Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
caldera vulnerabilities and exploits
(subscribe to this query)
641
VMScore
CVE-2000-0372
Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.
Caldera Openlinux
445
VMScore
CVE-2020-10807
auth_svc in Caldera prior to 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in the HTTP Host header.
Mitre Caldera
NA
CVE-2022-41139
MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary commands on agents.
Mitre Caldera
383
VMScore
CVE-2021-42558
An issue exists in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS vulnerabilities that may be exploited by authenticated and unauthenticated attackers.
Mitre Caldera
801
VMScore
CVE-2021-42561
An issue exists in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a python "os.system" function. This allows malicious users to use shell metacharacters (e.g., backticks "``" or dollar parenthesis "$()" ) in ...
Mitre Caldera
490
VMScore
CVE-2021-42562
An issue exists in CALDERA 2.8.1. It does not properly segregate user privileges, resulting in non-admin users having access to read and modify configuration or other components that should only be accessible by admin users.
Mitre Caldera
445
VMScore
CVE-2002-1199
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote malicious users to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.
Sco Openserver 5.0.5
Sco Openserver 5.0.6
Sco Openserver 5.0.6a
Sun Sunos 5.7
Caldera Openlinux 2.2
Sun Sunos 5.8
Sun Solaris 9.0
Caldera Openlinux 2.3
Caldera Openlinux 2.4
445
VMScore
CVE-2001-0851
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote malicious users to bypass firewall rules by brute force guessing the cookie.
Caldera Openlinux Server 3.1
Caldera Openlinux Workstation 3.1
Caldera Openlinux Eserver 2.3.1
Linux Linux Kernel 2.0
Suse Suse Linux 7.2
Suse Suse Linux 7.3
Linux Linux Kernel 2.2.0
Linux Linux Kernel 2.4.0
Suse Suse Linux 6.3
Suse Suse Linux 6.4
Caldera Openlinux 2.3
Caldera Openlinux Edesktop 2.4
Suse Suse Linux 7.0
Suse Suse Linux 7.1
383
VMScore
CVE-2022-0879
The Caldera Forms WordPress plugin prior to 1.9.7 does not validate and escape the cf-api parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting
Calderaforms Caldera Forms
641
VMScore
CVE-2001-1153
lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.
Caldera Openunix 8.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
inject
CVE-2024-34001
CVE-2024-37018
LFI
CVE-2024-1275
CVE-2024-1086
CSRF
CVE-2024-31030
CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »