Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities.
Max CVSS
10.0
EPSS Score
0.48%
Published
2003-01-07
Updated
2008-09-05
Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, with unknown impact, based on an invalid integer input which is processed as a different data type, as demonstrated using cash_out(2).
Max CVSS
10.0
EPSS Score
0.46%
Published
2003-01-17
Updated
2016-10-18
The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests.
Max CVSS
7.5
EPSS Score
0.48%
Published
2003-01-07
Updated
2008-09-05
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.
Max CVSS
7.5
EPSS Score
0.99%
Published
2003-01-07
Updated
2024-02-09
Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious ldapfilter.conf file that is not properly handled by getfilter functions, (3) a malicious ldaptemplates.conf that causes an overflow in libldap, (4) a certain access control list that causes an overflow in slapd, or (5) a long generated filename for logging rejected replication requests.
Max CVSS
7.5
EPSS Score
5.83%
Published
2003-01-02
Updated
2017-07-11
OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges.
Max CVSS
7.5
EPSS Score
0.23%
Published
2003-01-02
Updated
2008-09-10
Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument.
Max CVSS
7.5
EPSS Score
6.83%
Published
2003-01-17
Updated
2017-10-10
Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses.
Max CVSS
7.5
EPSS Score
0.97%
Published
2003-01-17
Updated
2016-10-18
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.
Max CVSS
7.5
EPSS Score
0.26%
Published
2003-01-17
Updated
2019-03-25
Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or execute arbitrary code.
Max CVSS
7.5
EPSS Score
1.28%
Published
2003-01-17
Updated
2018-05-03
Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.
Max CVSS
7.5
EPSS Score
0.04%
Published
2003-01-17
Updated
2017-07-11
Heap-based buffer overflow in the repeat() function for PostgreSQL before 7.2.2 allows attackers to execute arbitrary code by causing repeat() to generate a large string.
Max CVSS
7.5
EPSS Score
2.92%
Published
2003-01-17
Updated
2016-10-18
The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 do not include filenames for backup copies of the localconfig file that are made from editors such as vi and Emacs, which could allow remote attackers to obtain a database password by directly accessing the backup file.
Max CVSS
7.5
EPSS Score
0.82%
Published
2003-01-17
Updated
2016-10-18
Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database activities and possibly gain privileges via certain database functions such as check_prefs() in db.pgsql, as demonstrated using mailbox.php3.
Max CVSS
7.5
EPSS Score
0.71%
Published
2003-01-17
Updated
2016-10-18
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
Max CVSS
7.5
EPSS Score
13.47%
Published
2003-01-17
Updated
2017-07-11
Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).
Max CVSS
7.5
EPSS Score
0.40%
Published
2003-01-17
Updated
2016-10-18
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
Max CVSS
7.2
EPSS Score
0.06%
Published
2003-01-02
Updated
2018-05-03
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
Max CVSS
7.2
EPSS Score
0.06%
Published
2003-01-17
Updated
2017-10-10
Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial of service and possibly execute arbitrary code, possibly as a result of an integer overflow.
Max CVSS
6.5
EPSS Score
0.31%
Published
2003-01-17
Updated
2008-09-10
The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via multiple connections to the server.
Max CVSS
5.0
EPSS Score
1.30%
Published
2003-01-07
Updated
2008-09-05
The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via long or malformed ICMP packets.
Max CVSS
5.0
EPSS Score
1.44%
Published
2003-01-07
Updated
2008-09-05
The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbitrary files via a crafted URL.
Max CVSS
5.0
EPSS Score
0.50%
Published
2003-01-17
Updated
2017-10-10
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
Max CVSS
5.0
EPSS Score
2.33%
Published
2003-01-17
Updated
2019-04-30
Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service (memory exhaustion) via a large number of requests to the application, which causes libmcrypt to dynamically load algorithms via libtool.
Max CVSS
5.0
EPSS Score
0.38%
Published
2003-01-17
Updated
2016-10-18
Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (temporary FTP server hang), which affects other active mode FTP clients.
Max CVSS
5.0
EPSS Score
10.71%
Published
2003-01-27
Updated
2018-10-30
36 vulnerabilities found
1 2
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!