Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 11 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,762exploited flaws on CISA’s list
34added in the last 30 days
343new WordPress flaws this week
390,080entries in the database

51 results · page 1 of 2

  • Nov 7, 2008Unspecified vulnerability in the AdvFS showfile command in HP Tru64 UNIX 5.1B-3 and 5.1B-4 allows local users to gain privileges via unspecified vectors.CVE-2008-4414 · Other software · HP · reported by MITREHigh 7.2

    Unspecified vulnerability in the AdvFS showfile command in HP Tru64 UNIX 5.1B-3 and 5.1B-4 allows local users to gain privileges via unspecified vectors.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 24, 2007Unspecified vulnerability in the File-on-File Mounting File System (FFM) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows local users to cause a denial of service (sysCVE-2007-6519 · Other software · HP · reported by MITREMedium 4.9

    Unspecified vulnerability in the File-on-File Mounting File System (FFM) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows local users to cause a denial of service (system crash) via unspecified vectors.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 21, 2007Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to identify valid users via unspecified vectors, CVE-2007-2791 · Other software · HP · reported by MITREHigh 10

    Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to identify valid users via unspecified vectors, probably related to timing attacks and AuthInteractiveFailureRandomTimeout.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 9, 2007Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges via a large amount of data in the environmeCVE-2007-2553 · Other software · HP · reported by MITREHigh 7.2

    Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges via a large amount of data in the environment, as demonstrated by a long environment variable.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 7, 2007The ps (/usr/ucb/ps) command on HP Tru64 UNIX 5.1 1885 allows local users to obtain sensitive information, including environment variables of arbitrary processeCVE-2007-0805 · Other software · HP · reported by MITRELow 2.1

    The ps (/usr/ucb/ps) command on HP Tru64 UNIX 5.1 1885 allows local users to obtain sensitive information, including environment variables of arbitrary processes, via the "auxewww" argument, a similar issue to CVE-1999-1587.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 10, 2006Buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX 4.0F PK8, 4.0G PK4, and 5.1A PK6 allows local users to gain root privileges via a lonCVE-2006-6418 · Other software · HP · reported by MITREHigh 7.2

    Buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX 4.0F PK8, 4.0G PK4, and 5.1A PK6 allows local users to gain root privileges via a long PTHREAD_CONFIG environment variable.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 23, 2006Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a (aka aCVE-2006-5452 · Other software · HP · reported by MITREMedium 4.6

    Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a (aka attachment) argument.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 17, 2006Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, when running on HP Tru64 UNIX, has unknown impact and remote attack vectors related to HTTPS and SSL, aCVE-2006-5349 · Websites & servers · Oracle · reported by MITREHigh 10

    Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, when running on HP Tru64 UNIX, has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS07.

    Product
    Http Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 13, 2006HP System Management Homepage (SMH) 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enCVE-2006-1774 · Other software · HP · reported by MITREHigh 7.5

    HP System Management Homepage (SMH) 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL.

    Product
    Compaqhttpserver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 20, 2005Unspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions up to HP Tru64 UNIX 5.1B-3, and HP-UX B.11.00, B.11.04, B.11.11CVE-2005-2993 · Other software · HP · reported by MITRELow 1.7

    Unspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions up to HP Tru64 UNIX 5.1B-3, and HP-UX B.11.00, B.11.04, B.11.11, and B.11.23, allows remote authenticated users to cause a denial of service (hang).

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 2, 2005The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java VirtCVE-2005-0223 · Other software · SUN · reported by MITREMedium 5

    The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang) via object deserialization.

    Product
    RTE
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 9, 2005Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of service (process crash) CVE-2005-0719 · Other software · HP · reported by MITRELow 2.1

    Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of service (process crash) for processes such as nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, srconfig, strsetup, trpt, netstat, and xntpd.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2004Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Internet Key Exchange) with Certificates, allCVE-2004-2678 · Other software · HP · reported by MITREMedium 5.1

    Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Internet Key Exchange) with Certificates, allows remote attackers to gain privileges via unknown attack vectors.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2003Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unknown attack vectors.CVE-2003-1496 · Other software · HP · reported by MITREHigh 10

    Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unknown attack vectors. NOTE: due to lack of details in the vendor advisory, it is not clear whether this is the same issue as CVE-1999-0840.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 20, 2003ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote aCVE-2003-0724 · Other software · Compaq · reported by MITREHigh 7.5

    ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote attackers to gain privileges.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 12, 2003The (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root privileges via a symlCVE-2003-0221 · Other software · HP · reported by MITREHigh 7.2

    The (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root privileges via a symlink attack.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 22, 2003Unknown vulnerability in the ARP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to "take over packets destined for another host" and cCVE-2002-1475 · Other software · HP · reported by MITREMedium 5

    Unknown vulnerability in the ARP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to "take over packets destined for another host" and cause a denial of service.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 22, 2003Unknown vulnerability or vulnerabilities in TCP/IP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to cause a denial of service.CVE-2002-1474 · Other software · HP · reported by MITREMedium 5

