OP
Product
Openvms
On CISA KEVExploited in the wild
23
CVEs
1
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add Openvms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5477 In wildKEV | 7.5 | Jul 29 | ISC BIND Data Processing Errors Vulnerability Affected: 5.7 |
| CVE-2017-17482 | 7.8 | Feb 7 | An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later Affected: through 8.4-2l1; through 8.4-2l1; 4.0 and later; 4.0 and later |
| CVE-2012-3277 | – | Dec 13 | HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN… Affected: 7.3-2; 8.2; 8.3; 8.3; 8.3-1h1; 8.4; +1 more |
| CVE-2012-3276 | – | Dec 13 | HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN… Affected: 7.3-2; 8.3; 8.3-1h1; 8.4 |
| CVE-2012-2010 | – | May 18 | The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM system service is enabled, allows… Affected: 8.3; 8.3; 8.3-1h1; 8.4; 8.4 |
| CVE-2012-0134 | – | Apr 19 | Unspecified vulnerability in HP OpenVMS 7.3-2 on the Alpha platform, 8.3 and 8.4 on the Alpha and IA64 platforms, and 8.3-1h1 on the IA64 platform allows local users to cause a… Affected: 8.3-1h1 |
| CVE-2010-4110 | – | Dec 22 | Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or cause a denial of service via… Affected: 8.3; 8.3-1h1; 8.4 |
| CVE-2010-1973 | – | Jul 22 | Unspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and earlier on the Itanium platform,… Affected: 6.2; 7.2; 7.2-1; 7.2-1h1; 7.2-2; 7.2-6c2; +5 more |
| CVE-2010-2612 | – | Jul 2 | Unspecified vulnerability in the HP OpenVMS Auditing feature in OpenVMS ALPHA 7.3-2, 8.2, and 8.3; and OpenVMS for Integrity Servers 8.3 AND 8.3-1H1; allows local users to obtain… Affected: 8.2; 8.3 |
| CVE-2008-5120 | – | Nov 18 | Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request… Affected: 8.3 |
| CVE-2008-4052 | – | Sep 11 | Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of… Affected: 7.3-2; 8.2; 8.2-1; 8.3; 8.3; 8.3-1h1 |
| CVE-2008-3947 | – | Sep 5 | DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line Affected: 8.3 |
| CVE-2008-3946 | – | Sep 5 | The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a (1) .plan or (2) .project file Affected: 5 |
| CVE-2008-3940 | – | Sep 5 | Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a (1) .plan or (2)… Affected: 5 |
| CVE-2007-5242 | – | Oct 6 | Unspecified vulnerability in (1) SYS$EI1000.EXE and (2) SYS$EI1000_MON.EXE in HP OpenVMS 8.3 and earlier allows remote attackers to cause a denial of service (machine crash) via… Affected: through 8.3; through 8.3 |
| CVE-2007-5241 | – | Oct 6 | Buffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a denial of service (machine crash) via the "MCR MCL SHOW CSMA-CD Port * All" command,… Affected: through 8.3; through 8.3 |
| CVE-2007-3729 | – | Jul 12 | The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 generates different responses depending on whether or not a username is valid, which allows… Affected: 8.3 |
| CVE-2007-3730 | – | Jul 12 | The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 does not log the source IP address or attempted username for login attempts, which might help… Affected: 8.3 |
| CVE-2007-2998 | – | Jun 4 | The Pascal run-time library (PAS$RTL.EXE) before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not properly restore PC… Affected: 8.3; 8.3 |
| CVE-2007-2468 | – | May 2 | Unspecified vulnerability in HP OpenVMS for Integrity Servers 8.2-1 and 8.3 allows local users to cause a denial of service (crash) via "Program actions relating to exceptions." Affected: 8.2-1; 8.3 |
| CVE-2007-0139 | – | Jan 9 | Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 for OpenVMS VAX, allows… Affected: 7.3; 7.3_2 |
| CVE-2006-3686 | – | Jul 21 | Unspecified vulnerability in [SYSEXE]SMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and "remote users" to cause a denial of service (crash) Affected: 7.3-2 |
| CVE-2005-0652 | – | May 2 | Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files Affected: 6.2; 6.2; 7.3; 7.3-1; 7.3-2 |
Showing 23