Overview 66 matches · 1 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 11 public PoC · 0 EPSS ≥ 0.5
66matches
1in Waratek scope1.5%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
11public PoC16.7%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
1
1.5%
Outside Waratek scope
0
0.0%
Not applicable
65
98.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
66
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
10
15.2%
Proof of concept only
9
13.6%
Forecast only
0
0.0%
No public exploit
47
71.2%
split by
peak 10 / year
19993
Not applicable3
High3
not blocked3
Working exploit published2
No public exploit1
20001
Not applicable1
High1
not blocked1
No public exploit1
20011
Not applicable1
High1
not blocked1
No public exploit1
20022
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20031
Not applicable1
High1
not blocked1
Working exploit published1
20040
20051
Not applicable1
High1
not blocked1
No public exploit1
20061
Not applicable1
High1
not blocked1
No public exploit1
20072
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20082
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20094
Not applicable4
High4
not blocked4
Working exploit published1
No public exploit3
20100
20110
20121
Not applicable1
High1
not blocked1
Working exploit published1
20130
20142
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20151
Not applicable1
High1
not blocked1
Working exploit published1
20160
20170
20182
Not applicable2
High2
not blocked2
No public exploit2
20197
Not applicable7
High7
not blocked7
No public exploit7
20203
Not applicable3
High3
not blocked3
No public exploit3
202110
Not applicable10
High10
not blocked10
No public exploit10
20224
Not applicable4
High4
not blocked4
No public exploit4
20238
Not applicable8
High8
not blocked8
Proof of concept only7
No public exploit1
20242
Not applicable2
High2
not blocked2
No public exploit2
20255
Not applicable5
High5
not blocked5
Proof of concept only1
No public exploit4
20263
No exploit published1
Not applicable2
High3
not blocked3
Proof of concept only1
No public exploit2
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-59641 | High | 2026-08-03 | No exploit published | No public exploit | In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcmail-fips and bcjmail-fips 1.0.7 (1.0.X series), 2.0.7 (2.0.X series) and 2.1.7 (2.1.X series). |
| CVE-2019-25684 | High | 2026-04-05 | Not applicable | Proof of concept only | OpenDocMan 1.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'where' parameter. Attackers can send GET requests to search.php with malicious SQL payloads in the 'where' parameter to extract sensitive database information. |
| CVE-2025-63946 | High | 2026-02-23 | Not applicable | No public exploit | A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition. |
| CVE-2025-8486 | High | 2025-10-15 | Not applicable | No public exploit | A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges. |
| CVE-2025-10581 | High | 2025-10-15 | Not applicable | No public exploit | A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges. |
| CVE-2025-8098 | High | 2025-08-18 | Not applicable | No public exploit | An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges. |
| CVE-2025-2502 | High | 2025-05-30 | Not applicable | Proof of concept only | An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges. |
| CVE-2025-2501 | High | 2025-05-30 | Not applicable | No public exploit | An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges. |
| CVE-2019-6198 | High | 2024-07-31 | Not applicable | No public exploit | A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges. |
| CVE-2019-6197 | High | 2024-07-31 | Not applicable | No public exploit | A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges. |
| CVE-2023-46603 | High | 2023-10-23 | Not applicable | No public exploit | In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in libSampleICC.a. |
| CVE-2023-46602 | High | 2023-10-23 | Not applicable | Proof of concept only | In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp in libIccXML.a. |
| CVE-2023-37463 | High | 2023-07-13 | Not applicable | Proof of concept only | cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. These vulnerabilities have been patched in 0.29.0.gfm.12. |
| CVE-2023-26485 | High | 2023-03-31 | Not applicable | Proof of concept only | cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when parsing text which leads with either large numbers of `_` characters. This issue has been addressed in version 0.29.0.gfm.10. Users are advised to upgrade. Users unable to upgrade should validate that their input comes from trusted sources. ### Impact A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. ### Proof of concept ``` $ ~/cmark-gfm$ python3 -c 'pad = "_" * 100000; print(pad + "." + pad, end="")' | time ./build/src/cmark-gfm --to plaintext ``` Increasing the number 10000 in the above commands causes the running time to increase quadratically. ### Patches This vulnerability have been patched in 0.29.0.gfm.10. ### Note on cmark and cmark-gfm XXX: TBD [cmark-gfm](https://github.com/github/cmark-gfm) is a fork of [cmark](https://github.com/commonmark/cmark) that adds the GitHub Flavored Markdown extensions. The two codebases have diverged over time, but share a common core. These bugs affect both `cmark` and `cmark-gfm`. ### Credit We would like to thank @gravypod for reporting this vulnerability. ### References https://en.wikipedia.org/wiki/Time_complexity ### For more information If you have any questions or comments about this advisory: * Open an issue in [github/cmark-gfm](https://github.com/github/cmark-gfm) |
| CVE-2023-24824 | High | 2023-03-31 | Not applicable | Proof of concept only | cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when parsing text which leads with either large numbers of `>` or `-` characters. This issue has been addressed in version 0.29.0.gfm.10. Users are advised to upgrade. Users unable to upgrade should validate that their input comes from trusted sources. |
