Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6,068

Export CSV
CVE-2002-0272

security flaw

Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request.

CVSS 2.0 · 10.0 Critical EPSS 5.5% KEV · Not listed
Vendors
Mpg321 Redhat
Products
Mpg321 Linux
CVE-2001-0170

security flaw

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Conectiva Debian Immunix and 1 more
Products
Linux Debian Linux Immunix and 1 more
CVE-2002-0185

security flaw

mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module.

CVSS 2.0 · 7.5 High EPSS 4.2% KEV · Not listed
Vendors
Apache Redhat
Products
Mod Python Linux
CVE-2002-0184

security flaw

Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Debian Redhat Sudo Project
Products
Debian Linux Linux Powertools and 1 more
CVE-2000-0248

security flaw

The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.

CVSS 2.0 · 10.0 Critical EPSS 73.7% KEV · Not listed
Vendors
Redhat
Products
Linux
CVE-2002-0180

security flaw

Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname.

CVSS 2.0 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Bradford Barrett Redhat
Products
Webalizer Enterprise Linux Linux
CVE-2003-0859

security flaw

The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu Intel Quagga and 2 more
Products
Glibc Zebra Ia64 and 5 more
CVE-2001-0169

security flaw

When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Mandrakesoft Redhat Trustix and 1 more
Products
Mandrake Linux Mandrake Linux Corporate Server Linux and 2 more
CVE-2002-0178

security flaw

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Gnu Redhat
Products
Sharutils Enterprise Linux Linux
CVE-2002-0169

security flaw

The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Docbook Stylesheets Docbook Utils Linux