Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.

Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.

ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration.

Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol.

A remote attacker can read information from a Netscape user's cache via JavaScript.

Buffer overflow in AIX ftpd in the libc library.

Arkiea nlservd allows remote attackers to conduct a denial of service.

The SSH authentication agent follows symlinks via a UNIX domain socket.

The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.

The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.

Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.

FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system.

KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable.

KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables.

KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file.

Denial of service in HP-UX SharedX recserv program.

Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.

IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.

Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.

Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list.