Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,710 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2000-0025 | Not scored | IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming"… | Mar 22, 2000 |
| CVE-2000-0023 | Not scored | Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL. | Mar 22, 2000 |
| CVE-2000-0022 | Not scored | Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory. | Mar 22, 2000 |
| CVE-2000-0003 | Not scored | Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable. | Mar 22, 2000 |
| CVE-1999-1000 | Not scored | The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics. | Mar 22, 2000 |
| CVE-1999-0998 | Not scored | Cisco Cache Engine allows an attacker to replace content in the cache. | Mar 22, 2000 |
| CVE-1999-0996 | Not scored | Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request. | Mar 22, 2000 |
| CVE-1999-0966 | Not scored | Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0]. | Mar 22, 2000 |
| CVE-1999-0964 | Not scored | Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable. | Mar 22, 2000 |
| CVE-1999-0931 | Not scored | Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands. | Mar 22, 2000 |
| CVE-1999-0920 | Not scored | Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command. | Mar 22, 2000 |
| CVE-1999-0916 | Not scored | WebTrends software stores account names and passwords in a file which does not have restricted access permissions. | Mar 22, 2000 |
| CVE-1999-0908 | Not scored | Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter. | Mar 22, 2000 |
| CVE-1999-0896 | Not scored | Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password. | Mar 22, 2000 |
| CVE-1999-0893 | Not scored | userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack. | Mar 22, 2000 |
| CVE-1999-0890 | Not scored | iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error. | Mar 22, 2000 |
| CVE-1999-0806 | Not scored | Buffer overflow in Solaris dtprintinfo program. | Mar 22, 2000 |
| CVE-1999-0797 | Not scored | NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries. | Mar 22, 2000 |
| CVE-1999-0796 | Not scored | FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks. | Mar 22, 2000 |
| CVE-1999-0789 | Not scored | Buffer overflow in AIX ftpd in the libc library. | Mar 22, 2000 |
| CVE-1999-0786 | Not scored | The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack. | Mar 22, 2000 |
| CVE-1999-0785 | Not scored | The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file. | Mar 22, 2000 |
| CVE-1999-0783 | Not scored | FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system. | Mar 22, 2000 |
| CVE-1999-0778 | Not scored | Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter. | Mar 22, 2000 |
| CVE-1999-0746 | Not scored | A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service. | Mar 22, 2000 |
| CVE-1999-0740 | Not scored | Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable. | Mar 22, 2000 |
| CVE-1999-0733 | Not scored | Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable. | Mar 22, 2000 |
| CVE-1999-0727 | Not scored | A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted. | Mar 22, 2000 |
| CVE-1999-0678 | Not scored | A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server. | Mar 22, 2000 |
| CVE-1999-0390 | Not scored | Buffer overflow in Dosemu Slang library in Linux. | Mar 22, 2000 |
| CVE-1999-0189 | Not scored | Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111. | Mar 22, 2000 |
| CVE-2000-0167 | Not scored | IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory. | Feb 23, 2000 |
| CVE-2000-0163 | Not scored | asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file. | Feb 23, 2000 |
| CVE-2000-0160 | Not scored | The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft. | Feb 23, 2000 |
| CVE-2000-0158 | Not scored | Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon. | Feb 23, 2000 |
| CVE-2000-0155 | Not scored | Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive. | Feb 23, 2000 |
| CVE-2000-0154 | Not scored | The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack. | Feb 23, 2000 |
| CVE-2000-0153 | Not scored | FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack. | Feb 23, 2000 |
| CVE-2000-0151 | Not scored | GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands. | Feb 16, 2000 |
| CVE-2000-0147 | Not scored | snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration. | Feb 16, 2000 |
| CVE-2000-0143 | Not scored | The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP. | Feb 16, 2000 |
| CVE-2000-0142 | Not scored | The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417. | Feb 16, 2000 |
| CVE-2000-0138 | Not scored | A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft. | Feb 15, 2000 |
| CVE-2000-0137 | Not scored | The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | Feb 8, 2000 |
| CVE-2000-0136 | Not scored | The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | Feb 8, 2000 |
| CVE-2000-0135 | Not scored | The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | Feb 8, 2000 |
| CVE-2000-0134 | Not scored | The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | Feb 8, 2000 |
| CVE-2000-0133 | Not scored | Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands. | Feb 8, 2000 |
| CVE-2000-0132 | Not scored | Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function. | Feb 8, 2000 |
| CVE-2000-0129 | Not scored | Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file. | Feb 8, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.