CVEs (10,011)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter. |
Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while crontab is running. |
3Debian Matthew SmithRedhat3Debian Linux LinuxMicqApr 16, 2026 Mar 26, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field. |
sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking. |
4Conectiva DebianImmunix+1 more4Debian Linux ImmunixLinux+1 moreApr 16, 2026 Mar 26, 2001 N/A· v4 N/A· v3 2.1 LOW· v2 glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files. |
2Apache Debian2Debian Linux Http ServerApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes t...Show more |
5Caldera DebianImmunix+2 more7Debian Linux ImmunixLinux+4 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 1.2 LOW· v2 inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations. |
4Debian ImmunixMandrakesoft+1 more5Debian Linux ImmunixLinux+2 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 1.2 LOW· v2 privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack. |
4Conectiva DebianMandrakesoft+1 more4Debian Linux LinuxMandrake Linux+1 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed. |
htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack. |
6Conectiva DebianFreebsd+3 more7Debian Linux FreebsdLinux+4 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges. |
3Debian ExmhMandrakesoft4Debian Linux ExmhMandrake Linux+1 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 1.2 LOW· v2 exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file. |
2Debian Sam Lantinga2Debian Linux SplitvtApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands. |
2Debian Sam Lantinga2Debian Linux SplitvtApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument. |
5Debian DigitalNetbsd+2 more5Debian Linux LinuxNetbsd+2 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks. |
5Debian DigitalNetbsd+2 more5Debian Linux LinuxNetbsd+2 moreApr 16, 2026 Mar 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets t...Show more |
dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack. |
fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack. |
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug." |
5Debian MandrakesoftRedhat+2 more5Debian Linux LinuxMandrake Linux+2 moreApr 16, 2026 Nov 14, 2000 N/A· v4 N/A· v3 7.2 HIGH· v2 Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages. |