| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys. |
| A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc. |
| A system does not present an appropriate legal message or warning to a user who is accessing it. |
| The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in. |
| An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information. |
| quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges. |
| An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information. |
| An incorrect configuration of the Webcart CGI program could disclose private information. |
| A version of finger is running that exposes valid user information to any entity on the network. |
| The rexec service is running. |
| The rsh/rlogin service is running. |
| The OS/2 or POSIX subsystem in NT is enabled. |
| The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names. |
| Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics. |
| The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve. |
| Denial of service in AIX ptrace system call allows local users to crash the system. |
| Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd). |
| Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux. |
| Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability. |
| The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root. |