AT
Vendor
Att
30
CVEs
0
On KEV
0
New 30D
Products
XM9.8
Xmill
Att
13 CVEs0 on KEV0 new
UF8.1
U-verse Firmware
Att
4 CVEs0 on KEV0 new
WI–
Winvnc
Att
4 CVEs0 on KEV0 new
SV–
Svr4
Att
2 CVEs0 on KEV0 new
AO7.5
Alienvault Ossim
Att
1 CVEs0 on KEV0 new
CP–
Connect Participant Application
Att
1 CVEs0 on KEV0 new
MS7.5
Mobileiron Sentry
Att
1 CVEs0 on KEV0 new
MV7.5
Mobileiron Virtual Smartphone Platform
Att
1 CVEs0 on KEV0 new
ST–
Status
Att
1 CVEs0 on KEV0 new
VN–
Vnc
Att
1 CVEs0 on KEV0 new
WS–
Winvnc Server
Att
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-26507 | XM Xmill Att | 9.8 | Apr 14 | A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7 |
| CVE-2021-21811 | XM Xmill Att | 9.8 | Aug 31 | A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xmill 0.7 |
| CVE-2021-21828 | XM Xmill Att | 9.8 | Aug 20 | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7 |
| CVE-2021-21827 | XM Xmill Att | 9.8 | Aug 20 | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7 |
| CVE-2021-21826 | XM Xmill Att | 9.8 | Aug 20 | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7 |
| CVE-2021-21825 | XM Xmill Att | 9.8 | Aug 18 | A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7 |
| CVE-2021-21810 | XM Xmill Att | 9.8 | Aug 17 | A memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T Labs’ Xmill 0.7 |
| CVE-2021-21815 | XM Xmill Att | 7.8 | Aug 13 | A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7 |
| CVE-2021-21814 | XM Xmill Att | 7.8 | Aug 13 | Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line |
| CVE-2021-21813 | XM Xmill Att | 7.8 | Aug 13 | Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line |
| CVE-2021-21812 | XM Xmill Att | 7.8 | Aug 13 | A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’ Xmill 0.7 |
| CVE-2021-21830 | XM Xmill Att | 9.8 | Aug 13 | A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmill 0.7 |
| CVE-2021-21829 | XM Xmill Att | 9.8 | Aug 13 | A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7 |
| CVE-2020-22650 | AO Alienvault Ossim Att | 7.5 | Jul 19 | A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service (DOS) via a system crash triggered by the occurrence of a large number of alarm… |
| CVE-2013-7286 | MV Mobileiron Virtual Smartphone Platform Att | 7.5 | Feb 12 | MobileIron VSP < 5.9.1 and Sentry < 5.0 has a weak password obfuscation algorithm |
| CVE-2017-14117 | UF U-verse Firmware Att | 5.9 | Sep 3 | The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port… |
| CVE-2017-14116 | UF U-verse Firmware Att | 8.1 | Sep 3 | The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with the tech account and… |
| CVE-2017-14115 | UF U-verse Firmware Att | 8.1 | Sep 3 | The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh… |
| CVE-2017-10793 | UF U-verse Firmware Att | 8.1 | Sep 3 | The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, configures an sbdc.ha WAN TCP service on… |
| CVE-2013-6029 | CP Connect Participant Application Att | – | Dec 4 | Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to execute arbitrary code via a malformed .SVT file |
| CVE-2012-2980 | ST Status Att | – | Aug 21 | The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z,… |
| CVE-2002-1511 | VN Vnc Att | – | Mar 3 | The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies |
| CVE-2002-0971 | WS Winvnc Server Att | – | Sep 24 | Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the… |
| CVE-2001-0168 | WI Winvnc Att | – | May 3 | Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the… |
| CVE-2001-0167 | WI Winvnc Att | – | May 3 | Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a… |
| CVE-2001-1422 | WI Winvnc Att | – | Jan 23 | WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and… |
| CVE-2000-1164 | WI Winvnc Att | – | Jan 9 | WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive… |
| CVE-1999-1059 | SV Svr4 Att | – | Feb 25 | Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands |
| CVE-1999-1034 | SV Svr4 Att | – | May 23 | Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges |
