mandrakesoft kayıtları
mandrakesoft üreticisine ait 151 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 30
- Düzeltme kaydı olan
- %42,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer4
- CWE-399 Resource Management Errors3
- CWE-189 Numeric Errors2
- CWE-20 Improper Input Validation2
- CWE-276 Incorrect Default Permissions1
- CWE-401 Missing Release of Memory after Effective Lifetime1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
151 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
54Planlayın | CVE-2004-0460İstismar yok | Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause isc · dhcpd | Kritik10,0 | — | %45,3 | 6 Ağu 2004 |
49Planlayın | CVE-2004-0932Kavram kanıtı | McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attacca · etrust antivirus | Yüksek7,5 | — | %63,6 | 27 Oca 2005 |
48Planlayın | CVE-2004-0386Kavram kanıtı | Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a lmplayer · mplayer | Kritik10,0 | — | %26,9 | 4 May 2004 |
45Planlayın | CVE-2004-0461İstismar yok | The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, usesisc · dhcpd | Kritik10,0 | — | %16,7 | 6 Ağu 2004 |
45Planlayın | CVE-2000-0844Kavram kanıtı | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackecaldera · openlinux ebuilder · CWE-264 | Kritik10,0 | — | %15,6 | 14 Kas 2000 |
43Planlayın | CVE-2002-0083Kavram kanıtı | Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.immunix · immunix · CWE-193 | Kritik9,8 | — | %14,6 | 15 Mar 2002 |
42Planlayın | CVE-2003-0434Kavram kanıtı | Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metachadobe · acrobat | Yüksek7,5 | — | %40,9 | 24 Tem 2003 |
42Planlayın | CVE-2007-1543İstismar yok | Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allmandrakesoft · mandrake linux | Kritik10,0 | — | %8,0 | 20 Mar 2007 |
42Planlayın | CVE-2004-1187İstismar yok | Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows mplayer · mplayer | Kritik10,0 | — | %5,1 | 10 Oca 2005 |
41Planlayın | CVE-2005-3625İstismar yok | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial libextractor · libextractor · CWE-399 | Kritik10,0 | — | %3,8 | 31 Ara 2005 |
41Planlayın | CVE-2003-0041İstismar yok | Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the clientmit · kerberos ftp client · CWE-78 | Kritik10,0 | — | %3,5 | 19 Şub 2003 |
41Planlayın | CVE-2001-0388İstismar yok | time server daemon timed allows remote attackers to cause a denial of service via malformed packets.freebsd · freebsd | Kritik10,0 | — | %2,7 | 27 Haz 2001 |
41Planlayın | CVE-2000-1042İstismar yok | Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root primandrakesoft · mandrake linux | Kritik10,0 | — | %1,9 | 11 Ara 2000 |
41Planlayın | CVE-2004-1188İstismar yok | The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify tmplayer · mplayer | Kritik10,0 | — | %1,9 | 10 Oca 2005 |
41Planlayın | CVE-2000-1043İstismar yok | Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gmandrakesoft · mandrake linux | Kritik10,0 | — | %1,8 | 11 Ara 2000 |
36İzleyin | CVE-2004-0933Kavram kanıtı | Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure ca · etrust antivirus | Yüksek7,5 | — | %20,8 | 27 Oca 2005 |
36İzleyin | CVE-2004-1096Kavram kanıtı | Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protebroadcom · brightstor arcserve backup | Yüksek7,5 | — | %18,4 | 10 Oca 2005 |
36İzleyin | CVE-2007-1351İstismar yok | Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allx.org · libxfont · CWE-189 | Yüksek8,5 | — | %5,5 | 5 Nis 2007 |
35İzleyin | CVE-2007-4938Kavram kanıtı | Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (appibm · aix · CWE-119 | Yüksek7,6 | — | %16,0 | 18 Eyl 2007 |
35İzleyin | CVE-2004-0935Kavram kanıtı | Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both loarchive zip · archive zip | Yüksek7,5 | — | %15,4 | 27 Oca 2005 |
34İzleyin | CVE-2004-0934Kavram kanıtı | Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to ca · etrust antivirus | Yüksek7,5 | — | %14,9 | 27 Oca 2005 |
34İzleyin | CVE-2004-0937Kavram kanıtı | Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirussophos · sophos anti-virus | Yüksek7,5 | — | %14,9 | 9 Şub 2005 |
34İzleyin | CVE-2004-0936Kavram kanıtı | RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, wca · etrust antivirus | Yüksek7,5 | — | %14,9 | 27 Oca 2005 |
