Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,321 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0081 | Not scored | wu-ftp allows files to be overwritten via the rnfr command. | Sep 29, 1999 |
| CVE-1999-0080 | Not scored | Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command. | Sep 29, 1999 |
| CVE-1999-0079 | Not scored | Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports. | Sep 29, 1999 |
| CVE-1999-0077 | Not scored | Predictable TCP sequence numbers allow spoofing. | Sep 29, 1999 |
| CVE-1999-0075 | Not scored | PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password. | Sep 29, 1999 |
| CVE-1999-0074 | Not scored | Listening TCP ports are sequentially allocated, allowing spoofing attacks. | Sep 29, 1999 |
| CVE-1999-0072 | Not scored | Buffer overflow in AIX xdat gives root access to local users. | Sep 29, 1999 |
| CVE-1999-0071 | Not scored | Apache httpd cookie buffer overflow for versions 1.1.1 and earlier. | Sep 29, 1999 |
| CVE-1999-0070 | Not scored | test-cgi program allows an attacker to list files on the server. | Sep 29, 1999 |
| CVE-1999-0069 | 8.4 High | Solaris ufsrestore buffer overflow. | Sep 29, 1999 |
| CVE-1999-0068 | Not scored | CGI PHP mylog script allows an attacker to read any file on the target server. | Sep 29, 1999 |
| CVE-1999-0067 | Not scored | phf CGI program allows remote command execution through shell metacharacters. | Sep 29, 1999 |
| CVE-1999-0066 | 9.8 Critical | AnyForm CGI remote execution. | Sep 29, 1999 |
| CVE-1999-0065 | Not scored | Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands. | Sep 29, 1999 |
| CVE-1999-0064 | Not scored | Buffer overflow in AIX lquerylv program gives root access to local users. | Sep 29, 1999 |
| CVE-1999-0063 | Not scored | Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port. | Sep 29, 1999 |
| CVE-1999-0062 | Not scored | The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage. | Sep 29, 1999 |
| CVE-1999-0060 | Not scored | Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool. | Sep 29, 1999 |
| CVE-1999-0059 | 7.3 High | IRIX fam service allows an attacker to obtain a list of all files on the server. | Sep 29, 1999 |
| CVE-1999-0058 | Not scored | Buffer overflow in PHP cgi program, php.cgi allows shell access. | Sep 29, 1999 |
| CVE-1999-0057 | Not scored | Vacation program allows command execution by remote users through a sendmail command. | Sep 29, 1999 |
| CVE-1999-0056 | Not scored | Buffer overflow in Sun's ping program can give root access to local users. | Sep 29, 1999 |
| CVE-1999-0055 | Not scored | Buffer overflows in Sun libnsl allow root access. | Sep 29, 1999 |
| CVE-1999-0054 | Not scored | Sun's ftpd daemon can be subjected to a denial of service. | Sep 29, 1999 |
| CVE-1999-0053 | Not scored | TCP RST denial of service in FreeBSD. | Sep 29, 1999 |
| CVE-1999-0052 | 7.5 High | IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash. | Sep 29, 1999 |
| CVE-1999-0051 | Not scored | Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX. | Sep 29, 1999 |
| CVE-1999-0050 | Not scored | Buffer overflow in HP-UX newgrp program. | Sep 29, 1999 |
| CVE-1999-0049 | Not scored | Csetup under IRIX allows arbitrary file creation or overwriting. | Sep 29, 1999 |
| CVE-1999-0048 | Not scored | Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges. | Sep 29, 1999 |
| CVE-1999-0047 | Not scored | MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4. | Sep 29, 1999 |
| CVE-1999-0046 | Not scored | Buffer overflow of rlogin program using TERM environmental variable. | Sep 29, 1999 |
| CVE-1999-0045 | Not scored | List of arbitrary files on Web host via nph-test-cgi script. | Sep 29, 1999 |
| CVE-1999-0044 | Not scored | fsdump command in IRIX allows local users to obtain root access by modifying sensitive files. | Sep 29, 1999 |
| CVE-1999-0043 | 9.8 Critical | Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others. | Sep 29, 1999 |
| CVE-1999-0042 | Not scored | Buffer overflow in University of Washington's implementation of IMAP and POP servers. | Sep 29, 1999 |
| CVE-1999-0041 | Not scored | Buffer overflow in NLS (Natural Language Service). | Sep 29, 1999 |
| CVE-1999-0040 | Not scored | Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. | Sep 29, 1999 |
| CVE-1999-0039 | 7.3 High | webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter. | Sep 29, 1999 |
| CVE-1999-0038 | 8.4 High | Buffer overflow in xlock program allows local users to execute commands as root. | Sep 29, 1999 |
| CVE-1999-0037 | Not scored | Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail. | Sep 29, 1999 |
| CVE-1999-0036 | 8.4 High | IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files. | Sep 29, 1999 |
| CVE-1999-0035 | 5.4 Medium | Race condition in signal handling routine in ftpd, allowing read/write arbitrary files. | Sep 29, 1999 |
| CVE-1999-0034 | Not scored | Buffer overflow in suidperl (sperl), Perl 4.x and 5.x. | Sep 29, 1999 |
| CVE-1999-0032 | Not scored | Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option. | Sep 29, 1999 |
| CVE-1999-0029 | 8.4 High | root privileges via buffer overflow in ordist command on SGI IRIX systems. | Sep 29, 1999 |
| CVE-1999-0028 | Not scored | root privileges via buffer overflow in login/scheme command on SGI IRIX systems. | Sep 29, 1999 |
| CVE-1999-0027 | Not scored | root privileges via buffer overflow in eject command on SGI IRIX systems. | Sep 29, 1999 |
| CVE-1999-0026 | Not scored | root privileges via buffer overflow in pset command on SGI IRIX systems. | Sep 29, 1999 |
| CVE-1999-0025 | Not scored | root privileges via buffer overflow in df command on SGI IRIX systems. | Sep 29, 1999 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.