Avaya
avaya
139 CVEs • 158 products
Products (158)
Click to collapseToggle
Products (158)
Click to collapse
CVEs (139)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
6Avaya ConectivaGentoo+3 more18Converged Communications Server Enterprise LinuxIntuity Audix+15 moreApr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool. |
5Apache AvayaGentoo+2 more8Converged Communications Server Http ServerHttp Server+5 moreApr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 6.4 MEDIUM· v2 The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 6...Show more |
2Avaya Microsoft5Definity One Media Server Ip600 Media ServersModular Messaging Message Storage Server+2 moreApr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header. |
2Avaya Microsoft8Definity One Media Server IeIp600 Media Servers+5 moreApr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters,...Show more |
2Avaya Microsoft5Definity One Media Server Internet Information ServerIp600 Media Servers+2 moreApr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function. |
2Avaya Microsoft11Definity One Media Server Ip600 Media ServersModular Messaging Message Storage Server+8 moreApr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large...Show more |
4Avaya PhpRedhat+1 more8Converged Communications Server Fedora CoreIntegrated Management+5 moreApr 16, 2026 Jul 27, 2004 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web bro...Show more |
6Avaya DebianHp+3 more6Converged Communications Server Debian LinuxHp Ux+3 moreApr 16, 2026 Jul 27, 2004 N/A· v4 N/A· v3 5.1 MEDIUM· v2 The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_l...Show more |
8Apache AppleAvaya+5 more14Apache Mod Digest Apple Communication ManagerHttp Server+11 moreApr 16, 2026 Feb 3, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials. |
2Avaya Hp2Hp Ux Predictive Dialer SystemApr 16, 2026 Dec 31, 2003 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command line argument. |
1Avaya 5Cajun P550 Cajun P550rCajun P580+2 moreApr 16, 2026 Oct 28, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges. |
1Avaya 3Cajun M770 Atm Cajun P130Cajun P330Apr 16, 2026 Jul 8, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 An undocumented SNMP read/write community string ('NoGaH$@!') in Avaya P330, P130, and M770-ATM Cajun products allows remote attackers to gain administrative privileges. |
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe. |
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe. |
2Avaya Kernel7Cvlan Integrated Management SuitInteractive Response+4 moreApr 16, 2026 Dec 31, 2001 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script comm...Show more |
Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length com...Show more |
Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file. |
Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot. |
Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload. |