Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
399,050 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0296 | Not scored | Solaris volrmmount program allows attackers to read any file. | Sep 29, 1999 |
| CVE-1999-0295 | Not scored | Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges. | Sep 29, 1999 |
| CVE-1999-0294 | Not scored | All records in a WINS database can be deleted through SNMP for a denial of service. | Sep 29, 1999 |
| CVE-1999-0293 | Not scored | AAA authentication on Cisco systems allows attackers to execute commands without authorization. | Sep 29, 1999 |
| CVE-1999-0292 | Not scored | Denial of service through Winpopup using large user names. | Sep 29, 1999 |
| CVE-1999-0289 | Not scored | The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL. | Sep 29, 1999 |
| CVE-1999-0288 | Not scored | The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets. | Sep 29, 1999 |
| CVE-1999-0281 | Not scored | Denial of service in IIS using long URLs. | Sep 29, 1999 |
| CVE-1999-0279 | Not scored | Excite for Web Servers (EWS) allows remote command execution via shell metacharacters. | Sep 29, 1999 |
| CVE-1999-0278 | Not scored | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. | Sep 29, 1999 |
| CVE-1999-0277 | Not scored | The WorkMan program can be used to overwrite any file to get root access. | Sep 29, 1999 |
| CVE-1999-0276 | Not scored | mSQL v2.0.1 and below allows remote execution through a buffer overflow. | Sep 29, 1999 |
| CVE-1999-0274 | Not scored | Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made. | Sep 29, 1999 |
| CVE-1999-0273 | Not scored | Denial of service through Solaris 2.5.1 telnet by sending ^D characters. | Sep 29, 1999 |
| CVE-1999-0272 | Not scored | Denial of service in Slmail v2.5 through the POP3 port. | Sep 29, 1999 |
| CVE-1999-0269 | Not scored | Netscape Enterprise servers may list files through the PageServices query. | Sep 29, 1999 |
| CVE-1999-0267 | Not scored | Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution. | Sep 29, 1999 |
| CVE-1999-0266 | Not scored | The info2www CGI script allows remote file access or remote command execution. | Sep 29, 1999 |
| CVE-1999-0265 | Not scored | ICMP redirect messages may crash or lock up a host. | Sep 29, 1999 |
| CVE-1999-0264 | Not scored | htmlscript CGI program allows remote read access to files. | Sep 29, 1999 |
| CVE-1999-0263 | Not scored | Solaris SUNWadmap can be exploited to obtain root access. | Sep 29, 1999 |
| CVE-1999-0262 | Not scored | Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string. | Sep 29, 1999 |
| CVE-1999-0260 | Not scored | The jj CGI program allows command execution via shell metacharacters. | Sep 29, 1999 |
| CVE-1999-0256 | Not scored | Buffer overflow in War FTP allows remote execution of commands. | Sep 29, 1999 |
| CVE-1999-0252 | Not scored | Buffer overflow in listserv allows arbitrary command execution. | Sep 29, 1999 |
| CVE-1999-0251 | Not scored | Denial of service in talk program allows remote attackers to disrupt a user's display. | Sep 29, 1999 |
| CVE-1999-0245 | Not scored | Some configurations of NIS+ in Linux allowed attackers to log in as the user "+". | Sep 29, 1999 |
| CVE-1999-0244 | Not scored | Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root. | Sep 29, 1999 |
| CVE-1999-0239 | Not scored | Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET. | Sep 29, 1999 |
| CVE-1999-0237 | Not scored | Remote execution of arbitrary commands through Guestbook CGI program. | Sep 29, 1999 |
| CVE-1999-0236 | Not scored | ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. | Sep 29, 1999 |
| CVE-1999-0234 | Not scored | Bash treats any character with a value of 255 as a command separator. | Sep 29, 1999 |
| CVE-1999-0230 | Not scored | Buffer overflow in Cisco 7xx routers through the telnet service. | Sep 29, 1999 |
| CVE-1999-0228 | Not scored | Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT. | Sep 29, 1999 |
| CVE-1999-0227 | Not scored | Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service. | Sep 29, 1999 |
| CVE-1999-0224 | Not scored | Denial of service in Windows NT messenger service through a long username. | Sep 29, 1999 |
| CVE-1999-0221 | Not scored | Denial of service of Ascend routers through port 150 (remote administration). | Sep 29, 1999 |
| CVE-1999-0219 | Not scored | Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command. | Sep 29, 1999 |
| CVE-1999-0218 | Not scored | Livingston portmaster machines could be rebooted via a series of commands. | Sep 29, 1999 |
| CVE-1999-0217 | Not scored | Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems. | Sep 29, 1999 |
| CVE-1999-0215 | Not scored | Routed allows attackers to append data to files. | Sep 29, 1999 |
| CVE-1999-0214 | Not scored | Denial of service by sending forged ICMP unreachable packets. | Sep 29, 1999 |
| CVE-1999-0209 | Not scored | The SunView (SunTools) selection_svc facility allows remote users to read files. | Sep 29, 1999 |
| CVE-1999-0208 | Not scored | rpc.ypupdated (NIS) allows remote users to execute arbitrary commands. | Sep 29, 1999 |
| CVE-1999-0207 | Not scored | Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command. | Sep 29, 1999 |
| CVE-1999-0206 | Not scored | MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access. | Sep 29, 1999 |
| CVE-1999-0204 | Not scored | Sendmail 8.6.9 allows remote attackers to execute root commands, using ident. | Sep 29, 1999 |
| CVE-1999-0202 | Not scored | The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands. | Sep 29, 1999 |
| CVE-1999-0201 | Not scored | A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user. | Sep 29, 1999 |
| CVE-1999-0196 | Not scored | websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable). | Sep 29, 1999 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.