Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
292 results · page 6 of 6
Oct 18, 2001OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the "from" option aCVE-2001-1380 · Other software · Openbsd · reported by MITREHigh 7.5
OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddistro.conectiva.com.brdownload.immunix.org
Sep 27, 2001The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entereCVE-2001-1382 · Other software · Openbsd · reported by MITREMedium 5
The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2001libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which alloCVE-2001-1029 · Other software · Openbsd · reported by MITRELow 2.1
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org
Aug 22, 2001The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the folloCVE-2001-0572 · Other software · Openbsd · reported by MITREHigh 7.5
The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comdistro.conectiva.com.br
Aug 17, 2001fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intendCVE-2001-1145 · Other software · Freebsd · reported by MITREMedium 6.2
fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.
- Product
- Freebsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.freebsd.orgarchives.neohapsis.com
Aug 14, 2001OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.CVE-2001-0529 · Other software · Openbsd · reported by MITREHigh 7.2
OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.netbsd.orgarchives.neohapsis.com
Jun 27, 2001Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allowCVE-2001-0361 · Other software · Openbsd · reported by MITREMedium 4
Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS#1 version 1.5.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.freebsd.orgmarc.info
Jun 27, 2001readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitiCVE-2001-0378 · Other software · Openbsd · reported by MITRELow 2.1
readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.openbsd.orgosvdb.org
Jun 19, 2001OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypaCVE-2001-1459 · Other software · Openbsd · reported by MITREHigh 7.5
OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2001Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to CVE-2001-1047 · Other software · Openbsd · reported by MITRELow 1.2
Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2) calling dup2 on a file descriptor in one process, then setting the descriptor to NULL via a close in another process that is created via rfork.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orgsecurityfocus.com
May 3, 2001The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate tCVE-2001-0268 · Other software · Netbsd · reported by MITREHigh 7.2
The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table (LDT) with a target that specifies an arbitrary kernel address.
- Product
- Netbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
May 3, 2001Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrarCVE-2001-0284 · Other software · Openbsd · reported by MITREHigh 10
Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header (AH) IPv4 option.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2001IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.CVE-2000-0310 · Other software · Openbsd · reported by MITREMedium 5
IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2001CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.CVE-2001-0144 · Other software · Openbsd · reported by MITREHigh 10
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.inforazor.bindview.com
Mar 12, 2001Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.CVE-2000-0313 · Other software · Openbsd · reported by MITREMedium 4.6
Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2001cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.CVE-2000-0312 · Other software · Openbsd · reported by MITREHigh 7.2
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenbsd.orgopenbsd.org
Mar 12, 2001The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.CVE-2000-0309 · Other software · Openbsd · reported by MITRELow 2.1
The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 9, 2001OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display anCVE-2000-1169 · Other software · Openbsd · reported by MITREHigh 7.5
OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Dec 19, 2000OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.CVE-2000-0914 · Other software · Openbsd · reported by MITREMedium 5
OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org
Dec 19, 2000The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service.CVE-2000-0962 · Other software · Openbsd · reported by MITREMedium 5
The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org
Dec 19, 2000Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a ..CVE-2000-0992 · Other software · Openbsd · reported by MITREMedium 5
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comfrontal2.mandriva.com
Dec 19, 2000Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD envCVE-2000-0994 · Other software · Openbsd · reported by MITREHigh 7.2
Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.openbsd.orgmarc.info
Dec 19, 2000Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed nCVE-2000-0995 · Other software · Openbsd · reported by MITREHigh 7.2
Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed name.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.openbsd.orgosvdb.org
Dec 19, 2000Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformeCVE-2000-0996 · Other software · Openbsd · reported by MITREHigh 7.2
Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.openbsd.orgosvdb.org
Dec 19, 2000Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges.CVE-2000-0997 · Other software · Netbsd · reported by MITREHigh 7.2
Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges.
- Product
- Netbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.openbsd.orgsecurityfocus.com
Dec 11, 2000Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that conCVE-2000-1010 · Other software · Openbsd · reported by MITREHigh 10
Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 11, 2000Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges.CVE-2000-0999 · Other software · Openbsd · reported by MITREHigh 10
Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.openbsd.orgftp.openbsd.org
Dec 11, 2000Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formattiCVE-2000-1004 · Other software · Openbsd · reported by MITREMedium 4.6
Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 7, 2000FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function CVE-2000-0574 · Other software · Openbsd · reported by MITREMedium 5
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.
- Product
- Ftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.netbsd.orgarchives.neohapsis.com
Jun 8, 2000OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command tCVE-2000-0525 · Other software · Openbsd · reported by MITREHigh 10
OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comopenbsd.org
Feb 24, 2000The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.CVE-2000-0217 · Other software · Openbsd · reported by MITREMedium 5.1
The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Feb 11, 2000The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password databCVE-2000-0143 · Other software · Openbsd · reported by MITREMedium 4.6
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Dec 14, 1999An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.CVE-1999-1010 · Other software · Openbsd · reported by MITRELow 2.1
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 5, 1999FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a CVE-2000-0489 · Other software · Freebsd · reported by MITRELow 2.1
FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.
- Product
- Freebsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Aug 12, 1999Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.CVE-1999-0724 · Other software · Openbsd · reported by MITREMedium 4.6
Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 6, 1999A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.CVE-1999-0727 · Other software · Openbsd · reported by MITREMedium 5
A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 3, 1999OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.CVE-1999-0703 · Other software · Bsdi · reported by MITRELow 3.6
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
- Product
- BSD OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 22, 1999Denial of service in "poll" in OpenBSD.CVE-1999-0481 · Other software · Openbsd · reported by MITREMedium 5
Denial of service in "poll" in OpenBSD.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 21, 1999OpenBSD kernel crash through TSS handling, as caused by the crashme program.CVE-1999-0482 · Other software · Openbsd · reported by MITREMedium 5
OpenBSD kernel crash through TSS handling, as caused by the crashme program.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 25, 1999OpenBSD crash using nlink value in FFS and EXT2FS filesystems.CVE-1999-0483 · Other software · Openbsd · reported by MITRELow 2.1
OpenBSD crash using nlink value in FFS and EXT2FS filesystems.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 23, 1999Buffer overflow in OpenBSD ping.CVE-1999-0484 · Other software · Openbsd · reported by MITRELow 2.1
Buffer overflow in OpenBSD ping.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 19, 1999Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.CVE-1999-0485 · Other software · Openbsd · reported by MITRELow 2.6
Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.
- Product
- Openbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.