Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,705 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0741 | Not scored | QMS CrownNet Unix Utilities for 2060 allows root to log on without a password. | Feb 4, 2000 |
| CVE-1999-0739 | Not scored | The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | Feb 4, 2000 |
| CVE-1999-0738 | Not scored | The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | Feb 4, 2000 |
| CVE-1999-0737 | Not scored | The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | Feb 4, 2000 |
| CVE-1999-0736 | Not scored | The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | Feb 4, 2000 |
| CVE-1999-0712 | Not scored | A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable. | Feb 4, 2000 |
| CVE-1999-0698 | Not scored | Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux. | Feb 4, 2000 |
| CVE-1999-0684 | Not scored | Denial of service in Sendmail 8.8.6 in HPUX. | Feb 4, 2000 |
| CVE-1999-0677 | Not scored | The WebRamp web administration utility has a default password. | Feb 4, 2000 |
| CVE-1999-0673 | Not scored | Buffer overflow in ALMail32 POP3 client via From: or To: headers. | Feb 4, 2000 |
| CVE-1999-0670 | Not scored | Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands. | Feb 4, 2000 |
| CVE-1999-0669 | Not scored | The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy. | Feb 4, 2000 |
| CVE-1999-0667 | Not scored | The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service. | Feb 4, 2000 |
| CVE-1999-0665 | Not scored | An application-critical Windows NT registry key has an inappropriate value. | Feb 4, 2000 |
| CVE-1999-0664 | Not scored | An application-critical Windows NT registry key has inappropriate permissions. | Feb 4, 2000 |
| CVE-1999-0663 | Not scored | A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified. | Feb 4, 2000 |
| CVE-1999-0662 | Not scored | A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete. | Feb 4, 2000 |
| CVE-1999-0661 | Not scored | A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII… | Feb 4, 2000 |
| CVE-1999-0657 | Not scored | WinGate is being used. | Feb 4, 2000 |
| CVE-1999-0656 | Not scored | The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names. | Feb 4, 2000 |
| CVE-1999-0654 | Not scored | The OS/2 or POSIX subsystem in NT is enabled. | Feb 4, 2000 |
| CVE-1999-0653 | Not scored | A component service related to NIS+ is running. | Feb 4, 2000 |
| CVE-1999-0651 | Not scored | The rsh/rlogin service is running. | Feb 4, 2000 |
| CVE-1999-0650 | Not scored | The netstat service is running, which provides sensitive information to remote attackers. | Feb 4, 2000 |
| CVE-1999-0641 | Not scored | The UUCP service is running. | Feb 4, 2000 |
| CVE-1999-0640 | Not scored | The Gopher service is running. | Feb 4, 2000 |
| CVE-1999-0639 | Not scored | The chargen service is running. | Feb 4, 2000 |
| CVE-1999-0638 | Not scored | The daytime service is running. | Feb 4, 2000 |
| CVE-1999-0637 | Not scored | The systat service is running. | Feb 4, 2000 |
| CVE-1999-0636 | Not scored | The discard service is running. | Feb 4, 2000 |
| CVE-1999-0635 | Not scored | The echo service is running. | Feb 4, 2000 |
| CVE-1999-0632 | 5.3 Medium | The RPC portmapper service is running. | Feb 4, 2000 |
| CVE-1999-0630 | Not scored | The NT Alerter and Messenger services are running. | Feb 4, 2000 |
| CVE-1999-0629 | Not scored | The ident/identd service is running. | Feb 4, 2000 |
| CVE-1999-0625 | Not scored | The rpc.rquotad service is running. | Feb 4, 2000 |
| CVE-1999-0624 | Not scored | The rstat/rstatd service is running. | Feb 4, 2000 |
| CVE-1999-0618 | Not scored | The rexec service is running. | Feb 4, 2000 |
| CVE-1999-0613 | Not scored | The rpc.sprayd service is running. | Feb 4, 2000 |
| CVE-1999-0611 | Not scored | A system-critical Windows NT registry key has an inappropriate value. | Feb 4, 2000 |
| CVE-1999-0610 | Not scored | An incorrect configuration of the Webcart CGI program could disclose private information. | Feb 4, 2000 |
| CVE-1999-0609 | Not scored | An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information. | Feb 4, 2000 |
| CVE-1999-0607 | Not scored | quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges. | Feb 4, 2000 |
| CVE-1999-0606 | Not scored | An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information. | Feb 4, 2000 |
| CVE-1999-0605 | Not scored | An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information. | Feb 4, 2000 |
| CVE-1999-0604 | Not scored | An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information. | Feb 4, 2000 |
| CVE-1999-0603 | Not scored | In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc. | Feb 4, 2000 |
| CVE-1999-0602 | Not scored | A network intrusion detection system (IDS) does not properly reassemble fragmented packets. | Feb 4, 2000 |
| CVE-1999-0601 | Not scored | A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets. | Feb 4, 2000 |
| CVE-1999-0600 | Not scored | A network intrusion detection system (IDS) does not verify the checksum on a packet. | Feb 4, 2000 |
| CVE-1999-0599 | Not scored | A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers. | Feb 4, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.