Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

398,321 vulnerabilities match.

CVESeveritySummary
CVE-1999-0024Not scoredDNS cache poisoning via BIND, by predictable query IDs.
CVE-1999-0023Not scoredLocal user gains root privileges via buffer overflow in rdist, via lookup() function.
CVE-1999-00227.8 HighLocal user gains root privileges via buffer overflow in rdist, via expstr() function.
CVE-1999-0021Not scoredArbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.
CVE-1999-0019Not scoredDelete or create a file via rpc.statd, due to invalid information.
CVE-1999-0018Not scoredBuffer overflow in statd allows root privileges.
CVE-1999-0017Not scoredFTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
CVE-1999-0016Not scoredLand IP denial of service.
CVE-1999-0014Not scoredUnauthorized privileged access or denial of service via dtappgather program in CDE.
CVE-1999-00138.4 HighStolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.
CVE-1999-00127.0 HighSome web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
CVE-1999-00115.4 MediumDenial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
CVE-1999-0010Not scoredDenial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
CVE-1999-0009Not scoredInverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
CVE-1999-0008Not scoredBuffer overflow in NIS+, in Sun's rpc.nisd program.
CVE-1999-0007Not scoredInformation from SSL-encrypted sessions via PKCS #1.
CVE-1999-00069.8 CriticalBuffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
CVE-1999-0005Not scoredArbitrary command execution via IMAP buffer overflow in authenticate command.
CVE-1999-0003Not scoredExecute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
CVE-1999-0002Not scoredBuffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
CVE-1999-0211Not scoredExtra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone.

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.