Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,097 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-1510 | Not scored | Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands. | Sep 12, 2001 |
| CVE-1999-1509 | Not scored | Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL. | Sep 12, 2001 |
| CVE-1999-1508 | Not scored | Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html. | Sep 12, 2001 |
| CVE-1999-1506 | Not scored | Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin. | Sep 12, 2001 |
| CVE-1999-1505 | Not scored | Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet. | Sep 12, 2001 |
| CVE-1999-1504 | Not scored | Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command. | Sep 12, 2001 |
| CVE-1999-1503 | Not scored | Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null header and data field. | Sep 12, 2001 |
| CVE-1999-1502 | Not scored | Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4) argument to the map console command. | Sep 12, 2001 |
| CVE-1999-1501 | Not scored | (1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands. | Sep 12, 2001 |
| CVE-1999-1500 | Not scored | Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments. | Sep 12, 2001 |
| CVE-1999-1499 | Not scored | named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used. | Sep 12, 2001 |
| CVE-1999-1498 | Not scored | Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file. | Sep 12, 2001 |
| CVE-1999-1497 | Not scored | Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts. | Sep 12, 2001 |
| CVE-1999-1496 | Not scored | Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist. | Sep 12, 2001 |
| CVE-1999-1495 | Not scored | xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file. | Sep 12, 2001 |
| CVE-1999-1493 | Not scored | Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure system calls, (1) pad_$dm_cmd and (2) pad_$def_pfk(). | Sep 12, 2001 |
| CVE-1999-1492 | Not scored | Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges. | Sep 12, 2001 |
| CVE-1999-1491 | Not scored | abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program. | Sep 12, 2001 |
| CVE-1999-1489 | Not scored | Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument. | Sep 12, 2001 |
| CVE-1999-1487 | Not scored | Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system. | Sep 12, 2001 |
| CVE-1999-1485 | Not scored | nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system. | Sep 12, 2001 |
| CVE-1999-1484 | Not scored | Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsServerConfigured. | Sep 12, 2001 |
| CVE-1999-1483 | Not scored | Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable. | Sep 12, 2001 |
| CVE-1999-1482 | Not scored | SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes. | Sep 12, 2001 |
| CVE-1999-1480 | Not scored | (1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack. | Sep 12, 2001 |
| CVE-1999-1479 | Not scored | The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters. | Sep 12, 2001 |
| CVE-1999-1477 | Not scored | Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack. | Sep 12, 2001 |
| CVE-1999-1475 | Not scored | ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command. | Sep 12, 2001 |
| CVE-1999-1474 | Not scored | PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer. | Sep 12, 2001 |
| CVE-1999-1471 | Not scored | Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field. | Sep 12, 2001 |
| CVE-1999-1470 | Not scored | Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges. | Sep 12, 2001 |
| CVE-1999-1469 | Not scored | Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header. | Sep 12, 2001 |
| CVE-1999-1467 | Not scored | Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user. | Sep 12, 2001 |
| CVE-1999-1466 | Not scored | Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certain interfaces, the IP route cache is enabled, and the access list uses the… | Sep 12, 2001 |
| CVE-1999-1465 | Not scored | Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output… | Sep 12, 2001 |
| CVE-1999-1464 | Not scored | Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that… | Sep 12, 2001 |
| CVE-1999-1463 | Not scored | Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles… | Sep 12, 2001 |
| CVE-1999-1462 | Not scored | Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files. | Sep 12, 2001 |
| CVE-1999-1461 | Not scored | inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession… | Sep 12, 2001 |
| CVE-1999-1460 | Not scored | BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program. | Sep 12, 2001 |
| CVE-1999-1459 | Not scored | BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file. | Sep 12, 2001 |
| CVE-1999-1458 | Not scored | Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument. | Sep 12, 2001 |
| CVE-1999-1457 | Not scored | Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function. | Sep 12, 2001 |
| CVE-1999-1454 | Not scored | Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC (Escape) key. | Sep 12, 2001 |
| CVE-1999-1453 | Not scored | Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object. | Sep 12, 2001 |
| CVE-1999-1451 | Not scored | The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files. | Sep 12, 2001 |
| CVE-1999-1450 | Not scored | Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges. | Sep 12, 2001 |
| CVE-1999-1449 | Not scored | SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device. | Sep 12, 2001 |
| CVE-1999-1448 | Not scored | Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as (1) dates before 1970, which cause a Divide By Zero error, or (2) dates that are… | Sep 12, 2001 |
| CVE-1999-1447 | Not scored | Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag. | Sep 12, 2001 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.