Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
544 results · page 11 of 11
Jan 2, 2002Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges viCVE-2002-1594 · Other software · Grpck · reported by MITREHigh 7.2
Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges via a long command line argument.
- Product
- Grpck
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 2001Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string.CVE-2001-1529 · Other software · IBM · reported by MITREHigh 7.5
Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of details in the vendor advisory, it is not clear if this is the same issue as CVE-2001-0779.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Dec 31, 2001IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP pacCVE-2001-1554 · Other software · IBM · reported by MITREMedium 5
IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP packets.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Dec 31, 2001Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.CVE-2001-1557 · Other software · IBM · reported by MITREHigh 7.5
Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwww-1.ibm.comwww-1.ibm.com
Dec 21, 2001Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system.CVE-2001-1440 · Other software · IBM · reported by MITREHigh 10
Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecuritytracker.comwww-1.ibm.com
Dec 6, 2001Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges.CVE-2001-0671 · Other software · IBM · reported by MITREHigh 10
Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 9, 2001Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.CVE-2001-1095 · Other software · IBM · reported by MITREMedium 4.6
Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comwww-1.ibm.com
Oct 9, 2001Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.CVE-2001-1096 · Other software · IBM · reported by MITREMedium 4.6
Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org
Aug 31, 2001Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.CVE-2001-1061 · Other software · IBM · reported by MITREHigh 10
Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Aug 22, 2001Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gaiCVE-2001-0632 · Other software · SUN · reported by MITREHigh 7.5
Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges.
- Product
- Chilisoft
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Aug 14, 2001Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable.CVE-2001-0533 · Other software · IBM · reported by MITREHigh 7.2
Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 2, 2001lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is unCVE-2001-0573 · Other software · IBM · reported by MITREMedium 4.6
lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comkb.cert.org
Jun 27, 2001AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.CVE-2001-0487 · Other software · IBM · reported by MITREMedium 5
AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.
- Product
- AIX Snmp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 19, 2001diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modiCVE-2001-1080 · Other software · IBM · reported by MITREHigh 10
diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modifying the variable to point to a Trojan horse program.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwww-1.ibm.comsecurityfocus.com
Jun 11, 2001Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.CVE-2001-1329 · Other software · IBM · reported by MITREHigh 7.2
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Jun 11, 2001Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.CVE-2001-1330 · Other software · IBM · reported by MITREHigh 7.2
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Jan 9, 2001Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.CVE-2000-1120 · Other software · IBM · reported by MITREHigh 7.2
Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infowww-1.ibm.com
Jan 9, 2001Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument.CVE-2000-1122 · Other software · IBM · reported by MITREHigh 7.2
Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infowww-1.ibm.com
Jan 9, 2001Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.CVE-2000-1119 · Other software · IBM · reported by MITREMedium 4.6
Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infowww-1.ibm.com
Jan 9, 2001Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands.CVE-2000-1123 · Other software · IBM · reported by MITREHigh 7.2
Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infowww-1.ibm.com
Jan 9, 2001Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument.CVE-2000-1121 · Other software · IBM · reported by MITREHigh 7.2
Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infowww-1.ibm.com
Jan 9, 2001Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables.CVE-2000-1124 · Other software · IBM · reported by MITREHigh 7.2
Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infowww-1.ibm.com
Dec 10, 2000AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to CVE-2000-1222 · Other software · IBM · reported by MITREHigh 7.2
AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordkb.cert.orgexchange.xforce.ibmcloud.com
Nov 14, 2000netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evideCVE-2000-0873 · Other software · IBM · reported by MITRELow 2.1
netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Jul 5, 2000Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL.CVE-2000-0576 · Other software · Oracle · reported by MITREMedium 5
Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL.
- Product
- Web Listener
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Jun 20, 2000AIX cdmount allows local users to gain root privileges via shell metacharacters.CVE-2000-0466 · Other software · IBM · reported by MITREHigh 7.2
AIX cdmount allows local users to gain root privileges via shell metacharacters.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comxforce.iss.net
May 24, 2000Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems.CVE-2000-0441 · Other software · IBM · reported by MITREMedium 5
Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Apr 26, 2000The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.CVE-2000-0249 · Other software · IBM · reported by MITREHigh 7.2
The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comxforce.iss.net
Jan 27, 2000Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.CVE-2000-1216 · Other software · IBM · reported by MITREHigh 7.2
Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwww-1.ibm.comkb.cert.org
Jan 10, 2000AIX techlibss allows local users to overwrite files via a symlink attack.CVE-2000-0080 · Other software · IBM · reported by MITRELow 2.1
AIX techlibss allows local users to overwrite files via a symlink attack.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Dec 31, 1999lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter.CVE-1999-1117 · Other software · IBM · reported by MITRELow 2.1
lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordciac.llnl.govmarc.info
Dec 31, 1999Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.CVE-1999-1589 · Other software · IBM · reported by MITREHigh 7.2
Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.orgsecurityfocus.com
Nov 10, 1999Denial of service in BIND named via naptr.CVE-1999-0851 · Other software · IBM · reported by MITRELow 2.1
Denial of service in BIND named via naptr.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.caldera.comsunsolve.sun.com
Nov 10, 1999Denial of service in BIND named via malformed SIG records.CVE-1999-0835 · Other software · IBM · reported by MITREHigh 10
Denial of service in BIND named via malformed SIG records.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.caldera.comsecurityfocus.com
Oct 26, 1999genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.CVE-1999-0903 · Other software · IBM · reported by MITREHigh 7.5
genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Sep 30, 1999Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.CVE-1999-1583 · Other software · IBM · reported by MITREHigh 7.2
Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwww-1.ibm.comkb.cert.org
Sep 28, 1999Buffer overflow in AIX ftpd in the libc library.CVE-1999-0789 · Other software · IBM · reported by MITREHigh 10
Buffer overflow in AIX ftpd in the libc library.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordciac.orgsecurityfocus.com
Sep 23, 1999named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone filCVE-1999-1013 · Other software · IBM · reported by MITREHigh 7.2
named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Aug 18, 1999Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.CVE-1999-0745 · Other software · IBM · reported by MITREHigh 10
Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordciac.orgsecurityfocus.com
Aug 11, 1999Denial of service in AIX ptrace system call allows local users to crash the system.CVE-1999-0694 · Other software · IBM · reported by MITRELow 2.1
Denial of service in AIX ptrace system call allows local users to crash the system.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 25, 1999The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.CVE-1999-0803 · Other software · IBM · reported by MITRELow 2.1
The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.
- Product
- AIX Enetwork Firewall
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 6, 1999Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.CVE-1999-1079 · Other software · IBM · reported by MITREMedium 4.6
Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 17, 1999snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is eCVE-1999-1405 · Other software · IBM · reported by MITREHigh 10
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 29, 1999netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable.CVE-1999-1546 · Other software · IBM · reported by MITREMedium 5
netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable.
- Product
- Navio NC Browser
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comexchange.xforce.ibmcloud.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.