Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,723 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2000-0277 | Not scored | Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability. | Jun 2, 2000 |
| CVE-2000-0274 | Not scored | The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name. | Jun 2, 2000 |
| CVE-2000-0268 | Not scored | Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot. | Jun 2, 2000 |
| CVE-2000-0267 | Not scored | Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password. | Jun 2, 2000 |
| CVE-2000-0260 | Not scored | Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability. | Jun 2, 2000 |
| CVE-2000-0258 | Not scored | IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability. | Jun 2, 2000 |
| CVE-2000-0246 | Not scored | IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share"… | Jun 2, 2000 |
| CVE-2000-0245 | Not scored | Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts. | Jun 2, 2000 |
| CVE-2000-0235 | Not scored | Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges. | Jun 2, 2000 |
| CVE-2000-0234 | Not scored | The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file. | Jun 2, 2000 |
| CVE-2000-0233 | Not scored | SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges. | Jun 2, 2000 |
| CVE-2000-0232 | Not scored | Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request. | Jun 2, 2000 |
| CVE-2000-0231 | Not scored | Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges. | Jun 2, 2000 |
| CVE-2000-0230 | Not scored | Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable. | Jun 2, 2000 |
| CVE-2000-0229 | Not scored | gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root. | Jun 2, 2000 |
| CVE-2000-0228 | Not scored | Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" Vulnerability. | Jun 2, 2000 |
| CVE-2000-0226 | Not scored | IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability." | Jun 2, 2000 |
| CVE-2000-0171 | Not scored | atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges. | Jun 2, 2000 |
| CVE-2000-0169 | Not scored | Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'. | Jun 2, 2000 |
| CVE-2000-0113 | Not scored | The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics. | Jun 2, 2000 |
| CVE-2000-0004 | Not scored | ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (dot) into the URL. | Jun 2, 2000 |
| CVE-1999-1011 | Not scored | The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands. | Jun 2, 2000 |
| CVE-1999-0976 | Not scored | Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail. | Jun 2, 2000 |
| CVE-1999-0874 | Not scored | Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions. | Jun 2, 2000 |
| CVE-1999-0866 | Not scored | Buffer overflow in UnixWare xauto program allows local users to gain root privilege. | Jun 2, 2000 |
| CVE-1999-0865 | Not scored | Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port. | Jun 2, 2000 |
| CVE-1999-0864 | Not scored | UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file. | Jun 2, 2000 |
| CVE-1999-0859 | Not scored | Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly. | Jun 2, 2000 |
| CVE-1999-0856 | Not scored | login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist. | Jun 2, 2000 |
| CVE-1999-0854 | Not scored | Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file. | Jun 2, 2000 |
| CVE-1999-0842 | Not scored | Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack. | Jun 2, 2000 |
| CVE-1999-0838 | Not scored | Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command. | Jun 2, 2000 |
| CVE-1999-0836 | Not scored | UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack. | Jun 2, 2000 |
| CVE-1999-0832 | Not scored | Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname. | Jun 2, 2000 |
| CVE-1999-0819 | Not scored | NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it. | Jun 2, 2000 |
| CVE-1999-0754 | Not scored | The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable. | Jun 2, 2000 |
| CVE-1999-0719 | Not scored | The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code. | Jun 2, 2000 |
| CVE-1999-0696 | Not scored | Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd). | Jun 2, 2000 |
| CVE-1999-0668 | Not scored | The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy. | Jun 2, 2000 |
| CVE-1999-0493 | Not scored | rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd. | Jun 2, 2000 |
| CVE-1999-0491 | Not scored | The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute. | Jun 2, 2000 |
| CVE-1999-0464 | Not scored | Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames. | Jun 2, 2000 |
| CVE-1999-0407 | Not scored | By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system. | Jun 2, 2000 |
| CVE-1999-0323 | Not scored | FreeBSD mmap function allows users to modify append-only or immutable files. | Jun 2, 2000 |
| CVE-1999-0225 | Not scored | Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size. | Jun 2, 2000 |
| CVE-1999-0210 | Not scored | Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters. | Jun 2, 2000 |
| CVE-1999-0142 | Not scored | The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts. | Jun 2, 2000 |
| CVE-1999-0124 | Not scored | Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daemon. | Jun 2, 2000 |
| CVE-1999-0118 | Not scored | AIX infod allows local users to gain root access through an X display. | Jun 2, 2000 |
| CVE-1999-0031 | Not scored | JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability. | Jun 2, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.