Filters
BEA Weblogic ServerBEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keyst…
2.1
First published (updated )
Redhat Linux/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, …
2.1
First published (updated )
Redhat LinuxThe RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow loc…
4.6
First published (updated )
Redhat LinuxVarious PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to exe…
7.5
First published (updated )
Redhat LinuxUnknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands,…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apple SafariKonqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 …
7.5
First published (updated )
Redhat LinuxThe TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a d…
First published (updated )
Redhat LinuxUnknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of…
First published (updated )
Redhat LinuxThe mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed ad…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Linuxlv reads a .lv file from the current working directory, which allows local users to execute arbitrar…
7.2
First published (updated )
Redhat Tcpdumptcpdump does not properly drop privileges to the pcap user when starting up.
4.6
First published (updated )
Redhat LinuxThe default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, whic…
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SGI IRIXThe Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an…
4.9
First published (updated )
Debian Debian LinuxMemory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows …
First published (updated )
Redhat Linuxdvips converter for Postscript files in the tetex package calls the system() function insecurely, wh…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Suse Suse LinuxOff-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malic…
10
First published (updated )
Redhat Linuxrsync, when running in daemon mode, does not properly call setgroups before dropping privileges, whi…
2.1
First published (updated )
Redhat LinuxMemory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of se…
2.6
First published (updated )
Redhat LinuxSquid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified i…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat LinuxSquid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and p…
7.5
First published (updated )
Suse Suse LinuxHeap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a…
7.2
First published (updated )
Redhat LinuxGNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user …
3.6
First published (updated )
Redhat Linuxslapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduc…
7.5
First published (updated )
Suse Suse LinuxOpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment varia…
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Linux2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for …
First published (updated )
Redhat LinuxLPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lo…
4.6
First published (updated )
Redhat Linuxinitscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow …
6.2
First published (updated )
Redhat LinuxThe default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat LinuxRed Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can all…
4.6
First published (updated )
Openldap Openldapslapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial…
First published (updated )
Redhat Linuxkdesu in kdelibs package creates world readable temporary files containing authentication info, whic…
4.6
First published (updated )