İçeriğe atla
Noroxi

NetBSD kayıtları

netbsd üreticisine ait 180 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
5 · %2,8
Pre-auth RCE
22
Düzeltme kaydı olan
%15,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 20
  4. 21
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

180 kayıt
  • CVE-2024-6387
    62Bu hafta

    Openssh: regresshion - race condition in ssh allows rce/dos

    YüksekCVSS 8,1Kavram kanıtıEPSS %100

    sonicwall · sma 6200 firmware1 Tem 2024

  • CVE-2003-0466
    62Bu hafta

    Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code,

    KritikCVSS 9,8Kavram kanıtıEPSS %78

    redhat · wu ftpd27 Ağu 2003

  • CVE-2002-1337
    62Bu hafta

    Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related t

    KritikCVSS 10,0Kavram kanıtıEPSS %73

    sendmail · sendmail7 Mar 2003

  • CVE-2003-0694
    60Bu hafta

    The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using

    KritikCVSS 10,0SilahlaştırılmışEPSS %66

    sendmail · advanced message server6 Eki 2003

  • CVE-1999-0046
    56Planlayın

    Buffer overflow of rlogin program using TERM environmental variable.

    KritikCVSS 10,0Kavram kanıtıEPSS %52

    bsdi · bsd os6 Şub 1997

  • CVE-2001-0554
    52Planlayın

    Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a

    KritikCVSS 10,0Kavram kanıtıEPSS %39

    mit · kerberos14 Ağu 2001

  • CVE-2014-8517
    51Planlayın

    The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 t

    YüksekCVSS 7,5SilahlaştırılmışEPSS %69

    netbsd · netbsd17 Kas 2014

  • CVE-1999-0016
    49Planlayın

    Land IP denial of service.

    OrtaCVSS 5,0Kavram kanıtıEPSS %96

    cisco · ios1 Ara 1997

  • CVE-1999-0009
    49Planlayın

    Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

    KritikCVSS 10,0Kavram kanıtıEPSS %29

    data general · dg ux8 Nis 1998

  • CVE-2001-0247
    46Planlayın

    Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} se

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    mit · kerberos 518 Haz 2001

  • CVE-2017-1000375
    45Planlayın

    NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily ma

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    netbsd · netbsd19 Haz 2017

  • CVE-2001-0053
    45Planlayın

    One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.

    KritikCVSS 10,0Kavram kanıtıEPSS %18

    david madore · ftpd-bsd12 Şub 2001

  • CVE-2004-0230
    44Planlayın

    TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connectio

    OrtaCVSS 5,0Kavram kanıtıEPSS %80

    juniper · junos18 Ağu 2004

  • CVE-2006-4304
    44Planlayın

    Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before

    KritikCVSS 10,0İstismar yokEPSS %12

    freebsd · freebsd23 Ağu 2006

  • CVE-2014-3566
    43Planlayın

    The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man

    DüşükCVSS 3,4SilahlaştırılmışEPSS %100

    openssl · openssl14 Eki 2014

  • CVE-2006-6652
    42Planlayın

    Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple

    KritikCVSS 9,0Kavram kanıtıEPSS %20

    apple · mac os x19 Ara 2006

  • CVE-1999-0513
    41Planlayın

    ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

    OrtaCVSS 5,0Kavram kanıtıEPSS %71

    digital · unix5 Oca 1998

  • CVE-2003-0001
    41Planlayın

    Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain inf

    OrtaCVSS 5,0Kavram kanıtıEPSS %70

    freebsd · freebsd17 Oca 2003

  • CVE-2012-0217
    40Planlayın

    The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Orac

    YüksekCVSS 7,2SilahlaştırılmışEPSS %40

    xen · xen12 Haz 2012

  • CVE-2011-2895
    40Planlayın

    The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress

    KritikCVSS 9,3İstismar yokEPSS %8

    x · libxfont19 Ağu 2011

  • CVE-2017-1000378
    40Planlayın

    The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes

    KritikCVSS 9,8İstismar yokEPSS %4

    netbsd · netbsd19 Haz 2017

  • CVE-2017-1000374
    40Planlayın

    A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution us

    KritikCVSS 9,8İstismar yokEPSS %3

    netbsd · netbsd19 Haz 2017

  • CVE-2015-8212
    40Planlayın

    CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via

    KritikCVSS 9,8İstismar yokEPSS %3

    netbsd · netbsd19 Oca 2017

  • CVE-1999-0323
    40Planlayın

    FreeBSD mmap function allows users to modify append-only or immutable files.

    KritikCVSS 10,0İstismar yokEPSS %1

    freebsd · freebsd20 Şub 1998

  • CVE-2008-2476
    39İzleyin

    The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 F

    KritikCVSS 9,3İstismar yokEPSS %7

    force10 · ftos3 Eki 2008