Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
399,050 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0129 | Not scored | Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. | Sep 29, 1999 |
| CVE-1999-0128 | Not scored | Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. | Sep 29, 1999 |
| CVE-1999-0126 | Not scored | SGI IRIX buffer overflow in xterm and Xaw allows root access. | Sep 29, 1999 |
| CVE-1999-0125 | Not scored | Buffer overflow in SGI IRIX mailx program. | Sep 29, 1999 |
| CVE-1999-0122 | Not scored | Buffer overflow in AIX lchangelv gives root access. | Sep 29, 1999 |
| CVE-1999-0120 | Not scored | Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root. | Sep 29, 1999 |
| CVE-1999-0117 | Not scored | AIX passwd allows local users to gain root access. | Sep 29, 1999 |
| CVE-1999-0116 | Not scored | Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood. | Sep 29, 1999 |
| CVE-1999-0113 | Not scored | Some implementations of rlogin allow root access if given a -froot parameter. | Sep 29, 1999 |
| CVE-1999-0112 | Not scored | Buffer overflow in AIX dtterm program for the CDE. | Sep 29, 1999 |
| CVE-1999-0111 | Not scored | RIP v1 is susceptible to spoofing. | Sep 29, 1999 |
| CVE-1999-0109 | Not scored | Buffer overflow in ffbconfig in Solaris 2.5.1. | Sep 29, 1999 |
| CVE-1999-0108 | Not scored | The printers program in IRIX has a buffer overflow that gives root access to local users. | Sep 29, 1999 |
| CVE-1999-0103 | Not scored | Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm. | Sep 29, 1999 |
| CVE-1999-0102 | Not scored | Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line. | Sep 29, 1999 |
| CVE-1999-0100 | Not scored | Remote access in AIX innd 1.5.1, using control messages. | Sep 29, 1999 |
| CVE-1999-0099 | Not scored | Buffer overflow in syslog utility allows local or remote attackers to gain root privileges. | Sep 29, 1999 |
| CVE-1999-0097 | Not scored | The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character). | Sep 29, 1999 |
| CVE-1999-0096 | Not scored | Sendmail decode alias can be used to overwrite sensitive files. | Sep 29, 1999 |
| CVE-1999-0095 | Not scored | The debug command in Sendmail is enabled, allowing attackers to execute commands as root. | Sep 29, 1999 |
| CVE-1999-0094 | Not scored | AIX piodmgrsu command allows local users to gain additional group privileges. | Sep 29, 1999 |
| CVE-1999-0093 | Not scored | AIX nslookup command allows local users to obtain root access by not dropping privileges correctly. | Sep 29, 1999 |
| CVE-1999-0091 | Not scored | Buffer overflow in AIX writesrv command allows local users to obtain root access. | Sep 29, 1999 |
| CVE-1999-0090 | Not scored | Buffer overflow in AIX rcp command allows local users to obtain root access. | Sep 29, 1999 |
| CVE-1999-0087 | Not scored | Denial of service in AIX telnet can freeze a system and prevent users from accessing the server. | Sep 29, 1999 |
| CVE-1999-0085 | Not scored | Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname. | Sep 29, 1999 |
| CVE-1999-0084 | 8.4 High | Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0. | Sep 29, 1999 |
| CVE-1999-0083 | Not scored | getcwd() file descriptor leak in FTP. | Sep 29, 1999 |
| CVE-1999-0082 | Not scored | CWD ~root command in ftpd allows root access. | Sep 29, 1999 |
| CVE-1999-0081 | Not scored | wu-ftp allows files to be overwritten via the rnfr command. | Sep 29, 1999 |
| CVE-1999-0080 | Not scored | Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command. | Sep 29, 1999 |
| CVE-1999-0079 | Not scored | Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports. | Sep 29, 1999 |
| CVE-1999-0077 | Not scored | Predictable TCP sequence numbers allow spoofing. | Sep 29, 1999 |
| CVE-1999-0075 | Not scored | PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password. | Sep 29, 1999 |
| CVE-1999-0074 | Not scored | Listening TCP ports are sequentially allocated, allowing spoofing attacks. | Sep 29, 1999 |
| CVE-1999-0072 | Not scored | Buffer overflow in AIX xdat gives root access to local users. | Sep 29, 1999 |
| CVE-1999-0071 | Not scored | Apache httpd cookie buffer overflow for versions 1.1.1 and earlier. | Sep 29, 1999 |
| CVE-1999-0070 | Not scored | test-cgi program allows an attacker to list files on the server. | Sep 29, 1999 |
| CVE-1999-0069 | 8.4 High | Solaris ufsrestore buffer overflow. | Sep 29, 1999 |
| CVE-1999-0068 | Not scored | CGI PHP mylog script allows an attacker to read any file on the target server. | Sep 29, 1999 |
| CVE-1999-0067 | Not scored | phf CGI program allows remote command execution through shell metacharacters. | Sep 29, 1999 |
| CVE-1999-0066 | 9.8 Critical | AnyForm CGI remote execution. | Sep 29, 1999 |
| CVE-1999-0065 | Not scored | Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands. | Sep 29, 1999 |
| CVE-1999-0064 | Not scored | Buffer overflow in AIX lquerylv program gives root access to local users. | Sep 29, 1999 |
| CVE-1999-0063 | Not scored | Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port. | Sep 29, 1999 |
| CVE-1999-0062 | Not scored | The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage. | Sep 29, 1999 |
| CVE-1999-0060 | Not scored | Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool. | Sep 29, 1999 |
| CVE-1999-0059 | 7.3 High | IRIX fam service allows an attacker to obtain a list of all files on the server. | Sep 29, 1999 |
| CVE-1999-0058 | Not scored | Buffer overflow in PHP cgi program, php.cgi allows shell access. | Sep 29, 1999 |
| CVE-1999-0057 | Not scored | Vacation program allows command execution by remote users through a sendmail command. | Sep 29, 1999 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.