Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,592 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0048 | Not scored | Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges. | Sep 29, 1999 |
| CVE-1999-0047 | Not scored | MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4. | Sep 29, 1999 |
| CVE-1999-0046 | Not scored | Buffer overflow of rlogin program using TERM environmental variable. | Sep 29, 1999 |
| CVE-1999-0045 | Not scored | List of arbitrary files on Web host via nph-test-cgi script. | Sep 29, 1999 |
| CVE-1999-0044 | Not scored | fsdump command in IRIX allows local users to obtain root access by modifying sensitive files. | Sep 29, 1999 |
| CVE-1999-0043 | 9.8 Critical | Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others. | Sep 29, 1999 |
| CVE-1999-0042 | Not scored | Buffer overflow in University of Washington's implementation of IMAP and POP servers. | Sep 29, 1999 |
| CVE-1999-0041 | Not scored | Buffer overflow in NLS (Natural Language Service). | Sep 29, 1999 |
| CVE-1999-0040 | Not scored | Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. | Sep 29, 1999 |
| CVE-1999-0039 | 7.3 High | webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter. | Sep 29, 1999 |
| CVE-1999-0038 | 8.4 High | Buffer overflow in xlock program allows local users to execute commands as root. | Sep 29, 1999 |
| CVE-1999-0037 | Not scored | Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail. | Sep 29, 1999 |
| CVE-1999-0036 | 8.4 High | IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files. | Sep 29, 1999 |
| CVE-1999-0035 | 5.4 Medium | Race condition in signal handling routine in ftpd, allowing read/write arbitrary files. | Sep 29, 1999 |
| CVE-1999-0034 | Not scored | Buffer overflow in suidperl (sperl), Perl 4.x and 5.x. | Sep 29, 1999 |
| CVE-1999-0032 | Not scored | Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option. | Sep 29, 1999 |
| CVE-1999-0029 | 8.4 High | root privileges via buffer overflow in ordist command on SGI IRIX systems. | Sep 29, 1999 |
| CVE-1999-0028 | Not scored | root privileges via buffer overflow in login/scheme command on SGI IRIX systems. | Sep 29, 1999 |
| CVE-1999-0027 | Not scored | root privileges via buffer overflow in eject command on SGI IRIX systems. | Sep 29, 1999 |
| CVE-1999-0026 | Not scored | root privileges via buffer overflow in pset command on SGI IRIX systems. | Sep 29, 1999 |
| CVE-1999-0025 | Not scored | root privileges via buffer overflow in df command on SGI IRIX systems. | Sep 29, 1999 |
| CVE-1999-0024 | Not scored | DNS cache poisoning via BIND, by predictable query IDs. | Sep 29, 1999 |
| CVE-1999-0023 | Not scored | Local user gains root privileges via buffer overflow in rdist, via lookup() function. | Sep 29, 1999 |
| CVE-1999-0022 | 7.8 High | Local user gains root privileges via buffer overflow in rdist, via expstr() function. | Sep 29, 1999 |
| CVE-1999-0021 | Not scored | Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program. | Sep 29, 1999 |
| CVE-1999-0019 | Not scored | Delete or create a file via rpc.statd, due to invalid information. | Sep 29, 1999 |
| CVE-1999-0018 | Not scored | Buffer overflow in statd allows root privileges. | Sep 29, 1999 |
| CVE-1999-0017 | Not scored | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. | Sep 29, 1999 |
| CVE-1999-0016 | Not scored | Land IP denial of service. | Sep 29, 1999 |
| CVE-1999-0014 | Not scored | Unauthorized privileged access or denial of service via dtappgather program in CDE. | Sep 29, 1999 |
| CVE-1999-0013 | 8.4 High | Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user. | Sep 29, 1999 |
| CVE-1999-0012 | 7.0 High | Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names. | Sep 29, 1999 |
| CVE-1999-0011 | 5.4 Medium | Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. | Sep 29, 1999 |
| CVE-1999-0010 | Not scored | Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. | Sep 29, 1999 |
| CVE-1999-0009 | Not scored | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. | Sep 29, 1999 |
| CVE-1999-0008 | Not scored | Buffer overflow in NIS+, in Sun's rpc.nisd program. | Sep 29, 1999 |
| CVE-1999-0007 | Not scored | Information from SSL-encrypted sessions via PKCS #1. | Sep 29, 1999 |
| CVE-1999-0006 | 9.8 Critical | Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command. | Sep 29, 1999 |
| CVE-1999-0005 | Not scored | Arbitrary command execution via IMAP buffer overflow in authenticate command. | Sep 29, 1999 |
| CVE-1999-0003 | Not scored | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). | Sep 29, 1999 |
| CVE-1999-0002 | Not scored | Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. | Sep 29, 1999 |
| CVE-1999-0211 | Not scored | Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone. | Sep 29, 1999 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.