Critical severity CVEs

A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.

A network intrusion detection system (IDS) does not properly reassemble fragmented packets.

In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System…

A system-critical Windows NT registry key has an inappropriate value.

The rexec service is running.

The NT Alerter and Messenger services are running.

The discard service is running.

The Gopher service is running.

A component service related to NIS+ is running.

The OS/2 or POSIX subsystem in NT is enabled.

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive…

A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.

A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.

An application-critical Windows NT registry key has inappropriate permissions.

An application-critical Windows NT registry key has an inappropriate value.

Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux.