| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Denial of service in talk program allows remote attackers to disrupt a user's display. |
| Buffer overflow in listserv allows arbitrary command execution. |
| A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information. |
| Nestea variation of teardrop IP fragmentation denial of service. |
| The jj CGI program allows command execution via shell metacharacters. |
| MetaInfo MetaWeb web server allows users to upload, execute, and read scripts. |
| Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string. |
| The info2www CGI script allows remote file access or remote command execution. |
| Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution. |
| Multiple SQL injection vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to execute arbitrary SQL commands via the (1) new_order and (2) order_dir parameters to (a) index.php, (b) group/group_index.php, (c) user/user_index.php, (d) list/list_index.php, and (e) company/company_index.php, and the (3) entity and (4) tf_dateafter parameter to company/company_index.php. |
| Solaris SUNWadmap can be exploited to obtain root access. |
| htmlscript CGI program allows remote read access to files. |
| Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vectors related to heap corruption. |
| Netscape Enterprise servers may list files through the PageServices query. |
| Progressive Networks Real Video server (pnserver) can be crashed remotely. |
| Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made. |
| In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. |
| Denial of service through Solaris 2.5.1 telnet by sending ^D characters. |
| In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages. |
| Vulnerability in the Wguest CGI program. |