Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,705 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0598 | Not scored | A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection. | Feb 4, 2000 |
| CVE-1999-0597 | Not scored | A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire. | Feb 4, 2000 |
| CVE-1999-0596 | Not scored | A Windows NT log file has an inappropriate maximum size or retention period. | Feb 4, 2000 |
| CVE-1999-0595 | Not scored | A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded. | Feb 4, 2000 |
| CVE-1999-0594 | Not scored | A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive. | Feb 4, 2000 |
| CVE-1999-0593 | Not scored | The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in. | Feb 4, 2000 |
| CVE-1999-0592 | Not scored | The Logon box of a Windows NT system displays the name of the last user who logged in. | Feb 4, 2000 |
| CVE-1999-0591 | Not scored | An event log in Windows NT has inappropriate access permissions. | Feb 4, 2000 |
| CVE-1999-0590 | Not scored | A system does not present an appropriate legal message or warning to a user who is accessing it. | Feb 4, 2000 |
| CVE-1999-0589 | Not scored | A system-critical Windows NT registry key has inappropriate permissions. | Feb 4, 2000 |
| CVE-1999-0588 | Not scored | A filter in a router or firewall allows unusual fragmented packets. | Feb 4, 2000 |
| CVE-1999-0587 | Not scored | A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data. | Feb 4, 2000 |
| CVE-1999-0586 | Not scored | A network service is running on a nonstandard port. | Feb 4, 2000 |
| CVE-1999-0585 | Not scored | A Windows NT administrator account has the default name of Administrator. | Feb 4, 2000 |
| CVE-1999-0584 | Not scored | A Windows NT file system is not NTFS. | Feb 4, 2000 |
| CVE-1999-0583 | Not scored | There is a one-way or two-way trust relationship between Windows NT domains. | Feb 4, 2000 |
| CVE-1999-0582 | Not scored | A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc. | Feb 4, 2000 |
| CVE-1999-0581 | Not scored | The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions. | Feb 4, 2000 |
| CVE-1999-0580 | Not scored | The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions. | Feb 4, 2000 |
| CVE-1999-0579 | Not scored | A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys. | Feb 4, 2000 |
| CVE-1999-0578 | Not scored | A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys. | Feb 4, 2000 |
| CVE-1999-0577 | Not scored | A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories. | Feb 4, 2000 |
| CVE-1999-0576 | Not scored | A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories. | Feb 4, 2000 |
| CVE-1999-0575 | Not scored | A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and… | Feb 4, 2000 |
| CVE-1999-0572 | Not scored | .reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks. | Feb 4, 2000 |
| CVE-1999-0571 | Not scored | A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts. | Feb 4, 2000 |
| CVE-1999-0570 | Not scored | Windows NT is not using a password filter utility, e.g. PASSFILT.DLL. | Feb 4, 2000 |
| CVE-1999-0569 | Not scored | A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file. | Feb 4, 2000 |
| CVE-1999-0568 | Not scored | rpc.admind in Solaris is not running in a secure mode. | Feb 4, 2000 |
| CVE-1999-0565 | Not scored | A Sendmail alias allows input to be piped to a program. | Feb 4, 2000 |
| CVE-1999-0564 | Not scored | An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled. | Feb 4, 2000 |
| CVE-1999-0562 | Not scored | The registry in Windows NT can be accessed remotely by users who are not administrators. | Feb 4, 2000 |
| CVE-1999-0561 | Not scored | IIS has the #exec function enabled for Server Side Include (SSI) files. | Feb 4, 2000 |
| CVE-1999-0560 | Not scored | A system-critical Windows NT file or directory has inappropriate permissions. | Feb 4, 2000 |
| CVE-1999-0559 | Not scored | A system-critical Unix file or directory has inappropriate permissions. | Feb 4, 2000 |
| CVE-1999-0556 | Not scored | Two or more Unix accounts have the same UID. | Feb 4, 2000 |
| CVE-1999-0555 | Not scored | A Unix account with a name other than "root" has UID 0, i.e. root privileges. | Feb 4, 2000 |
| CVE-1999-0554 | Not scored | NFS exports system-critical data to the world, e.g. / or a password file. | Feb 4, 2000 |
| CVE-1999-0550 | Not scored | A router's routing tables can be obtained from arbitrary hosts. | Feb 4, 2000 |
| CVE-1999-0549 | Not scored | Windows NT automatically logs in an administrator upon rebooting. | Feb 4, 2000 |
| CVE-1999-0548 | Not scored | A superfluous NFS server is running, but it is not importing or exporting any file systems. | Feb 4, 2000 |
| CVE-1999-0547 | Not scored | An SSH server allows authentication through the .rhosts file. | Feb 4, 2000 |
| CVE-1999-0546 | Not scored | The Windows NT guest account is enabled. | Feb 4, 2000 |
| CVE-1999-0541 | Not scored | A password for accessing a WWW URL is guessable. | Feb 4, 2000 |
| CVE-1999-0539 | Not scored | A trust relationship exists between two Unix hosts. | Feb 4, 2000 |
| CVE-1999-0537 | Not scored | A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc. | Feb 4, 2000 |
| CVE-1999-0535 | Not scored | A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness. | Feb 4, 2000 |
| CVE-1999-0534 | Not scored | A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority,… | Feb 4, 2000 |
| CVE-1999-0533 | Not scored | A DNS server allows inverse queries. | Feb 4, 2000 |
| CVE-1999-0532 | Not scored | A DNS server allows zone transfers. | Feb 4, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.