Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,616 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0227 | Not scored | Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service. | Sep 29, 1999 |
| CVE-1999-0224 | Not scored | Denial of service in Windows NT messenger service through a long username. | Sep 29, 1999 |
| CVE-1999-0221 | Not scored | Denial of service of Ascend routers through port 150 (remote administration). | Sep 29, 1999 |
| CVE-1999-0219 | Not scored | Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command. | Sep 29, 1999 |
| CVE-1999-0218 | Not scored | Livingston portmaster machines could be rebooted via a series of commands. | Sep 29, 1999 |
| CVE-1999-0217 | Not scored | Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems. | Sep 29, 1999 |
| CVE-1999-0215 | Not scored | Routed allows attackers to append data to files. | Sep 29, 1999 |
| CVE-1999-0214 | Not scored | Denial of service by sending forged ICMP unreachable packets. | Sep 29, 1999 |
| CVE-1999-0209 | Not scored | The SunView (SunTools) selection_svc facility allows remote users to read files. | Sep 29, 1999 |
| CVE-1999-0208 | Not scored | rpc.ypupdated (NIS) allows remote users to execute arbitrary commands. | Sep 29, 1999 |
| CVE-1999-0207 | Not scored | Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command. | Sep 29, 1999 |
| CVE-1999-0206 | Not scored | MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access. | Sep 29, 1999 |
| CVE-1999-0204 | Not scored | Sendmail 8.6.9 allows remote attackers to execute root commands, using ident. | Sep 29, 1999 |
| CVE-1999-0202 | Not scored | The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands. | Sep 29, 1999 |
| CVE-1999-0201 | Not scored | A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user. | Sep 29, 1999 |
| CVE-1999-0196 | Not scored | websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable). | Sep 29, 1999 |
| CVE-1999-0194 | Not scored | Denial of service in in.comsat allows attackers to generate messages. | Sep 29, 1999 |
| CVE-1999-0192 | Not scored | Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable. | Sep 29, 1999 |
| CVE-1999-0191 | Not scored | IIS newdsn.exe CGI script allows remote users to overwrite files. | Sep 29, 1999 |
| CVE-1999-0190 | Not scored | Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access. | Sep 29, 1999 |
| CVE-1999-0188 | Not scored | The passwd command in Solaris can be subjected to a denial of service. | Sep 29, 1999 |
| CVE-1999-0185 | Not scored | In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution. | Sep 29, 1999 |
| CVE-1999-0184 | Not scored | When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records. | Sep 29, 1999 |
| CVE-1999-0183 | Not scored | Linux implementations of TFTP would allow access to files outside the restricted directory. | Sep 29, 1999 |
| CVE-1999-0182 | Not scored | Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password. | Sep 29, 1999 |
| CVE-1999-0181 | Not scored | The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands. | Sep 29, 1999 |
| CVE-1999-0180 | Not scored | in.rshd allows users to login with a NULL username and execute commands. | Sep 29, 1999 |
| CVE-1999-0179 | Not scored | Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share. | Sep 29, 1999 |
| CVE-1999-0178 | Not scored | Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string. | Sep 29, 1999 |
| CVE-1999-0177 | Not scored | The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs. | Sep 29, 1999 |
| CVE-1999-0176 | Not scored | The Webgais program allows a remote user to execute arbitrary commands. | Sep 29, 1999 |
| CVE-1999-0175 | Not scored | The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server. | Sep 29, 1999 |
| CVE-1999-0174 | Not scored | The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack. | Sep 29, 1999 |
| CVE-1999-0173 | Not scored | FormMail CGI program can be used by web servers other than the host server that the program resides on. | Sep 29, 1999 |
| CVE-1999-0172 | Not scored | FormMail CGI program allows remote execution of commands. | Sep 29, 1999 |
| CVE-1999-0170 | Not scored | Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list. | Sep 29, 1999 |
| CVE-1999-0168 | Not scored | The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place. For example, NFS file… | Sep 29, 1999 |
| CVE-1999-0167 | Not scored | In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system. | Sep 29, 1999 |
| CVE-1999-0166 | Not scored | NFS allows users to use a "cd .." command to access other directories besides the exported file system. | Sep 29, 1999 |
| CVE-1999-0164 | Not scored | A race condition in the Solaris ps command allows an attacker to overwrite critical files. | Sep 29, 1999 |
| CVE-1999-0162 | Not scored | The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering. | Sep 29, 1999 |
| CVE-1999-0161 | Not scored | In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering. | Sep 29, 1999 |
| CVE-1999-0160 | Not scored | Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections. | Sep 29, 1999 |
| CVE-1999-0159 | 3.5 Low | Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11.x releases. | Sep 29, 1999 |
| CVE-1999-0158 | Not scored | Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known. | Sep 29, 1999 |
| CVE-1999-0157 | Not scored | Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service. | Sep 29, 1999 |
| CVE-1999-0155 | Not scored | The ghostscript command with the -dSAFER option allows remote attackers to execute commands. | Sep 29, 1999 |
| CVE-1999-0153 | Not scored | Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. | Sep 29, 1999 |
| CVE-1999-0152 | Not scored | The DG/UX finger daemon allows remote command execution through shell metacharacters. | Sep 29, 1999 |
| CVE-1999-0150 | Not scored | The Perl fingerd program allows arbitrary command execution from remote users. | Sep 29, 1999 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.