CVE mentions, exploit signals, and PoC evidence in one fast public view.
Loading current evidence
Historical archive search
Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.
Results
114 results · Sorted by Highest Buzz score first
IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being…
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary comma…
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname…
lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered aft…
IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.
Buffer overflow in uum program for Canna input system allows local users to gain root privileges.
Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.
nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd vi…
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.
A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.
Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.