infodrom records
7 published records for vendor infodrom.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 14.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-193 Off-by-one Error1
- CWE-256 Plaintext Storage of a Password1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2001-0609Proof of concept | Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed idinfodrom · cfingerd · CWE-193 | Critical9.8 | — | 18.2% | Aug 2, 2001 |
39Monitor | CVE-2023-35066No exploit | SQLi in Infodrom Sofwares E-Invoice Approval Systeminfodrom · e-invoice approval system · CWE-89 | Critical9.8 | — | 0.6% | Jul 25, 2023 |
30Monitor | CVE-2023-35067No exploit | Plaintext Storage of a Password in Infodrom Sofwares E-Invoice Approval Systeminfodrom · e-invoice approval system · CWE-256 | High7.5 | — | 0.5% | Jul 25, 2023 |
28Monitor | CVE-2001-0735Proof of concept | Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a infodrom · cfingerd | High7.2 | — | 1.6% | Oct 18, 2001 |
28Monitor | CVE-1999-0708Proof of concept | Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.infodrom · cfingerd | High7.2 | — | 0.8% | Sep 21, 1999 |
28Monitor | CVE-1999-0813No exploit | Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local useinfodrom · cfingerd | High7.2 | — | 0.4% | Aug 10, 1999 |
20Monitor | CVE-1999-0259No exploit | cfingerd lists all users on a system via search.**@target.infodrom · cfingerd | Medium5.0 | — | 1.4% | May 23, 1997 |
- CVE-2001-060944Plan
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed id
CriticalCVSS 9.8Proof of conceptEPSS 18%infodrom · cfingerdAug 2, 2001
- CVE-2023-3506639Monitor
SQLi in Infodrom Sofwares E-Invoice Approval System
CriticalCVSS 9.8No exploitEPSS 0%infodrom · e-invoice approval systemJul 25, 2023
- CVE-2023-3506730Monitor
Plaintext Storage of a Password in Infodrom Sofwares E-Invoice Approval System
HighCVSS 7.5No exploitEPSS 0%infodrom · e-invoice approval systemJul 25, 2023
- CVE-2001-073528Monitor
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a
HighCVSS 7.2Proof of conceptEPSS 1%infodrom · cfingerdOct 18, 2001
- CVE-1999-070828Monitor
Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.
HighCVSS 7.2Proof of conceptEPSS 0%infodrom · cfingerdSep 21, 1999
- CVE-1999-081328Monitor
Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local use
HighCVSS 7.2No exploitEPSS 0%infodrom · cfingerdAug 10, 1999
- CVE-1999-025920Monitor
cfingerd lists all users on a system via search.**@target.
MediumCVSS 5.0No exploitEPSS 1%infodrom · cfingerdMay 23, 1997