Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (525 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-1999-0696 2 Hp, Sun 3 Hp-ux, Solaris, Sunos 2025-04-03 N/A
Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).
CVE-1999-0707 1 Hp 2 Hp-ux, Visualize Conference Ftp 2025-04-03 N/A
The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.
CVE-1999-0779 1 Hp 1 Hp-ux 2025-04-03 N/A
Denial of service in HP-UX SharedX recserv program.
CVE-1999-1136 1 Hp 2 Hp-ux, Mpe Ix 2025-04-03 N/A
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems.
CVE-1999-1160 1 Hp 1 Hp-ux 2025-04-03 N/A
Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges.
CVE-1999-1247 1 Hp 1 Hp-ux 2025-04-03 N/A
Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.
CVE-1999-1249 1 Hp 1 Hp-ux 2025-04-03 N/A
movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.
CVE-2000-0078 1 Hp 1 Hp-ux 2025-04-03 N/A
The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command.
CVE-2000-0083 1 Hp 1 Hp-ux 2025-04-03 N/A
HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges.
CVE-2000-0251 1 Hp 2 Hp-ux, Vvos 2025-04-03 N/A
HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.
CVE-2000-0414 1 Hp 2 Hp-ux, Vvos 2025-04-03 N/A
Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.
CVE-2000-0468 1 Hp 1 Hp-ux 2025-04-03 N/A
man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.
CVE-2000-0515 1 Hp 1 Hp-ux 2025-04-03 N/A
The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges.
CVE-2000-0730 1 Hp 1 Hp-ux 2025-04-03 N/A
Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.
CVE-2005-4316 1 Hp 1 Hp-ux 2025-04-03 N/A
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.
CVE-2005-3779 1 Hp 1 Hp-ux 2025-04-03 N/A
Unspecified vulnerability in xterm for HP-UX 11.00, 11.11, and 11.23 allows local users to gain privileges via unknown vectors.
CVE-2002-1794 1 Hp 2 Hp-ux, Ldap-ux Integration 2025-04-03 N/A
Unknown vulnerability in pam_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands with privileges of other users.
CVE-2002-2138 1 Hp 2 Advanced Server 9000, Hp-ux 2025-04-03 N/A
RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, allows remote attackers to cause a denial of service (panic) via a malformed UDP packet on port 139.
CVE-2004-0965 1 Hp 1 Hp-ux 2025-04-03 N/A
stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.
CVE-2002-1409 1 Hp 1 Hp-ux 2025-04-03 N/A
ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service (data page fault panic) via "an incorrect reference to thread register state."