qnx kayıtları
qnx üreticisine ait 32 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-399 Resource Management Errors1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
32 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2004-1390İstismar yok | Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument tqnx · rtos | Kritik10,0 | — | %7,3 | 31 Ara 2004 |
41Planlayın | CVE-2004-1682İstismar yok | Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifierqnx · rtp | Kritik10,0 | — | %2,4 | 15 Ağu 2004 |
31İzleyin | CVE-2001-0325İstismar yok | Buffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large numqnx · rtp | Yüksek7,5 | — | %2,1 | 3 May 2001 |
28İzleyin | CVE-2002-2041Kavram kanıtı | Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1) a long ABLANG envirqnx · rtos | Yüksek7,2 | — | %1,2 | 31 Ara 2002 |
28İzleyin | CVE-2002-2040Kavram kanıtı | The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges beforqnx · rtos | Yüksek7,2 | — | %1,0 | 31 Ara 2002 |
28İzleyin | CVE-2004-1681Kavram kanıtı | Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allowqnx · photon microgui | Yüksek7,2 | — | %1,0 | 26 Ağu 2004 |
28İzleyin | CVE-2002-2042Kavram kanıtı | ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow localqnx · rtos | Yüksek7,2 | — | %1,0 | 31 Ara 2002 |
28İzleyin | CVE-2006-0623Kavram kanıtı | QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arqnx · rtos | Yüksek7,2 | — | %0,9 | 8 Şub 2006 |
28İzleyin | CVE-2002-1239Kavram kanıtı | QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which alqnx · rtos | Yüksek7,2 | — | %0,9 | 12 Kas 2002 |
28İzleyin | CVE-2005-1528Kavram kanıtı | Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a Lqnx · rtos | Yüksek7,2 | — | %0,8 | 31 Ara 2005 |
28İzleyin | CVE-2000-0250Kavram kanıtı | The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.qnx · qnx | Yüksek7,2 | — | %0,6 | 14 Nis 2000 |
28İzleyin | CVE-2006-0621İstismar yok | Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or qnx · rtos | Yüksek7,2 | — | %0,4 | 8 Şub 2006 |
27İzleyin | CVE-2002-2407İstismar yok | Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Updaqnx · rtos · CWE-264 | Orta6,9 | — | %0,2 | 31 Ara 2002 |
24İzleyin | CVE-2006-0620Kavram kanıtı | Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONTqnx · rtos | Orta6,2 | — | %0,8 | 8 Şub 2006 |
21İzleyin | CVE-2000-0903Kavram kanıtı | Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files qnx · voyager | Orta5,0 | — | %2,9 | 19 Ara 2000 |
21İzleyin | CVE-2000-0904Kavram kanıtı | Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document qnx · voyager | Orta5,0 | — | %2,6 | 19 Ara 2000 |
21İzleyin | CVE-2000-0905İstismar yok | QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system staqnx · voyager | Orta5,0 | — | %2,0 | 19 Ara 2000 |
19İzleyin | CVE-2006-0622İstismar yok | QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service (hang) by supplying a "break *0xb032d59f" command to gdb.qnx · rtos · CWE-399 | Orta4,9 | — | %0,4 | 8 Şub 2006 |
18İzleyin | CVE-2005-3928Kavram kanıtı | Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line argument.qnx · rtos | Orta4,6 | — | %1,1 | 30 Kas 2005 |
18İzleyin | CVE-2002-2120İstismar yok | Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to (1) Watcom or (2) inqnx · rtos | Orta4,6 | — | %0,6 | 31 Ara 2002 |
18İzleyin | CVE-2002-1633İstismar yok | Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex,qnx · qnx rtos | Orta4,6 | — | %0,6 | 31 Ara 2002 |
18İzleyin | CVE-2004-1391İstismar yok | Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifqnx · rtos | Orta4,6 | — | %0,5 | 31 Ara 2004 |
18İzleyin | CVE-2006-0619İstismar yok | Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABLqnx · rtos · CWE-119 | Orta4,6 | — | %0,4 | 8 Şub 2006 |