| CVE-2023-22486 | High | 2023-01-26 | Not applicable | Proof of concept only | cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a polynomial time complexity issue in handle_close_bracket that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7. |
| CVE-2023-22484 | High | 2023-01-23 | Not applicable | Proof of concept only | cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to a polynomial time complexity issue in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7. |
| CVE-2023-22483 | High | 2023-01-23 | Not applicable | Proof of concept only | cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to several polynomial time complexity issues in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. Various commands, when piped to cmark-gfm with large values, cause the running time to increase quadratically. These vulnerabilities have been patched in version 0.29.0.gfm.7. |
| CVE-2022-39209 | High | 2022-09-15 | Not applicable | No public exploit | cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior to 0.29.0.gfm.6 a polynomial time complexity issue in cmark-gfm's autolink extension may lead to unbounded resource exhaustion and subsequent denial of service. Users may verify the patch by running `python3 -c 'print("![l"* 100000 + "\n")' | ./cmark-gfm -e autolink`, which will resource exhaust on unpatched cmark-gfm but render correctly on patched cmark-gfm. This vulnerability has been patched in 0.29.0.gfm.6. Users are advised to upgrade. Users unable to upgrade should disable the use of the autolink extension. |
| CVE-2022-1513 | High | 2022-08-23 | Not applicable | No public exploit | A potential vulnerability was reported in Lenovo PCManager prior to version 5.0.10.4191 that may allow code execution when visiting a specially crafted website. |
| CVE-2022-0192 | High | 2022-04-22 | Not applicable | No public exploit | A DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow privilege escalation. |
| CVE-2021-46247 | High | 2022-02-17 | Not applicable | No public exploit | The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from ASUS CMAX6000 v1.02.00. |
| CVE-2021-21906 | High | 2021-12-22 | Not applicable | No public exploit | Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is used at various locations. The Garrett iC Module exposes an authenticated CLI over TCP port 6877. This interface is used by a secondary GUI client, called “CMA Connect”, to interact with the iC Module on behalf of the user. Every time a user submits a password to the CLI password prompt, the buffer containing their input is passed as the password parameter to the checkPassword function. |
| CVE-2021-21905 | High | 2021-12-22 | Not applicable | No public exploit | Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is used at various locations. The Garrett iC Module exposes an authenticated CLI over TCP port 6877. This interface is used by a secondary GUI client, called “CMA Connect”, to interact with the iC Module on behalf of the user. After a client successfully authenticates, they can send plaintext commands to manipulate the device. |
| CVE-2021-21904 | High | 2021-12-22 | Not applicable | No public exploit | A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Version 5.0. An attacker can provide malicious input to trigger this vulnerability |
| CVE-2021-21902 | High | 2021-12-22 | Not applicable | No public exploit | An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detectors iC Module CMA Version 5.0. A properly-timed network connection can lead to authentication bypass via session hijacking. An attacker can send a sequence of requests to trigger this vulnerability. |
| CVE-2021-21901 | High | 2021-12-22 | Not applicable | No public exploit | A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to memcpy. An attacker can send a malicious packet to trigger this vulnerability. |
| CVE-2021-3550 | High | 2021-07-16 | Not applicable | No public exploit | A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation. |
| CVE-2021-3464 | High | 2021-04-27 | Not applicable | No public exploit | A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow privilege escalation. |
| CVE-2021-29098 | High | 2021-03-25 | Not applicable | No public exploit | Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. |
| CVE-2021-29097 | High | 2021-03-25 | Not applicable | No public exploit | Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. |
| CVE-2021-29096 | High | 2021-03-25 | Not applicable | No public exploit | A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. |
| CVE-2020-8351 | High | 2020-11-30 | Not applicable | No public exploit | A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an authenticated user to execute code with elevated privileges. |
| CVE-2020-1817 | High | 2020-04-30 | Not applicable | No public exploit | Huawei PCManager with versions earlier than 10.0.1.36 has a privilege escalation vulnerability. Due to improper permission management of specific files, local attackers with low permissions can inject commands to exploit this vulnerability. Successful exploit may cause privilege escalation. |
| CVE-2020-1844 | High | 2020-02-28 | Not applicable | No public exploit | PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability in Huawei PCManager products. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. |
| CVE-2019-17188 | High | 2019-10-04 | Not applicable | No public exploit | An unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in Fecshop FecMall 2.3.4. An attacker can bypass a front-end restriction and upload PHP code to the webserver, by providing image data and the image/jpeg content type, with a .php extension. This occurs because the code relies on the getimagesize function. |
| CVE-2019-5223 | High | 2019-08-13 | Not applicable | No public exploit | PCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of the software does not perform a validation of user-mode data properly, successful exploit could result in malicious code execution. |
| CVE-2019-5238 | High | 2019-08-08 | Not applicable | No public exploit | Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have a code execution vulnerability. Successful exploitation may cause the attacker to execute code and read/write information. |
