless SSL VPN products break web browser domain-based security models

Overview Clientless SSL VPN products from multiple vendors operate in a way that breaks fundamental browser security mechanisms. An attacker could use these devices to bypass authentication or conduct other web-based attacks. Description Web browsers enforce the same origin policy to prevent one...

6.8CVSS6.5AI score0.04823EPSS
SaveExploits0References10
CERT
CERT
added 2009/04/03 12:00 a.m.43 views

Microsoft Office PowerPoint code execution vulnerability

Overview Microsoft PowerPoint contains a vulnerability. If exploited, this vulnerability could allow an attacker to execute code. Description Microsoft Powerpoint is a component of Microsoft Office. Per Microsoft Security Advisory 969136: The vulnerability is caused when Microsoft Office PowerPoi...

9.3CVSS6.7AI score0.67539EPSS
SaveExploits5References2
CERT
CERT
added 2008/06/26 12:00 a.m.43 views

Microsoft Internet Explorer 6 contains a cross-domain vulnerability

Overview Microsoft Internet Explorer 6 is vulnerable to a cross-domain scripting violation, which can allow a remote, unauthenticated attacker to access the content of a web page in a different domain. Description IE uses a cross-domain security model to maintain separation between browser frames...

6.2AI score
SaveExploits0References3
CERT
CERT
added 2008/06/06 12:00 a.m.43 views

HP Online Support Services ActiveX GetFileTime() buffer overflow

Overview HP Online Support Services contains the function GetFileTime, which can be exploited to cause a buffer overflow. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description HP Services provides online product support services including ...

6.9AI score
SaveExploits0References2
CERT
CERT
added 2008/06/06 12:00 a.m.43 views

HP Online Support Services ActiveX StartApp() arbitrary code execution

Overview The HP Online Support Services ActiveX control contains a method called StartApp. This may allow a remote, unauthenticated attacker to execute local files on a vulnerable system in the context of the local user. Description HP Services provides online product support services including H...

6AI score
SaveExploits0References2
CERT
CERT
added 2008/05/29 12:00 a.m.43 views

GnuTLS Server Name extension Denial of Service

Overview A vulnerability exists in GnuTLS that may allow a remote attacker to cause a denial of service. Description GnuTLS contains a vulnerability in gnults-serv that may result in a denial of service when handling a specially crafted Client Hello message. According to CERT-FI Vulnerability...

5CVSS8.8AI score0.04954EPSS
SaveExploits1References4
CERT
CERT
added 2008/05/06 12:00 a.m.43 views

PHP path translation vulnerability

Overview PHP contains a path translation vulnerability that may allow an attacker to execute arbitrary code. Description PHP is a scripting language that is designed for web-based applications and can be imbedded directly into HTML.PHP versions prior to 5.2.6 contain a path translation...

10CVSS9.4AI score0.10918EPSS
SaveExploits2References2
CERT
CERT
added 2008/04/18 12:00 a.m.43 views

Apple Safari fails to properly handle a file name

Overview A vulnerabilty in Apple Safari handles specially crafted file name may allow execution of arbitrary code or denial of service. Description According to Apple Safari 3.1.1:A memory corruption issue exists in Safari's file downloading. By enticing a user to download a file with a malicious...

6.8CVSS7.5AI score0.04015EPSS
SaveExploits1References1
CERT
CERT
added 2007/08/14 12:00 a.m.43 views

Microsoft GDI Windows Metafile AttemptWrite integer overflow

Overview Microsoft Windows GDI contains an integer overflow in the handling of Windows metafiles, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Windows GDI Graphics Device Interface enables applications to use graphics a...

9.3CVSS7.2AI score0.51924EPSS
SaveExploits2References4
CERT
CERT
added 2007/03/06 12:00 a.m.43 views

Apple QuickTime PICT heap buffer overflow

Overview The Apple QuickTime player contains a heap buffer overflow vulnerability. This vulnerability may allow an attacker to execute arbitrary code or create a denial-of-service condition. Description PICT is a graphics file format that was used by Apple Macintosh systems prior to OS X as their...

5.8CVSS7.4AI score0.06087EPSS
SaveExploits1References12
CERT
CERT
added 2007/02/16 12:00 a.m.43 views

Apple Mac OS X Finder DMG volume name buffer overflow

Overview Apple Mac OS X Finder fails to properly handle DMG files with large volume names, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description DMG files are disk images that can contain a variety of filesystems. Apple Mac OS X Finder...

6.8CVSS7.5AI score0.08129EPSS
SaveExploits2References5
CERT
CERT
added 2007/02/13 12:00 a.m.43 views

Microsoft HTML Help ActiveX control fails to properly validate input

Overview The Microsoft HTML Help ActiveX control fails to properly validate input, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The HTML Help Control HHCtrl Object is a Windows ActiveX control that provides the ability to view...

9.3CVSS6.6AI score0.26374EPSS
SaveExploits0References5
CERT
CERT
added 2007/01/02 12:00 a.m.43 views

ICONICS Dialog Wrapper Module ActiveX control vulnerable to buffer overflow

Overview ICONICS Dialog Wrapper Module ActiveX control contains a buffer overflow. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description OLE for Process Control OPC is a specification for a standard set of OLE COM objects for use in the proce...

7.5CVSS7.2AI score0.07843EPSS
SaveExploits5References6
CERT
CERT
added 2006/11/15 12:00 a.m.43 views

Microsoft Internet Explorer fails to properly interpret HTML with certain layout combinations

Overview A vulnerability in the way Microsoft Internet Explorer interprets malformed Web pages may lead to execution of arbitrary code. Description Microsoft Internet Explorer contatins a vulnerabilty that could be exploited when Internet Explorer attempts to interpret specially crafted Web pages...

5.1CVSS7AI score0.25389EPSS
SaveExploits0References2
CERT
CERT
added 2006/11/02 12:00 a.m.43 views

Computer Associates BrightStor ARCserv and Protection Suite products RPC buffer overflow vulnerabilities

Overview Multiple vulnerabilities exist in Computer Associates backup products. If successfully exploited, these vulnerabilities may allow an attacker to execute arbitrary code. Description BrightStor ARCserve Backup is a backup and data retention tool that integrates with other BrightStor Data...

7.5CVSS7.6AI score0.78513EPSS
SaveExploits15References15
CERT
CERT
added 2006/06/02 12:00 a.m.43 views

Mozilla may associate persisted XUL attributes with an incorrect URL

Overview Mozilla can allow persisted XUL attributes to associate with the wrong URL. This may allow a remote attacker to execute arbitrary code. Description XULXUL is an XML-based user interface language, which is used by Mozilla. Persisted XUL XUL elements with the persist attribute maintain the...

7.5CVSS6.4AI score0.04566EPSS
SaveExploits0References5
CERT
CERT
added 2006/04/17 12:00 a.m.43 views

Mozilla XBL binding vulnerability

Overview Mozilla products fail to properly restrict access to privileged XBL bindings. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code. Description XBL According to Mozilla, XBL "is a markup language that defines special new elements, or 'bindings' for XU...

6.8CVSS6.8AI score0.05077EPSS
SaveExploits0References5
CERT
CERT
added 2006/04/17 12:00 a.m.43 views

Mozilla products JavaScript engine fail to properly handle garbage-collection

Overview A vulnerability in the way the JavaScript engine of Mozilla products and derivative programs handles garbage collection could allow a remote attacker to execute arbitrary code on a vulnerable system. Description The JavaScript programming language uses a method of memory management known...

5CVSS6.9AI score0.03877EPSS
SaveExploits0References1
Total number of security vulnerabilities3724