Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,101 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2000-1201 | Not scored | Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264. | Sep 12, 2001 |
| CVE-2000-1199 | Not scored | PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases. | Sep 12, 2001 |
| CVE-2000-1198 | Not scored | qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes. | Sep 12, 2001 |
| CVE-2000-1197 | Not scored | POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating… | Sep 12, 2001 |
| CVE-2000-1194 | Not scored | Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands. | Sep 12, 2001 |
| CVE-2000-1192 | Not scored | Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string trap. | Sep 12, 2001 |
| CVE-2000-1191 | Not scored | htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message… | Sep 12, 2001 |
| CVE-1999-1567 | Not scored | Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to port 99 and disconnecting without sending any data. | Sep 12, 2001 |
| CVE-1999-1566 | Not scored | Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters. | Sep 12, 2001 |
| CVE-1999-1564 | Not scored | FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes. | Sep 12, 2001 |
| CVE-1999-1563 | Not scored | Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm. | Sep 12, 2001 |
| CVE-1999-1562 | Not scored | gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file. | Sep 12, 2001 |
| CVE-1999-1561 | Not scored | Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server. | Sep 12, 2001 |
| CVE-1999-1560 | Not scored | Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the Tiger user, usually root. | Sep 12, 2001 |
| CVE-1999-1559 | Not scored | Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch because it only supports one session at a time. | Sep 12, 2001 |
| CVE-1999-1558 | Not scored | Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled. | Sep 12, 2001 |
| CVE-1999-1557 | Not scored | Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long user name or (2) a long password. | Sep 12, 2001 |
| CVE-1999-1555 | Not scored | Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse… | Sep 12, 2001 |
| CVE-1999-1554 | Not scored | /usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users. | Sep 12, 2001 |
| CVE-1999-1553 | Not scored | Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line. | Sep 12, 2001 |
| CVE-1999-1552 | Not scored | dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges. | Sep 12, 2001 |
| CVE-1999-1551 | Not scored | Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL. | Sep 12, 2001 |
| CVE-1999-1549 | Not scored | Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's… | Sep 12, 2001 |
| CVE-1999-1548 | Not scored | Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit. | Sep 12, 2001 |
| CVE-1999-1547 | Not scored | Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent. | Sep 12, 2001 |
| CVE-1999-1546 | Not scored | netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable. | Sep 12, 2001 |
| CVE-1999-1545 | Not scored | Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users. | Sep 12, 2001 |
| CVE-1999-1544 | Not scored | Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command. | Sep 12, 2001 |
| CVE-1999-1543 | Not scored | MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File. | Sep 12, 2001 |
| CVE-1999-1541 | Not scored | shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file. | Sep 12, 2001 |
| CVE-1999-1540 | Not scored | shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code. | Sep 12, 2001 |
| CVE-1999-1539 | Not scored | Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password. | Sep 12, 2001 |
| CVE-1999-1538 | Not scored | When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the… | Sep 12, 2001 |
| CVE-1999-1536 | Not scored | .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file. | Sep 12, 2001 |
| CVE-1999-1534 | Not scored | Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable. | Sep 12, 2001 |
| CVE-1999-1533 | Not scored | Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service. | Sep 12, 2001 |
| CVE-1999-1532 | Not scored | Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands. | Sep 12, 2001 |
| CVE-1999-1529 | Not scored | A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to execute arbitrary code. | Sep 12, 2001 |
| CVE-1999-1528 | Not scored | ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session. | Sep 12, 2001 |
| CVE-1999-1527 | Not scored | Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers… | Sep 12, 2001 |
| CVE-1999-1526 | Not scored | Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia. | Sep 12, 2001 |
| CVE-1999-1525 | Not scored | Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie. | Sep 12, 2001 |
| CVE-1999-1524 | Not scored | FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port. | Sep 12, 2001 |
| CVE-1999-1523 | Not scored | Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request. | Sep 12, 2001 |
| CVE-1999-1522 | Not scored | Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML. | Sep 12, 2001 |
| CVE-1999-1521 | Not scored | Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server. | Sep 12, 2001 |
| CVE-1999-1519 | Not scored | Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password. | Sep 12, 2001 |
| CVE-1999-1518 | Not scored | Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults. | Sep 12, 2001 |
| CVE-1999-1517 | Not scored | runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary files by providing the target files to runtar. | Sep 12, 2001 |
| CVE-1999-1516 | Not scored | A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string. | Sep 12, 2001 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.