33İzleyin | CVE-2001-0136Kavram kanıtı | Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commanproftpd · proftpd · CWE-401 | Orta5,0 | — | %44,9 | 12 Mar 2001 |
32İzleyin | CVE-2004-0803İstismar yok | Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer ovlibtiff · libtiff | Yüksek7,5 | — | %8,2 | 23 Ara 2004 |
- CVE-2004-046054Planlayın
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause
KritikCVSS 10,0İstismar yokEPSS %45isc · dhcpd6 Ağu 2004
- CVE-2004-093249Planlayın
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attac
YüksekCVSS 7,5Kavram kanıtıEPSS %63ca · etrust antivirus27 Oca 2005
- CVE-2004-038648Planlayın
Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a l
KritikCVSS 10,0Kavram kanıtıEPSS %26mplayer · mplayer4 May 2004
- CVE-2004-046145Planlayın
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses
KritikCVSS 10,0İstismar yokEPSS %16isc · dhcpd6 Ağu 2004
- CVE-2000-084445Planlayın
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attacke
KritikCVSS 10,0Kavram kanıtıEPSS %15caldera · openlinux ebuilder14 Kas 2000
- CVE-2002-008343Planlayın
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
KritikCVSS 9,8Kavram kanıtıEPSS %14immunix · immunix15 Mar 2002
- CVE-2003-043442Planlayın
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metach
YüksekCVSS 7,5Kavram kanıtıEPSS %40adobe · acrobat24 Tem 2003
- CVE-2007-154342Planlayın
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 all
KritikCVSS 10,0İstismar yokEPSS %8mandrakesoft · mandrake linux20 Mar 2007
- CVE-2004-118742Planlayın
Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows
KritikCVSS 10,0İstismar yokEPSS %5mplayer · mplayer10 Oca 2005
- CVE-2005-362541Planlayın
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial
KritikCVSS 10,0İstismar yokEPSS %3libextractor · libextractor31 Ara 2005
- CVE-2003-004141Planlayın
Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client
KritikCVSS 10,0İstismar yokEPSS %3mit · kerberos ftp client19 Şub 2003
- CVE-2001-038841Planlayın
time server daemon timed allows remote attackers to cause a denial of service via malformed packets.
KritikCVSS 10,0İstismar yokEPSS %2freebsd · freebsd27 Haz 2001
- CVE-2000-104241Planlayın
Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root pri
KritikCVSS 10,0İstismar yokEPSS %1mandrakesoft · mandrake linux11 Ara 2000
- CVE-2004-118841Planlayın
The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify t
KritikCVSS 10,0İstismar yokEPSS %1mplayer · mplayer10 Oca 2005
- CVE-2000-104341Planlayın
Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to g
KritikCVSS 10,0İstismar yokEPSS %1mandrakesoft · mandrake linux11 Ara 2000
- CVE-2004-093336İzleyin
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure
YüksekCVSS 7,5Kavram kanıtıEPSS %20ca · etrust antivirus27 Oca 2005
- CVE-2004-109636İzleyin
Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus prote
YüksekCVSS 7,5Kavram kanıtıEPSS %18broadcom · brightstor arcserve backup10 Oca 2005
- CVE-2007-135136İzleyin
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier all
YüksekCVSS 8,5İstismar yokEPSS %5x.org · libxfont5 Nis 2007
- CVE-2007-493835İzleyin
Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (app
YüksekCVSS 7,6Kavram kanıtıEPSS %16ibm · aix18 Eyl 2007
- CVE-2004-093535İzleyin
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both lo
YüksekCVSS 7,5Kavram kanıtıEPSS %15archive zip · archive zip27 Oca 2005
- CVE-2004-093434İzleyin
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to
YüksekCVSS 7,5Kavram kanıtıEPSS %14ca · etrust antivirus27 Oca 2005
- CVE-2004-093734İzleyin
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus
YüksekCVSS 7,5Kavram kanıtıEPSS %14sophos · sophos anti-virus9 Şub 2005
- CVE-2004-093634İzleyin
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, w
YüksekCVSS 7,5Kavram kanıtıEPSS %14ca · etrust antivirus27 Oca 2005
- CVE-2001-013633İzleyin
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE comman
OrtaCVSS 5,0Kavram kanıtıEPSS %44proftpd · proftpd12 Mar 2001
- CVE-2004-080332İzleyin
Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer ov
YüksekCVSS 7,5İstismar yokEPSS %8libtiff · libtiff23 Ara 2004