Записи unix
40 опубликованных записей вендора unix.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 8
- С записью об исправлении
- 22,5 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-264 Permissions, Privileges, and Access Controls12
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-16 Configuration1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
40 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
56В плане | CVE-2009-3958Proof of concept | Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Managadobe · acrobat · CWE-119 | Критическая10,0 | — | 52,5 % | 13 янв. 2010 г. |
43В плане | CVE-2009-3959Эксплойта нет | Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows readobe · acrobat · CWE-189 | Критическая10,0 | — | 11,4 % | 13 янв. 2010 г. |
43В плане | CVE-2009-3954Эксплойта нет | The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execuadobe · acrobat · CWE-94 | Критическая10,0 | — | 9,0 % | 13 янв. 2010 г. |
42В плане | CVE-2009-3956Эксплойта нет | The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhancadobe · acrobat · CWE-16 | Критическая10,0 | — | 7,7 % | 13 янв. 2010 г. |
42В плане | CVE-2011-4369Эксплойта нет | Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x throughadobe · acrobat | Критическая10,0 | — | 7,5 % | 16 дек. 2011 г. |
42В плане | CVE-2009-1251Эксплойта нет | Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allowsunix · unix · CWE-119 | Критическая10,0 | — | 6,4 % | 8 апр. 2009 г. |
41В плане | CVE-2007-6047Эксплойта нет | Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers to execute arbitrary commands as the DB2 iibm · db2 universal database · CWE-264 | Критическая10,0 | — | 2,0 % | 20 нояб. 2007 г. |
41В плане | CVE-2007-6045Эксплойта нет | Unspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors.ibm · db2 universal database | Критическая10,0 | — | 1,8 % | 20 нояб. 2007 г. |
41В плане | CVE-2007-6048Эксплойта нет | IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attack vectors.ibm · db2 universal database · CWE-264 | Критическая10,0 | — | 1,7 % | 20 нояб. 2007 г. |
40В плане | CVE-2007-6051Эксплойта нет | IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impaibm · db2 universal database · CWE-264 | Критическая10,0 | — | 1,5 % | 20 нояб. 2007 г. |
39Наблюдать | CVE-2008-4815Эксплойта нет | Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via unix · unix · CWE-264 | Высокая7,5 | — | 29,1 % | 5 нояб. 2008 г. |
37Наблюдать | CVE-2007-6053Эксплойта нет | IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an unibm · db2 universal database · CWE-399 | Критическая9,3 | — | 1,2 % | 20 нояб. 2007 г. |
32Наблюдать | CVE-2007-3073Эксплойта нет | Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers to read arbitrary fileunix · unix | Высокая7,8 | — | 1,6 % | 6 июн. 2007 г. |
31Наблюдать | CVE-2007-6052Эксплойта нет | IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a denial of service (diviibm · db2 universal database | Высокая7,8 | — | 1,3 % | 20 нояб. 2007 г. |
28Наблюдать | CVE-2010-2203Эксплойта нет | Adobe Reader and Acrobat 9.x before 9.3.3 on UNIX allow attackers to execute arbitrary code or cause a denial of service (memory corruption)adobe · acrobat · CWE-119 | Средняя6,8 | — | 3,7 % | 30 июн. 2010 г. |
28Наблюдать | CVE-2007-6049Эксплойта нет | Unspecified vulnerability in the SSL LOAD GSKIT action in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, involving aibm · db2 universal database · CWE-264 | Высокая7,2 | — | 0,3 % | 20 нояб. 2007 г. |
28Наблюдать | CVE-2007-6050Эксплойта нет | Unspecified vulnerability in DB2LICD in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, related to creation of an "inibm · db2 universal database · CWE-264 | Высокая7,2 | — | 0,3 % | 20 нояб. 2007 г. |
28Наблюдать | CVE-2007-6046Эксплойта нет | Unspecified vulnerability in unspecified setuid programs in IBM DB2 UDB 9.1 before Fixpak 4 allows local users to have an unknown impact.ibm · db2 universal database | Высокая7,2 | — | 0,3 % | 20 нояб. 2007 г. |
27Наблюдать | CVE-2010-2594Эксплойта нет | Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earliintersect alliance · snare agent · CWE-352 | Средняя6,8 | — | 1,4 % | 2 июл. 2010 г. |
22Наблюдать | CVE-2010-2791Эксплойта нет | mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when readingapache · http server · CWE-200 | Средняя5,0 | — | 8,2 % | 5 авг. 2010 г. |
21Наблюдать | CVE-2009-3957Эксплойта нет | Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to cause a denial of service (NULadobe · acrobat | Средняя5,0 | — | 4,7 % | 13 янв. 2010 г. |
21Наблюдать | CVE-2003-1456Proof of concept | Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vectolinux · linux kernel · CWE-20 | Средняя5,0 | — | 3,3 % | 31 дек. 2003 г. |
21Наблюдать | CVE-2009-2166Proof of concept | Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files vunix · unix · CWE-22 | Средняя5,0 | — | 3,1 % | 22 июн. 2009 г. |
21Наблюдать | CVE-1999-0377Эксплойта нет | Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through munix · unix | Средняя5,0 | — | 1,8 % | 22 февр. 1999 г. |
20Наблюдать | CVE-2003-1454Эксплойта нет | Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie invision power services · invision board | Средняя5,0 | — | 1,2 % | 31 дек. 2003 г. |
- CVE-2009-395856В плане
Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manag
КритическаяCVSS 10,0Proof of conceptEPSS 52 %adobe · acrobat13 янв. 2010 г.
