← Back

Avaya

avaya

139 CVEs • 158 products

Products (158)

Click to collapse
Toggle
S8300
s8300
S8500
s8500
S8700
s8700
S8100
s8100
Ip Office
ip_office
Intuity Audix
intuity_audix
S3400
s3400
Iq
iq
Argent Office
argent_office
Mn100
mn100
Cvlan
cvlan
Libsafe
libsafe
Sg200
sg200
Sg203
sg203
Sg208
sg208
Sg5
sg5
Vsu
vsu
Ip Soft Phone
ip_soft_phone
S8710
s8710
One X
one-x
Voice Portal
voice_portal
Media Server
media_server
Spaces
spaces
Intuity Lx
intuity_lx
Cajun M770 Atm
cajun_m770-atm
Cajun P130
cajun_p130
Cajun P330
cajun_p330
Cajun P550
cajun_p550
Cajun P550r
cajun_p550r
Cajun P580
cajun_p580
Cajun P880
cajun_p880
Cajun P882
cajun_p882
Wireless Ap 3
wireless_ap-3
Wireless Ap 4
wireless_ap-4
Wireless Ap 5
wireless_ap-5
Wireless Ap 6
wireless_ap-6
Wireless Ap 7
wireless_ap-7
Wireless Ap 8
wireless_ap-8
Vpnremote
vpnremote
Vsu 100
vsu_100
Vsu 10000
vsu_10000
Vsu 2000
vsu_2000
Vsu 7500
vsu_7500
Csu 5000
csu_5000
Voip Handset
voip_handset
Agent Access
agent_access
Callpilot
callpilot
Ip Agent
ip_agent

CVEs (139)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
6Avaya
ConectivaGentoo+3 more
18Converged Communications Server
Enterprise LinuxIntuity Audix+15 more
Apr 16, 2026
Aug 6, 2004
N/A· v4
N/A· v3
7.2 HIGH· v2
Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.
5Apache
AvayaGentoo+2 more
8Converged Communications Server
Http ServerHttp Server+5 more
Apr 16, 2026
Aug 6, 2004
N/A· v4
N/A· v3
6.4 MEDIUM· v2
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 6...Show more
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.Show less
2Avaya
Microsoft
5Definity One Media Server
Ip600 Media ServersModular Messaging Message Storage Server+2 more
Apr 16, 2026
Aug 6, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.
2Avaya
Microsoft
8Definity One Media Server
IeIp600 Media Servers+5 more
Apr 16, 2026
Aug 6, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters,...Show more
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.Show less
2Avaya
Microsoft
5Definity One Media Server
Internet Information ServerIp600 Media Servers+2 more
Apr 16, 2026
Aug 6, 2004
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function.
2Avaya
Microsoft
11Definity One Media Server
Ip600 Media ServersModular Messaging Message Storage Server+8 more
Apr 16, 2026
Aug 6, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large...Show more
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.Show less
4Avaya
PhpRedhat+1 more
8Converged Communications Server
Fedora CoreIntegrated Management+5 more
Apr 16, 2026
Jul 27, 2004
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web bro...Show more
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.Show less
6Avaya
DebianHp+3 more
6Converged Communications Server
Debian LinuxHp Ux+3 more
Apr 16, 2026
Jul 27, 2004
N/A· v4
N/A· v3
5.1 MEDIUM· v2
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_l...Show more
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.Show less
8Apache
AppleAvaya+5 more
14Apache Mod Digest Apple
Communication ManagerHttp Server+11 more
Apr 16, 2026
Feb 3, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
2Avaya
Hp
2Hp Ux
Predictive Dialer System
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command line argument.
1Avaya
5Cajun P550
Cajun P550rCajun P580+2 more
Apr 16, 2026
Oct 28, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges.
1Avaya
3Cajun M770 Atm
Cajun P130Cajun P330
Apr 16, 2026
Jul 8, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
An undocumented SNMP read/write community string ('NoGaH$@!') in Avaya P330, P130, and M770-ATM Cajun products allows remote attackers to gain administrative privileges.
1Avaya
1Libsafe
Apr 16, 2026
Apr 22, 2002
N/A· v4
N/A· v3
4.6 MEDIUM· v2
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
1Avaya
1Libsafe
Apr 16, 2026
Apr 22, 2002
N/A· v4
N/A· v3
4.6 MEDIUM· v2
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.
2Avaya
Kernel
7Cvlan
Integrated Management SuitInteractive Response+4 more
Apr 16, 2026
Dec 31, 2001
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script comm...Show more
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.Show less
1Avaya
1Argent Office
Apr 16, 2026
Aug 7, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length com...Show more
Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length community string.Show less
1Avaya
1Argent Office
Apr 16, 2026
Aug 7, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file.
1Avaya
1Argent Office
Apr 16, 2026
Aug 7, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot.
1Avaya
1Argent Office
Apr 16, 2026
Aug 7, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload.