Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,705 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0993 | Not scored | Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed. | Feb 4, 2000 |
| CVE-1999-0990 | Not scored | Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system. | Feb 4, 2000 |
| CVE-1999-0988 | Not scored | UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack. | Feb 4, 2000 |
| CVE-1999-0985 | Not scored | CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. | Feb 4, 2000 |
| CVE-1999-0984 | Not scored | Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. | Feb 4, 2000 |
| CVE-1999-0983 | Not scored | Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. | Feb 4, 2000 |
| CVE-1999-0970 | Not scored | The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created. | Feb 4, 2000 |
| CVE-1999-0952 | Not scored | Buffer overflow in Solaris lpstat via class argument allows local users to gain root access. | Feb 4, 2000 |
| CVE-1999-0949 | Not scored | Buffer overflow in canuum program for Canna input system allows local users to gain root privileges. | Feb 4, 2000 |
| CVE-1999-0948 | Not scored | Buffer overflow in uum program for Canna input system allows local users to gain root privileges. | Feb 4, 2000 |
| CVE-1999-0944 | Not scored | IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections. | Feb 4, 2000 |
| CVE-1999-0941 | Not scored | Mutt mail client allows a remote attacker to execute commands via shell metacharacters. | Feb 4, 2000 |
| CVE-1999-0929 | Not scored | Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests. | Feb 4, 2000 |
| CVE-1999-0925 | Not scored | UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers. | Feb 4, 2000 |
| CVE-1999-0919 | Not scored | A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections. | Feb 4, 2000 |
| CVE-1999-0913 | Not scored | dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters. | Feb 4, 2000 |
| CVE-1999-0911 | Not scored | Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories. | Feb 4, 2000 |
| CVE-1999-0910 | Not scored | Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user. | Feb 4, 2000 |
| CVE-1999-0885 | Not scored | Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL. | Feb 4, 2000 |
| CVE-1999-0882 | Not scored | Falcon web server allows remote attackers to determine the absolute path of the web root via long file names. | Feb 4, 2000 |
| CVE-1999-0872 | Not scored | Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file. | Feb 4, 2000 |
| CVE-1999-0863 | Not scored | Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI. | Feb 4, 2000 |
| CVE-1999-0862 | Not scored | Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file. | Feb 4, 2000 |
| CVE-1999-0860 | Not scored | Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack. | Feb 4, 2000 |
| CVE-1999-0857 | Not scored | FreeBSD gdc program allows local users to modify files via a symlink attack. | Feb 4, 2000 |
| CVE-1999-0855 | Not scored | Buffer overflow in FreeBSD gdc program. | Feb 4, 2000 |
| CVE-1999-0852 | Not scored | IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin. | Feb 4, 2000 |
| CVE-1999-0850 | Not scored | The default permissions for Endymion MailMan allow local users to read email or modify files. | Feb 4, 2000 |
| CVE-1999-0846 | Not scored | Denial of service in MDaemon 2.7 via a large number of connection attempts. | Feb 4, 2000 |
| CVE-1999-0845 | Not scored | Buffer overflow in SCO su program allows local users to gain root access via a long username. | Feb 4, 2000 |
| CVE-1999-0844 | Not scored | Denial of service in MDaemon WorldClient and WebConfig services via a long URL. | Feb 4, 2000 |
| CVE-1999-0843 | Not scored | Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port. | Feb 4, 2000 |
| CVE-1999-0841 | Not scored | Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type. | Feb 4, 2000 |
| CVE-1999-0840 | Not scored | Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option. | Feb 4, 2000 |
| CVE-1999-0830 | Not scored | Buffer overflow in SCO UnixWare Xsco command via a long argument. | Feb 4, 2000 |
| CVE-1999-0829 | Not scored | HP Secure Web Console uses weak encryption. | Feb 4, 2000 |
| CVE-1999-0828 | Not scored | UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission. | Feb 4, 2000 |
| CVE-1999-0827 | Not scored | By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing. | Feb 4, 2000 |
| CVE-1999-0825 | Not scored | The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail. | Feb 4, 2000 |
| CVE-1999-0822 | Not scored | Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command. | Feb 4, 2000 |
| CVE-1999-0821 | Not scored | FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument. | Feb 4, 2000 |
| CVE-1999-0818 | Not scored | Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable. | Feb 4, 2000 |
| CVE-1999-0816 | Not scored | The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024. | Feb 4, 2000 |
| CVE-1999-0798 | Not scored | Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. | Feb 4, 2000 |
| CVE-1999-0795 | Not scored | The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches. | Feb 4, 2000 |
| CVE-1999-0792 | Not scored | ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration. | Feb 4, 2000 |
| CVE-1999-0776 | Not scored | Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack. | Feb 4, 2000 |
| CVE-1999-0767 | Not scored | Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable. | Feb 4, 2000 |
| CVE-1999-0750 | Not scored | Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account. | Feb 4, 2000 |
| CVE-1999-0748 | Not scored | Buffer overflows in Red Hat net-tools package. | Feb 4, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.