Vulnerabilities > Linux > Critical

DATE CVE VULNERABILITY TITLE RISK
2010-01-12 CVE-2009-4538 Remote Security Bypass vulnerability in Linux Kernel
drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537.
network
low complexity
linux debian
critical
10.0
2008-12-18 CVE-2008-5499 Code Injection vulnerability in Adobe Flash Player FOR Linux
Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file.
network
adobe linux CWE-94
critical
9.3
2008-08-06 CVE-2008-3496 Classic Buffer Overflow vulnerability in Linux Kernel
Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux (V4L) implementation in the Linux kernel before 2.6.26.1 has unknown impact and attack vectors.
network
low complexity
linux CWE-120
critical
10.0
2007-11-20 CVE-2007-6053 Resource Management Errors vulnerability in IBM DB2 Universal Database
IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an unknown impact involving "memory corruption." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
network
linux microsoft unix ibm CWE-399
critical
9.3
2007-11-20 CVE-2007-6051 Permissions, Privileges, and Access Controls vulnerability in IBM DB2 Universal Database
IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impact.
network
low complexity
linux microsoft unix ibm CWE-264
critical
10.0
2007-11-20 CVE-2007-6048 Permissions, Privileges, and Access Controls vulnerability in IBM DB2 Universal Database
IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attack vectors.
network
low complexity
linux microsoft unix ibm CWE-264
critical
10.0
2007-11-20 CVE-2007-6047 Permissions, Privileges, and Access Controls vulnerability in IBM DB2 Universal Database
Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers to execute arbitrary commands as the DB2 instance owner, related to invocation of TPUT by DB2DART.
network
low complexity
linux microsoft unix ibm CWE-264
critical
10.0
2007-11-20 CVE-2007-6045 Privilege Escalation vulnerability in IBM DB2
Unspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors.
network
low complexity
linux microsoft unix ibm
critical
10.0
2007-07-15 CVE-2007-3794 Buffer Overflow vulnerability in Multiple Hitachi Products GIF Image
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.
network
low complexity
microsoft hitachi linux hp ibm sun
critical
10.0
2007-05-17 CVE-2007-2736 Remote File Include vulnerability in Achievo 1.1.0
PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter.
network
low complexity
apple hp ibm linux microsoft santa-cruz-operation sun windriver achievo
critical
10.0