18İzleyin | CVE-2006-0618İstismar yok | Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifieqnx · neutrino rtos | Orta4,6 | — | %0,4 | 8 Şub 2006 |
18İzleyin | CVE-2005-4082İstismar yok | The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and conqnx · qnx | Orta4,6 | — | %0,3 | 7 Ara 2005 |
- CVE-2004-139042Planlayın
Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument t
KritikCVSS 10,0İstismar yokEPSS %7qnx · rtos31 Ara 2004
- CVE-2004-168241Planlayın
Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifier
KritikCVSS 10,0İstismar yokEPSS %2qnx · rtp15 Ağu 2004
- CVE-2001-032531İzleyin
Buffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large num
YüksekCVSS 7,5İstismar yokEPSS %2qnx · rtp3 May 2001
- CVE-2002-204128İzleyin
Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1) a long ABLANG envir
YüksekCVSS 7,2Kavram kanıtıEPSS %1qnx · rtos31 Ara 2002
- CVE-2002-204028İzleyin
The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges befor
YüksekCVSS 7,2Kavram kanıtıEPSS %1qnx · rtos31 Ara 2002
- CVE-2004-168128İzleyin
Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow
YüksekCVSS 7,2Kavram kanıtıEPSS %1qnx · photon microgui26 Ağu 2004
- CVE-2002-204228İzleyin
ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local
YüksekCVSS 7,2Kavram kanıtıEPSS %1qnx · rtos31 Ara 2002
- CVE-2006-062328İzleyin
QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute ar
YüksekCVSS 7,2Kavram kanıtıEPSS %0qnx · rtos8 Şub 2006
- CVE-2002-123928İzleyin
QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which al
YüksekCVSS 7,2Kavram kanıtıEPSS %0qnx · rtos12 Kas 2002
- CVE-2005-152828İzleyin
Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a L
YüksekCVSS 7,2Kavram kanıtıEPSS %0qnx · rtos31 Ara 2005
- CVE-2000-025028İzleyin
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.
YüksekCVSS 7,2Kavram kanıtıEPSS %0qnx · qnx14 Nis 2000
- CVE-2006-062128İzleyin
Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or
YüksekCVSS 7,2İstismar yokEPSS %0qnx · rtos8 Şub 2006
- CVE-2002-240727İzleyin
Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Upda
OrtaCVSS 6,9İstismar yokEPSS %0qnx · rtos31 Ara 2002
- CVE-2006-062024İzleyin
Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT
OrtaCVSS 6,2Kavram kanıtıEPSS %0qnx · rtos8 Şub 2006
- CVE-2000-090321İzleyin
Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files
OrtaCVSS 5,0Kavram kanıtıEPSS %2qnx · voyager19 Ara 2000
- CVE-2000-090421İzleyin
Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document
OrtaCVSS 5,0Kavram kanıtıEPSS %2qnx · voyager19 Ara 2000
- CVE-2000-090521İzleyin
QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system sta
OrtaCVSS 5,0İstismar yokEPSS %2qnx · voyager19 Ara 2000
- CVE-2006-062219İzleyin
QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service (hang) by supplying a "break *0xb032d59f" command to gdb.
OrtaCVSS 4,9İstismar yokEPSS %0qnx · rtos8 Şub 2006
- CVE-2005-392818İzleyin
Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line argument.
OrtaCVSS 4,6Kavram kanıtıEPSS %1qnx · rtos30 Kas 2005
- CVE-2002-212018İzleyin
Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to (1) Watcom or (2) in
OrtaCVSS 4,6İstismar yokEPSS %0qnx · rtos31 Ara 2002
- CVE-2002-163318İzleyin
Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex,
OrtaCVSS 4,6İstismar yokEPSS %0qnx · qnx rtos31 Ara 2002
- CVE-2004-139118İzleyin
Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modif
OrtaCVSS 4,6İstismar yokEPSS %0qnx · rtos31 Ara 2004
- CVE-2006-061918İzleyin
Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABL
OrtaCVSS 4,6İstismar yokEPSS %0qnx · rtos8 Şub 2006
- CVE-2006-061818İzleyin
Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifie
OrtaCVSS 4,6İstismar yokEPSS %0qnx · neutrino rtos8 Şub 2006
- CVE-2005-408218İzleyin
The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and con
OrtaCVSS 4,6İstismar yokEPSS %0qnx · qnx7 Ara 2005