- CVE-2009-395943В плане
Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows re
КритическаяCVSS 10,0Эксплойта нетEPSS 11 %adobe · acrobat13 янв. 2010 г.
- CVE-2009-395443В плане
The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execu
КритическаяCVSS 10,0Эксплойта нетEPSS 9 %adobe · acrobat13 янв. 2010 г.
- CVE-2009-395642В плане
The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhanc
КритическаяCVSS 10,0Эксплойта нетEPSS 7 %adobe · acrobat13 янв. 2010 г.
- CVE-2011-436942В плане
Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through
КритическаяCVSS 10,0Эксплойта нетEPSS 7 %adobe · acrobat16 дек. 2011 г.
- CVE-2009-125142В плане
Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows
КритическаяCVSS 10,0Эксплойта нетEPSS 6 %unix · unix8 апр. 2009 г.
- CVE-2007-604741В плане
Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers to execute arbitrary commands as the DB2 i
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %ibm · db2 universal database20 нояб. 2007 г.
- CVE-2007-604541В плане
Unspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors.
КритическаяCVSS 10,0Эксплойта нетEPSS 1 %ibm · db2 universal database20 нояб. 2007 г.
- CVE-2007-604841В плане
IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attack vectors.
КритическаяCVSS 10,0Эксплойта нетEPSS 1 %ibm · db2 universal database20 нояб. 2007 г.
- CVE-2007-605140В плане
IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impa
КритическаяCVSS 10,0Эксплойта нетEPSS 1 %ibm · db2 universal database20 нояб. 2007 г.
- CVE-2008-481539Наблюдать
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via
ВысокаяCVSS 7,5Эксплойта нетEPSS 29 %unix · unix5 нояб. 2008 г.
- CVE-2007-605337Наблюдать
IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an un
КритическаяCVSS 9,3Эксплойта нетEPSS 1 %ibm · db2 universal database20 нояб. 2007 г.
- CVE-2007-307332Наблюдать
Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers to read arbitrary file
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %unix · unix6 июн. 2007 г.
- CVE-2007-605231Наблюдать
IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a denial of service (divi
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %ibm · db2 universal database20 нояб. 2007 г.
- CVE-2010-220328Наблюдать
Adobe Reader and Acrobat 9.x before 9.3.3 on UNIX allow attackers to execute arbitrary code or cause a denial of service (memory corruption)
СредняяCVSS 6,8Эксплойта нетEPSS 3 %adobe · acrobat30 июн. 2010 г.
- CVE-2007-604928Наблюдать
Unspecified vulnerability in the SSL LOAD GSKIT action in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, involving a
ВысокаяCVSS 7,2Эксплойта нетEPSS 0 %ibm · db2 universal database20 нояб. 2007 г.
- CVE-2007-605028Наблюдать
Unspecified vulnerability in DB2LICD in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, related to creation of an "in
ВысокаяCVSS 7,2Эксплойта нетEPSS 0 %ibm · db2 universal database20 нояб. 2007 г.
- CVE-2007-604628Наблюдать
Unspecified vulnerability in unspecified setuid programs in IBM DB2 UDB 9.1 before Fixpak 4 allows local users to have an unknown impact.
ВысокаяCVSS 7,2Эксплойта нетEPSS 0 %ibm · db2 universal database20 нояб. 2007 г.
- CVE-2010-259427Наблюдать
Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earli
СредняяCVSS 6,8Эксплойта нетEPSS 1 %intersect alliance · snare agent2 июл. 2010 г.
- CVE-2010-279122Наблюдать
mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading
СредняяCVSS 5,0Эксплойта нетEPSS 8 %apache · http server5 авг. 2010 г.
- CVE-2009-395721Наблюдать
Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to cause a denial of service (NUL
СредняяCVSS 5,0Эксплойта нетEPSS 4 %adobe · acrobat13 янв. 2010 г.
- CVE-2003-145621Наблюдать
Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vecto
СредняяCVSS 5,0Proof of conceptEPSS 3 %linux · linux kernel31 дек. 2003 г.
- CVE-2009-216621Наблюдать
Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files v
СредняяCVSS 5,0Proof of conceptEPSS 3 %unix · unix22 июн. 2009 г.
- CVE-1999-037721Наблюдать
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through m
СредняяCVSS 5,0Эксплойта нетEPSS 1 %unix · unix22 февр. 1999 г.
- CVE-2003-145420Наблюдать
Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie
СредняяCVSS 5,0Эксплойта нетEPSS 1 %invision power services · invision board31 дек. 2003 г.