Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
888 results · page 18 of 18
Feb 16, 2000The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.CVE-2000-0154 · Other software · SCO · reported by MITRELow 1.2
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsco.comsecurityfocus.com
Feb 15, 2000ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.CVE-2000-0224 · Other software · SCO · reported by MITRELow 1.2
ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Feb 8, 2000Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.CVE-2000-0215 · Other software · SCO · reported by MITREHigh 7.2
Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 27, 2000Buffer overflow in SCO scohelp program allows remote attackers to execute commands.CVE-2000-0130 · Other software · SCO · reported by MITREHigh 7.2
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 18, 2000Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.CVE-2000-0099 · Other software · SCO · reported by MITREHigh 7.2
Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 4, 2000Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.CVE-1999-0894 · Other software · Redhat · reported by MITREHigh 10
Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Dec 31, 1999Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.CVE-1999-1307 · Other software · Novell · reported by MITREHigh 7.2
Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordciac.llnl.govdataguard.no
Dec 31, 1999NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges bCVE-1999-1382 · Other software · Novell · reported by MITREHigh 7.2
NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program.
- Product
- Netware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 30, 1999Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.CVE-2000-0003 · Other software · SCO · reported by MITREHigh 10
Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 1999UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.CVE-2000-0029 · Other software · SCO · reported by MITREMedium 4.6
UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Dec 21, 1999Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.CVE-2000-0026 · Other software · Windowmaker · reported by MITREHigh 10
Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.
- Product
- Wmmon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 4, 1999UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.CVE-1999-0988 · Other software · SCO · reported by MITREHigh 7.2
UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Dec 3, 1999Buffer overflow in UnixWare xauto program allows local users to gain root privilege.CVE-1999-0866 · Other software · SCO · reported by MITREHigh 7.2
Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 1999The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.CVE-1999-0825 · Other software · SCO · reported by MITRELow 3.6
The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 3, 1999UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.CVE-1999-0864 · Other software · SCO · reported by MITREHigh 7.2
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 2, 1999UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.CVE-1999-0828 · Other software · SCO · reported by MITRELow 3.6
UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Nov 25, 1999Buffer overflow in SCO su program allows local users to gain root access via a long username.CVE-1999-0845 · Other software · SCO · reported by MITREHigh 7.2
Buffer overflow in SCO su program allows local users to gain root access via a long username.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Nov 9, 1999Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a non-linear attack whicCVE-1999-1111 · Other software · Immunix · reported by MITREHigh 7.5
Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a non-linear attack which directly modifies a pointer to a return address instead of using a buffer overflow to reach the return address entry itself.
- Product
- Stackguard
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Nov 1, 1999Buffer overflow in SCO UnixWare Xsco command via a long argument.CVE-1999-0830 · Other software · SCO · reported by MITREHigh 7.2
Buffer overflow in SCO UnixWare Xsco command via a long argument.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Nov 1, 1999runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary CVE-1999-1517 · Other software · Freebsd · reported by MITREHigh 7.2
runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary files by providing the target files to runtar.
- Product
- Freebsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Oct 5, 1999Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b cCVE-1999-1357 · Other software · Netscape · reported by MITREHigh 7.5
Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.
- Product
- Communicator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 4, 1999UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.CVE-1999-0942 · Other software · SCO · reported by MITREHigh 7.2
UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Sep 17, 1999The SSH authentication agent follows symlinks via a UNIX domain socket.CVE-1999-0787 · Other software · SSH · reported by MITRELow 2.1
The SSH authentication agent follows symlinks via a UNIX domain socket.
- Product
- SSH
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 19, 1999QMS CrownNet Unix Utilities for 2060 allows root to log on without a password.CVE-1999-0741 · Other software · QMS · reported by MITREHigh 10
QMS CrownNet Unix Utilities for 2060 allows root to log on without a password.
- Product
- Crownnet Unix Utilities
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Aug 3, 1999OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.CVE-1999-0703 · Other software · Bsdi · reported by MITRELow 3.6
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
- Product
- BSD OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 11, 1999The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.CVE-1999-0713 · Other software · CDE · reported by MITREHigh 7.2
The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.
- Product
- CDE
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 29, 1999The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.CVE-1999-0711 · Other software · Oracle · reported by MITREMedium 4.6
The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.
- Product
- Oracle8i
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 22, 1999Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections CVE-1999-0377 · Other software · Unix · reported by MITREMedium 5
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
- Product
- Unix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecuritytracker.comsecuritytracker.com
Feb 19, 1999Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.CVE-1999-0406 · Other software · Digital · reported by MITREHigh 7.2
Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.
- Product
- Unix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 15, 1999Vulnerability in Compaq Tru64 UNIX edauth command.CVE-1999-0714 · Other software · Digital · reported by MITRELow 2.1
Vulnerability in Compaq Tru64 UNIX edauth command.
- Product
- Unix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 1999Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.CVE-1999-0358 · Other software · Digital · reported by MITREHigh 7.2
Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.
- Product
- Unix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordciac.orgsecurityfocus.com
Jan 27, 1999Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to CVE-1999-1450 · Other software · SCO · reported by MITREHigh 7.5
Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.
- Product
- Openserver
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.sco.comftp.sco.com
Jan 25, 1999Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument.CVE-1999-1458 · Other software · Digital · reported by MITREHigh 7.2
Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument.
- Product
- Unix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp1.support.compaq.comsecurityfocus.com
Jan 1, 1999A Unix account with a name other than "root" has UID 0, i.e.CVE-1999-0555 · Other software · reported by MITREHigh 10
A Unix account with a name other than "root" has UID 0, i.e. root privileges.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 1, 1999A trust relationship exists between two Unix hosts.CVE-1999-0539 · Other software · reported by MITREHigh 10
A trust relationship exists between two Unix hosts.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 1, 1999An unrestricted remote trust relationship for Unix systems has been set up, e.g.CVE-1999-0515 · Other software · reported by MITREHigh 10
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 1, 1999A system-critical Unix file or directory has inappropriate permissions.CVE-1999-0559 · Other software · reported by MITREHigh 10
A system-critical Unix file or directory has inappropriate permissions.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 1, 1999Two or more Unix accounts have the same UID.CVE-1999-0556 · Other software · reported by MITREHigh 10
Two or more Unix accounts have the same UID.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.