SG
Vendor
Sgi
259
CVEs
0
On KEV
0
New 30D
Products
IR9.8
Irix
Sgi
182 CVEs0 on KEV0 new
PR7.5
Propack
Sgi
54 CVEs0 on KEV0 new
PC6.7
Performance Co-pilot
Sgi
7 CVEs0 on KEV0 new
FR–
Freeware
Sgi
2 CVEs0 on KEV0 new
SA–
Samba
Sgi
2 CVEs0 on KEV0 new
AL–
Advanced Linux Environment
Sgi
1 CVEs0 on KEV0 new
FA–
Fam
Sgi
1 CVEs0 on KEV0 new
IN–
Infosearch
Sgi
1 CVEs0 on KEV0 new
IR–
Irisconsole
Sgi
1 CVEs0 on KEV0 new
LO–
License Oeo
Sgi
1 CVEs0 on KEV0 new
MA–
Mailx
Sgi
1 CVEs0 on KEV0 new
ME–
Mediamail
Sgi
1 CVEs0 on KEV0 new
MC–
Mipspro Compilers
Sgi
1 CVEs0 on KEV0 new
NQ–
Nqsdaemon
Sgi
1 CVEs0 on KEV0 new
Q1–
Quake 1 Server
Sgi
1 CVEs0 on KEV0 new
WD–
Workshop Debugger And Performance Tools
Sgi
1 CVEs0 on KEV0 new
XF–
Xfsprogs
Sgi
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-6917 | PC Performance Co-pilot Sgi | 6.7 | Feb 28 | A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP |
| CVE-2012-2150 | XF Xfsprogs Sgi | – | Aug 25 | xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image |
| CVE-2012-5530 | PC Performance Co-pilot Sgi | – | Nov 29 | The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/#####… |
| CVE-2012-3421 | PC Performance Co-pilot Sgi | – | Aug 27 | The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of… |
| CVE-2012-3420 | PC Performance Co-pilot Sgi | – | Aug 27 | Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of… |
| CVE-2012-3419 | PC Performance Co-pilot Sgi | – | Aug 27 | Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line… |
| CVE-2012-3418 | PC Performance Co-pilot Sgi | – | Aug 27 | libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a PDU with the numcreds field… |
| CVE-2010-1039 | IR Irix Sgi | – | May 20 | Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX… |
| CVE-2007-4938 | IR Irix Sgi | – | Sep 18 | Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute… |
| CVE-2006-1167 | PR Propack Sgi | – | Feb 6 | SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information |
| CVE-2005-3625 | PR Propack Sgi | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams… |
| CVE-2005-3626 | PR Propack Sgi | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted… |
| CVE-2005-3624 | PR Propack Sgi | – | Dec 31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via… |
| CVE-2005-2925 | IR Irix Sgi | – | Oct 12 | runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in… |
| CVE-2005-0138 | IR Irix Sgi | – | Sep 21 | rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined |
| CVE-2005-0139 | IR Irix Sgi | – | Sep 21 | Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly exports, which allows attackers to conduct… |
| CVE-2005-1859 | PR Propack Sgi | – | Jul 12 | Unknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local users to execute arbitrary shells as root on… |
| CVE-2005-0464 | IR Irix Sgi | – | May 2 | gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line… |
| CVE-2005-0465 | IR Irix Sgi | – | May 2 | gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option |
| CVE-2005-0005 | PR Propack Sgi | – | May 2 | Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a… |
| CVE-2005-0206 | PR Propack Sgi | – | Apr 27 | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which… |
| CVE-2005-1043 | PR Propack Sgi | – | Apr 14 | exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes… |
| CVE-2005-0761 | PR Propack Sgi | – | Mar 23 | Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD file |
| CVE-2005-0759 | PR Propack Sgi | – | Mar 23 | ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag |
| CVE-2005-0398 | PR Propack Sgi | – | Mar 14 | The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets |
| CVE-2005-0605 | PR Propack Sgi | – | Mar 2 | scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow |
| CVE-2005-0156 | PR Propack Sgi | – | Feb 7 | Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG… |
| CVE-2004-0930 | SA Samba Sgi | – | Jan 27 | The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request… |
| CVE-2004-1184 | PR Propack Sgi | – | Jan 21 | The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters |
| CVE-2005-0113 | IR Irix Sgi | – | Jan 14 | inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges |
| CVE-2004-0139 | IR Irix Sgi | – | Jan 10 | Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "t_unbind changes t_bind's behavior," has unknown… |
| CVE-2004-1471 | PR Propack Sgi | – | Dec 31 | Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service… |
| CVE-2004-1889 | IR Irix Sgi | – | Dec 31 | Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via a link failure with Microsoft Windows |
| CVE-2004-1891 | IR Irix Sgi | – | Dec 31 | The ftp_syslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being… |
| CVE-2004-1307 | PR Propack Sgi | – | Dec 21 | Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS… |
| CVE-2004-1145 | PR Propack Sgi | – | Dec 15 | Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java… |
| CVE-2004-1139 | PR Propack Sgi | – | Dec 15 | Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash) |
| CVE-2004-1142 | PR Propack Sgi | – | Dec 15 | Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet |
| CVE-2004-0081 | PR Propack Sgi | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… |
| CVE-2004-0112 | PR Propack Sgi | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… |
| CVE-2004-0079 | PR Propack Sgi | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… |
| CVE-2004-1613 | PR Propack Sgi | – | Oct 18 | Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3)… |
| CVE-2004-0807 | SA Samba Sgi | – | Sep 13 | Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be… |
| CVE-2004-0506 | PR Propack Sgi | – | Aug 18 | The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference |
| CVE-2004-0507 | PR Propack Sgi | – | Aug 18 | Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code |
| CVE-2004-0234 | PR Propack Sgi | – | Aug 18 | Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local… |
| CVE-2004-0505 | PR Propack Sgi | – | Aug 18 | The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors |
| CVE-2004-0519 | PR Propack Sgi | – | Aug 18 | Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication… |
| CVE-2004-0521 | PR Propack Sgi | – | Aug 18 | SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php |
| CVE-2004-0233 | PR Propack Sgi | – | Aug 18 | Utempter allows device names that contain |
| CVE-2004-0235 | PR Propack Sgi | – | Aug 18 | Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) |
| CVE-2004-0504 | PR Propack Sgi | – | Aug 18 | Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients |
| CVE-2004-0231 | PR Propack Sgi | – | Aug 18 | Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations." |
| CVE-2004-0520 | PR Propack Sgi | – | Aug 18 | Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as… |
| CVE-2004-0523 | PR Propack Sgi | – | Aug 18 | Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root |
| CVE-2004-0232 | PR Propack Sgi | – | Aug 18 | Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code |
| CVE-2004-0226 | PR Propack Sgi | – | Aug 18 | Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code |
| CVE-2004-0135 | IR Irix Sgi | – | Aug 6 | The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory |
| CVE-2004-0136 | IR Irix Sgi | – | Aug 6 | The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a "corrupted binary." |
| CVE-2004-0414 | PR Propack Sgi | – | Aug 6 | CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial… |