Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,710 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0780 | Not scored | KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file. | Apr 25, 2000 |
| CVE-1999-0203 | Not scored | In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program. | Apr 25, 2000 |
| CVE-2000-0183 | Not scored | Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability. | Apr 18, 2000 |
| CVE-2000-0159 | Not scored | HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges. | Apr 18, 2000 |
| CVE-2000-0144 | Not scored | Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack. | Apr 18, 2000 |
| CVE-2000-0140 | Not scored | Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections. | Apr 18, 2000 |
| CVE-2000-0131 | Not scored | Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands. | Apr 18, 2000 |
| CVE-2000-0107 | Not scored | Linux apcd program allows local attackers to modify arbitrary files via a symlink attack. | Apr 18, 2000 |
| CVE-2000-0100 | Not scored | The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program. | Apr 18, 2000 |
| CVE-2000-0099 | Not scored | Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument. | Apr 18, 2000 |
| CVE-2000-0095 | Not scored | The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier. | Apr 18, 2000 |
| CVE-2000-0091 | Not scored | Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password. | Apr 18, 2000 |
| CVE-2000-0083 | Not scored | HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges. | Apr 18, 2000 |
| CVE-2000-0073 | Not scored | Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word. | Apr 18, 2000 |
| CVE-2000-0062 | Not scored | The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities. | Apr 18, 2000 |
| CVE-2000-0057 | Not scored | Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information. | Apr 18, 2000 |
| CVE-2000-0053 | Not scored | Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request. | Apr 18, 2000 |
| CVE-2000-0052 | Not scored | Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack. | Apr 18, 2000 |
| CVE-2000-0044 | Not scored | Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands. | Apr 18, 2000 |
| CVE-1999-1008 | Not scored | xsoldier program allows local users to gain root access via a long argument. | Apr 18, 2000 |
| CVE-1999-0961 | Not scored | HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation. | Apr 18, 2000 |
| CVE-1999-0958 | Not scored | sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack. | Apr 18, 2000 |
| CVE-1999-0906 | Not scored | Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable. | Apr 18, 2000 |
| CVE-1999-0903 | Not scored | genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767. | Apr 18, 2000 |
| CVE-1999-0888 | Not scored | dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script. | Apr 18, 2000 |
| CVE-1999-0813 | Not scored | Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges. | Apr 18, 2000 |
| CVE-1999-0799 | Not scored | Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location. | Apr 18, 2000 |
| CVE-1999-0790 | Not scored | A remote attacker can read information from a Netscape user's cache via JavaScript. | Apr 18, 2000 |
| CVE-1999-0773 | Not scored | Buffer overflow in Solaris lpset program allows local users to gain root access. | Apr 18, 2000 |
| CVE-1999-0747 | Not scored | Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load. | Apr 18, 2000 |
| CVE-1999-0720 | Not scored | The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users. | Apr 18, 2000 |
| CVE-1999-0711 | Not scored | The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root. | Apr 18, 2000 |
| CVE-1999-0676 | Not scored | sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack. | Apr 18, 2000 |
| CVE-2000-0244 | Not scored | The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication. | Apr 12, 2000 |
| CVE-2000-0242 | Not scored | WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters. | Apr 12, 2000 |
| CVE-2000-0241 | Not scored | vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges. | Apr 12, 2000 |
| CVE-2000-0239 | Not scored | Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request. | Apr 12, 2000 |
| CVE-2000-0227 | Not scored | The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to cause a denial of service by requesting a large number of sockets. | Apr 12, 2000 |
| CVE-2000-0224 | Not scored | ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack. | Apr 10, 2000 |
| CVE-2000-0222 | Not scored | The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs. | Apr 10, 2000 |
| CVE-2000-0221 | Not scored | The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port. | Apr 10, 2000 |
| CVE-2000-0218 | Not scored | Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname. | Apr 10, 2000 |
| CVE-2000-0217 | Not scored | The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. | Apr 10, 2000 |
| CVE-2000-0215 | Not scored | Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges. | Apr 10, 2000 |
| CVE-2000-0212 | Not scored | InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information. | Apr 10, 2000 |
| CVE-2000-0211 | Not scored | The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability. | Apr 10, 2000 |
| CVE-2000-0210 | Not scored | The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files. | Apr 10, 2000 |
| CVE-2000-0209 | Not scored | Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page. | Apr 10, 2000 |
| CVE-2000-0208 | Not scored | The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch. | Apr 10, 2000 |
| CVE-2000-0207 | Not scored | SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters. | Apr 10, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.