| CVE-2019-5237 | High | 2019-08-08 | Not applicable | No public exploit | Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have a code execution vulnerability. Successful exploitation may cause the attacker to execute code and read/write information. |
| CVE-2019-5242 | High | 2019-06-06 | Not applicable | No public exploit | There is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to execute malicious code and read/write memory. |
| CVE-2019-5241 | High | 2019-06-06 | Not applicable | No public exploit | There is a privilege escalation vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. |
| CVE-2019-9686 | High | 2019-03-11 | Not applicable | No public exploit | pacman before 5.1.3 allows directory traversal when installing a remote package via a specified URL "pacman -U <url>" due to an unsanitized file name received from a Content-Disposition header. pacman renames the downloaded package file to match the name given in this header. However, pacman did not sanitize this name, which may contain slashes, before calling rename(). A malicious server (or a network MitM if downloading over HTTP) can send a Content-Disposition header to make pacman place the file anywhere in the filesystem, potentially leading to arbitrary root code execution. Notably, this bypasses pacman's package signature checking. This occurs in curl_download_internal in lib/libalpm/dload.c. |
| CVE-2016-10642 | High | 2018-06-04 | Not applicable | No public exploit | cmake installs the cmake x86 linux binaries. cmake downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server. |
| CVE-2014-1946 | High | 2018-04-10 | Not applicable | No public exploit | OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and assign administrative privileges to themselves via a crafted request to signup.php. |
| CVE-2012-1665 | High | 2015-05-20 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow (1) remote attackers to execute arbitrary SQL commands via the username parameter in a process action to admin/login.php or (2) remote administrators to execute arbitrary SQL commands via the status parameter to admin/stats_monthly_sales.php or (3) country parameter in a process action to admin/create_account_process.php. |
| CVE-2014-3618 | High | 2014-09-08 | Not applicable | No public exploit | Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes." |
| CVE-2014-1945 | High | 2014-03-09 | Not applicable | Working exploit published | SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the add_value parameter. |
| CVE-2012-1661 | High | 2012-07-12 | Not applicable | Working exploit published | ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map (.mxd) file. |
| CVE-2009-3801 | High | 2009-10-27 | Not applicable | No public exploit | SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmpass (aka Password) parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. |
| CVE-2009-3788 | High | 2009-10-26 | Not applicable | No public exploit | SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmuser (aka Username) parameter. |
| CVE-2008-6922 | High | 2009-08-10 | Not applicable | Working exploit published | Multiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote attackers to execute arbitrary code via a long argument to the (1) CreateUserPath, (2) Logout, (3) DeleteMailByUID, (4) MoveToInbox, (5) MoveToFolder, (6) DeleteMailEx, (7) GetMailDataEx, (8) SetReplySign, (9) SetForwardSign, and (10) SetReadSign methods, which are not properly handled by (a) the POP3 Class ActiveX control (CMailCom.POP3); or a long argument to the (11) AddAttach, (12) SetSubject, (13) SetBcc, (14) SetBody, (15) SetCc, (16) SetFrom, (17) SetTo, and (18) SetFromUID methods, which are not properly handled by the Class ActiveX control (CMailCOM.SMTP), as demonstrated via the indexOfMail parameter to mwmail.asp. |
| CVE-2008-6560 | High | 2009-03-31 | Not applicable | No public exploit | Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product. |
| CVE-2008-4580 | High | 2008-10-15 | Not applicable | No public exploit | fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fence_manual.fifo temporary file. |
| CVE-2008-1904 | High | 2008-04-22 | Not applicable | Working exploit published | Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified this_cookie cookie. |
| CVE-2007-1425 | High | 2007-03-13 | Not applicable | Working exploit published | SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the list parameter in an archive action. |
| CVE-2007-0378 | High | 2007-01-19 | Not applicable | No public exploit | Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors. |
| CVE-2006-5655 | High | 2006-11-03 | Not applicable | No public exploit | SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username parameter. |
| CVE-2004-1129 | High | 2005-01-10 | Not applicable | No public exploit | SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter. |
| CVE-2003-0280 | High | 2003-06-16 | Not applicable | Working exploit published | Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands. |
| CVE-2002-2034 | High | 2002-12-31 | Not applicable | No public exploit | The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments. |
| CVE-2002-0799 | High | 2002-08-12 | Not applicable | Working exploit published | Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument. |
| CVE-2001-0742 | High | 2001-10-18 | Not applicable | No public exploit | Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command. |
| CVE-2000-0557 | High | 2000-06-05 | Not applicable | No public exploit | Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request. |
| CVE-1999-1521 | High | 1999-09-12 | Not applicable | Working exploit published | Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server. |
| CVE-1999-1553 | High | 1999-05-01 | Not applicable | Working exploit published | Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line. |
| CVE-1999-0439 | High | 1999-04-05 | Not applicable | No public exploit | Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file. |