Opengroup Unix
49 CVEs affecting Opengroup Unix. Latest disclosed: 2026-06-30. Critical: 4, High: 16.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9895 | Critical | 9.8 | 2019-03-21 | In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding. |
CVE-2013-0625 | Critical | 9.8 | 2013-01-09 | Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code… |
CVE-2011-2462 | Critical | 9.8 | 2011-12-07 | Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UN… |
CVE-2020-6294 | Critical | 9.1 | 2020-08-12 | Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checks for functionaliti… |
CVE-2022-22772 | High | 8.5 | 2022-03-30 | The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Plat… |
CVE-2024-36358 | High | 7.8 | 2024-06-10 | A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected… |
CVE-2024-1150 | High | 7.8 | 2024-02-08 | Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on Unix allows File Manipulation through Snow Update Packages.T… |
CVE-2022-30984 | High | 7.8 | 2022-08-26 | A buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.1-p2 or 7.0.1-p3 be… |
CVE-2022-25255 | High | 7.8 | 2022-02-16 | In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not fo… |
CVE-2019-4606 | High | 7.8 | 2019-12-12 | IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search pa… |
CVE-2019-4523 | High | 7.8 | 2019-10-22 | IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attac… |
CVE-2023-30991 | High | 7.5 | 2023-10-16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force… |
CVE-2022-45461 | High | 7.5 | 2022-11-17 | The Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux and UNIX allows authenticated non-root users (that have been exp… |
CVE-2022-22390 | High | 7.5 | 2022-06-24 | IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when… |
CVE-2022-30333 | High | 7.5 | 2022-05-09 | RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a… |
CVE-2021-29825 | High | 7.5 | 2021-09-16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACKUP. IBM X-Force ID… |
CVE-2013-0631 | High | 7.5 | 2013-01-09 | Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013. |
CVE-2013-0629 | High | 7.5 | 2013-01-09 | Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as ex… |
CVE-2025-71263 | High | 7.4 | 2026-03-13 | In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes. A loca… |
CVE-2024-33899 | High | 7.1 | 2024-04-29 | RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences. |