unix kayıtları
unix üreticisine ait 40 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 8
- Düzeltme kaydı olan
- %22,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-264 Permissions, Privileges, and Access Controls12
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-16 Configuration1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
40 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
56Planlayın | CVE-2009-3958Kavram kanıtı | Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Managadobe · acrobat · CWE-119 | Kritik10,0 | — | %52,5 | 13 Oca 2010 |
43Planlayın | CVE-2009-3959İstismar yok | Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows readobe · acrobat · CWE-189 | Kritik10,0 | — | %11,4 | 13 Oca 2010 |
43Planlayın | CVE-2009-3954İstismar yok | The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execuadobe · acrobat · CWE-94 | Kritik10,0 | — | %9,0 | 13 Oca 2010 |
42Planlayın | CVE-2009-3956İstismar yok | The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhancadobe · acrobat · CWE-16 | Kritik10,0 | — | %7,7 | 13 Oca 2010 |
42Planlayın | CVE-2011-4369İstismar yok | Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x throughadobe · acrobat | Kritik10,0 | — | %7,5 | 16 Ara 2011 |
42Planlayın | CVE-2009-1251İstismar yok | Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allowsunix · unix · CWE-119 | Kritik10,0 | — | %6,4 | 8 Nis 2009 |
41Planlayın | CVE-2007-6047İstismar yok | Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers to execute arbitrary commands as the DB2 iibm · db2 universal database · CWE-264 | Kritik10,0 | — | %2,0 | 20 Kas 2007 |
41Planlayın | CVE-2007-6045İstismar yok | Unspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors.ibm · db2 universal database | Kritik10,0 | — | %1,8 | 20 Kas 2007 |
41Planlayın | CVE-2007-6048İstismar yok | IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attack vectors.ibm · db2 universal database · CWE-264 | Kritik10,0 | — | %1,7 | 20 Kas 2007 |
40Planlayın | CVE-2007-6051İstismar yok | IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impaibm · db2 universal database · CWE-264 | Kritik10,0 | — | %1,5 | 20 Kas 2007 |
39İzleyin | CVE-2008-4815İstismar yok | Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via unix · unix · CWE-264 | Yüksek7,5 | — | %29,1 | 5 Kas 2008 |
37İzleyin | CVE-2007-6053İstismar yok | IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an unibm · db2 universal database · CWE-399 | Kritik9,3 | — | %1,2 | 20 Kas 2007 |
32İzleyin | CVE-2007-3073İstismar yok | Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers to read arbitrary fileunix · unix | Yüksek7,8 | — | %1,6 | 6 Haz 2007 |
31İzleyin | CVE-2007-6052İstismar yok | IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a denial of service (diviibm · db2 universal database | Yüksek7,8 | — | %1,3 | 20 Kas 2007 |
28İzleyin | CVE-2010-2203İstismar yok | Adobe Reader and Acrobat 9.x before 9.3.3 on UNIX allow attackers to execute arbitrary code or cause a denial of service (memory corruption)adobe · acrobat · CWE-119 | Orta6,8 | — | %3,7 | 30 Haz 2010 |
28İzleyin | CVE-2007-6049İstismar yok | Unspecified vulnerability in the SSL LOAD GSKIT action in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, involving aibm · db2 universal database · CWE-264 | Yüksek7,2 | — | %0,3 | 20 Kas 2007 |
28İzleyin | CVE-2007-6050İstismar yok | Unspecified vulnerability in DB2LICD in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, related to creation of an "inibm · db2 universal database · CWE-264 | Yüksek7,2 | — | %0,3 | 20 Kas 2007 |
28İzleyin | CVE-2007-6046İstismar yok | Unspecified vulnerability in unspecified setuid programs in IBM DB2 UDB 9.1 before Fixpak 4 allows local users to have an unknown impact.ibm · db2 universal database | Yüksek7,2 | — | %0,3 | 20 Kas 2007 |
27İzleyin | CVE-2010-2594İstismar yok | Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earliintersect alliance · snare agent · CWE-352 | Orta6,8 | — | %1,4 | 2 Tem 2010 |
22İzleyin | CVE-2010-2791İstismar yok | mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when readingapache · http server · CWE-200 | Orta5,0 | — | %8,2 | 5 Ağu 2010 |
21İzleyin | CVE-2009-3957İstismar yok | Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to cause a denial of service (NULadobe · acrobat | Orta5,0 | — | %4,7 | 13 Oca 2010 |
21İzleyin | CVE-2003-1456Kavram kanıtı | Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vectolinux · linux kernel · CWE-20 | Orta5,0 | — | %3,3 | 31 Ara 2003 |