    Unknown vulnerability or vulnerabilities in TCP/IP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to cause a denial of service.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Unknown vulnerability in inetd in HP Tru64 Unix 4.0f through 5.1a allows remote attackers to cause a denial of service via unknown attack vectors.CVE-2002-1784 · Other software · HP · reported by MITREMedium 5

    Unknown vulnerability in inetd in HP Tru64 Unix 4.0f through 5.1a allows remote attackers to cause a denial of service via unknown attack vectors.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running on Tru64 UNIX 4.0G and 4.0F allows remoteCVE-2002-2265 · Other software · Open Source Internet Solutions · reported by MITREMedium 6.4

    Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running on Tru64 UNIX 4.0G and 4.0F allows remote attackers to gain access to arbitrary files or gain privileges via unknown attack vectors.

    Product
    Open Source Internet Solutions
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unCVE-2002-2264 · Other software · HP · reported by MITREHigh 10

    Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors. NOTE: this might be the same issue as CVE-2002-2185, but there are insufficient details to be certain.

    Product
    Secure Web Server For Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4) rpc.lockd, (5) snmp, (6) ttdbserverd, and possibCVE-2002-2071 · Other software · Compaq · reported by MITREMedium 5

    Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4) rpc.lockd, (5) snmp, (6) ttdbserverd, and possibly other services via a TCP SYN scan, as demonstrated using nmap.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets.CVE-2002-2004 · Other software · Compaq · reported by MITREMedium 5

    portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dump via certain network packets generated by nmap.CVE-2002-2003 · Other software · Compaq · reported by MITREMedium 5

    ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dump via certain network packets generated by nmap.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variablCVE-2002-2002 · Other software · Compaq · reported by MITREHigh 7.5

    Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argumeCVE-2002-1617 · Other software · HP · reported by MITREHigh 7.2

    Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 28, 2002Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to read arbitrary files.CVE-2002-1202 · Other software · Compaq · reported by MITREHigh 7.5

    Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to read arbitrary files.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 4, 2002Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.CVE-2002-1129 · Other software · Compaq · reported by MITREHigh 7.2

    Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 4, 2002Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable.CVE-2002-1128 · Other software · Digital · reported by MITREHigh 7.2

    Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable.

    Product
    OSF 1
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 4, 2002Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter.CVE-2002-1127 · Other software · Digital · reported by MITREHigh 7.2

    Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter.

    Product
    OSF 1
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 13, 2002Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader.CVE-2002-1615 · Other software · HP · reported by MITREHigh 7.2

    Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 13, 2002Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.CVE-2002-1612 · Other software · HP · reported by MITREHigh 7.2

    Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 10, 2002Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.CVE-2002-1613 · Other software · HP · reported by MITREHigh 7.2

    Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 9, 2002Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.CVE-2002-1614 · Other software · HP · reported by MITREHigh 7.2

    Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 5, 2002Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423.CVE-2002-0093 · Other software · Compaq · reported by MITREHigh 7.2

    Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 2, 2002Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) CVE-2002-1605 · Other software · HP · reported by MITREHigh 7.5

    Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 2, 2002Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csCVE-2002-1604 · Other software · HP · reported by MITREHigh 7.5

    Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 31, 2002Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.CVE-2002-1608 · Other software · HP · reported by MITREMedium 4.6

    Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 31, 2002Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.CVE-2002-1607 · Other software · HP · reported by MITREMedium 4.6

    Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 30, 2002Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.CVE-2002-1609 · Other software · HP · reported by MITREMedium 4.6

    Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 30, 2002Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.CVE-2002-1611 · Other software · HP · reported by MITREMedium 4.6

    Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 30, 2002Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service.CVE-2002-1610 · Other software · HP · reported by MITRELow 2.1

    Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 30, 2002Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lCVE-2002-1606 · Other software · HP · reported by MITREMedium 4.6

    Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 12, 2002Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument.CVE-2002-0816 · Other software · Compaq · reported by MITREHigh 7.2

    Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 1, 2002Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn,CVE-2002-1616 · Other software · HP · reported by MITREHigh 7.2

    Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 10, 2001Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument.CVE-2001-1093 · Other software · Compaq · reported by MITREHigh 7.2

    Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 10, 2001msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.CVE-2001-1092 · Other software · Compaq · reported by MITRELow 2.1

    msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 23, 2001inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service (network connection loss) by causing one of the services handled by inetd to core dCVE-2001-1435 · Other software · Compaq · reported by MITREMedium 5

    inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service (network connection loss) by causing one of the services handled by inetd to core dump during startup, which causes inetd to stop accepting connections to all of its services.

    Product
    Tru64
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.CVE-2000-1031 · Other software · HP · reported by MITREMedium 4.6

    Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jun 11, 1999The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.CVE-1999-0713 · Other software · CDE · reported by MITREHigh 7.2

    The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.

    Product
    CDE
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.