Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,083 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-1364 | Not scored | Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext. | Sep 12, 2001 |
| CVE-1999-1361 | Not scored | Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and fill the event logs… | Sep 12, 2001 |
| CVE-1999-1357 | Not scored | Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other… | Sep 12, 2001 |
| CVE-1999-1355 | Not scored | BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges. | Sep 12, 2001 |
| CVE-1999-1354 | Not scored | E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2) network.fc for version 3.5, or (3) FCCLIENT.LOG when logging is enabled. | Sep 12, 2001 |
| CVE-1999-1353 | Not scored | Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in the Userbase.dbf data file, which could allow local users to gain privileges. | Sep 12, 2001 |
| CVE-1999-1352 | Not scored | mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges. | Sep 12, 2001 |
| CVE-1999-1350 | Not scored | ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local users to gain privileges by replacing a program with a Trojan horse. | Sep 12, 2001 |
| CVE-1999-1349 | Not scored | NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via certain packets, possibly with the Urgent (URG) flag set, to port 111. | Sep 12, 2001 |
| CVE-1999-1348 | Not scored | Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service. | Sep 12, 2001 |
| CVE-1999-1347 | Not scored | Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm. | Sep 12, 2001 |
| CVE-1999-1346 | Not scored | PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the… | Sep 12, 2001 |
| CVE-1999-1345 | Not scored | Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files to the remote server by placing them in the directory, and (2) view files that… | Sep 12, 2001 |
| CVE-1999-1344 | Not scored | Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file. | Sep 12, 2001 |
| CVE-1999-1343 | Not scored | HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of . characters. | Sep 12, 2001 |
| CVE-1999-1342 | Not scored | ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port. | Sep 12, 2001 |
| CVE-1999-1340 | Not scored | Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument. | Sep 12, 2001 |
| CVE-1999-1338 | Not scored | Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions. | Sep 12, 2001 |
| CVE-1999-1334 | Not scored | Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) via a long -f (filterfile) command line argument. | Sep 12, 2001 |
| CVE-1999-1323 | Not scored | Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrator password in cleartext in (1) the navieg.ini file for NAVIEG, and (2) the… | Sep 12, 2001 |
| CVE-1999-1322 | Not scored | The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext. | Sep 12, 2001 |
| CVE-1999-1319 | Not scored | Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations. | Sep 12, 2001 |
| CVE-1999-1315 | Not scored | Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service. | Sep 12, 2001 |
| CVE-1999-1314 | Not scored | Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of service (system reload) via a series of certain mount_union commands. | Sep 12, 2001 |
| CVE-1999-1313 | Not scored | Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands. | Sep 12, 2001 |
| CVE-1999-1312 | Not scored | Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges. | Sep 12, 2001 |
| CVE-1999-1311 | Not scored | Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges. | Sep 12, 2001 |
| CVE-1999-1308 | Not scored | Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges. | Sep 12, 2001 |
| CVE-1999-1307 | Not scored | Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges. | Sep 12, 2001 |
| CVE-1999-1306 | Not scored | Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which could allow attackers to bypass filters. | Sep 12, 2001 |
| CVE-1999-1305 | Not scored | Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access. | Sep 12, 2001 |
| CVE-1999-1304 | Not scored | Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access. | Sep 12, 2001 |
| CVE-1999-1303 | Not scored | Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access. | Sep 12, 2001 |
| CVE-1999-1302 | Not scored | Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access. | Sep 12, 2001 |
| CVE-1999-1300 | Not scored | Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration. | Sep 12, 2001 |
| CVE-1999-1299 | Not scored | rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to… | Sep 12, 2001 |
| CVE-1999-1296 | Not scored | Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRB_CONF environmental variable. | Sep 12, 2001 |
| CVE-1999-1295 | Not scored | Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are… | Sep 12, 2001 |
| CVE-1999-1293 | Not scored | mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core. | Sep 12, 2001 |
| CVE-1999-1292 | Not scored | Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL. | Sep 12, 2001 |
| CVE-1999-1291 | Not scored | TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the… | Sep 12, 2001 |
| CVE-1999-1289 | Not scored | ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g. through NAT), which provides remote attackers with potentially sensitive information about the… | Sep 12, 2001 |
| CVE-1999-1287 | Not scored | Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface. | Sep 12, 2001 |
| CVE-1999-1286 | Not scored | addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file. | Sep 12, 2001 |
| CVE-1999-1285 | Not scored | Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed. | Sep 12, 2001 |
| CVE-1999-1283 | Not scored | Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag. | Sep 12, 2001 |
| CVE-1999-1282 | Not scored | RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges. | Sep 12, 2001 |
| CVE-1999-1281 | Not scored | Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program. | Sep 12, 2001 |
| CVE-1999-1280 | Not scored | Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file. | Sep 12, 2001 |
| CVE-1999-1278 | Not scored | nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (1) nlog-smb.pl or (2) rpc-nlog.pl. | Sep 12, 2001 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.