21İzleyin | CVE-2009-2166Kavram kanıtı | Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files vunix · unix · CWE-22 | Orta5,0 | — | %3,1 | 22 Haz 2009 |
21İzleyin | CVE-1999-0377İstismar yok | Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through munix · unix | Orta5,0 | — | %1,8 | 22 Şub 1999 |
20İzleyin | CVE-2003-1454İstismar yok | Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie invision power services · invision board | Orta5,0 | — | %1,2 | 31 Ara 2003 |
- CVE-2009-395856Planlayın
Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manag
KritikCVSS 10,0Kavram kanıtıEPSS %52adobe · acrobat13 Oca 2010
- CVE-2009-395943Planlayın
Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows re
KritikCVSS 10,0İstismar yokEPSS %11adobe · acrobat13 Oca 2010
- CVE-2009-395443Planlayın
The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execu
KritikCVSS 10,0İstismar yokEPSS %9adobe · acrobat13 Oca 2010
- CVE-2009-395642Planlayın
The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhanc
KritikCVSS 10,0İstismar yokEPSS %7adobe · acrobat13 Oca 2010
- CVE-2011-436942Planlayın
Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through
KritikCVSS 10,0İstismar yokEPSS %7adobe · acrobat16 Ara 2011
- CVE-2009-125142Planlayın
Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows
KritikCVSS 10,0İstismar yokEPSS %6unix · unix8 Nis 2009
- CVE-2007-604741Planlayın
Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers to execute arbitrary commands as the DB2 i
KritikCVSS 10,0İstismar yokEPSS %2ibm · db2 universal database20 Kas 2007
- CVE-2007-604541Planlayın
Unspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors.
KritikCVSS 10,0İstismar yokEPSS %1ibm · db2 universal database20 Kas 2007
- CVE-2007-604841Planlayın
IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attack vectors.
KritikCVSS 10,0İstismar yokEPSS %1ibm · db2 universal database20 Kas 2007
- CVE-2007-605140Planlayın
IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impa
KritikCVSS 10,0İstismar yokEPSS %1ibm · db2 universal database20 Kas 2007
- CVE-2008-481539İzleyin
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via
YüksekCVSS 7,5İstismar yokEPSS %29unix · unix5 Kas 2008
- CVE-2007-605337İzleyin
IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an un
KritikCVSS 9,3İstismar yokEPSS %1ibm · db2 universal database20 Kas 2007
- CVE-2007-307332İzleyin
Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers to read arbitrary file
YüksekCVSS 7,8İstismar yokEPSS %1unix · unix6 Haz 2007
- CVE-2007-605231İzleyin
IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a denial of service (divi
YüksekCVSS 7,8İstismar yokEPSS %1ibm · db2 universal database20 Kas 2007
- CVE-2010-220328İzleyin
Adobe Reader and Acrobat 9.x before 9.3.3 on UNIX allow attackers to execute arbitrary code or cause a denial of service (memory corruption)
OrtaCVSS 6,8İstismar yokEPSS %3adobe · acrobat30 Haz 2010
- CVE-2007-604928İzleyin
Unspecified vulnerability in the SSL LOAD GSKIT action in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, involving a
YüksekCVSS 7,2İstismar yokEPSS %0ibm · db2 universal database20 Kas 2007
- CVE-2007-605028İzleyin
Unspecified vulnerability in DB2LICD in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, related to creation of an "in
YüksekCVSS 7,2İstismar yokEPSS %0ibm · db2 universal database20 Kas 2007
- CVE-2007-604628İzleyin
Unspecified vulnerability in unspecified setuid programs in IBM DB2 UDB 9.1 before Fixpak 4 allows local users to have an unknown impact.
YüksekCVSS 7,2İstismar yokEPSS %0ibm · db2 universal database20 Kas 2007
- CVE-2010-259427İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earli
OrtaCVSS 6,8İstismar yokEPSS %1intersect alliance · snare agent2 Tem 2010
- CVE-2010-279122İzleyin
mod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading
OrtaCVSS 5,0İstismar yokEPSS %8apache · http server5 Ağu 2010
- CVE-2009-395721İzleyin
Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to cause a denial of service (NUL
OrtaCVSS 5,0İstismar yokEPSS %4adobe · acrobat13 Oca 2010
- CVE-2003-145621İzleyin
Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vecto
OrtaCVSS 5,0Kavram kanıtıEPSS %3linux · linux kernel31 Ara 2003
- CVE-2009-216621İzleyin
Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files v
OrtaCVSS 5,0Kavram kanıtıEPSS %3unix · unix22 Haz 2009
- CVE-1999-037721İzleyin
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through m
OrtaCVSS 5,0İstismar yokEPSS %1unix · unix22 Şub 1999
- CVE-2003-145420İzleyin
Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie
OrtaCVSS 5,0İstismar yokEPSS %1invision power services · invision board31 Ara 2003