Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
399,629 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0352 | Not scored | ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption. | Feb 4, 2000 |
| CVE-1999-0347 | Not scored | Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character. | Feb 4, 2000 |
| CVE-1999-0345 | Not scored | Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. | Feb 4, 2000 |
| CVE-1999-0336 | Not scored | Buffer overflow in mstm in HP-UX allows local users to gain root access. | Feb 4, 2000 |
| CVE-1999-0333 | Not scored | HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack. | Feb 4, 2000 |
| CVE-1999-0331 | Not scored | Buffer overflow in Internet Explorer 4.0(1). | Feb 4, 2000 |
| CVE-1999-0330 | Not scored | Linux bdash game has a buffer overflow that allows local users to gain root access. | Feb 4, 2000 |
| CVE-1999-0319 | Not scored | Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting. | Feb 4, 2000 |
| CVE-1999-0317 | Not scored | Buffer overflow in Linux su command gives root access to local users. | Feb 4, 2000 |
| CVE-1999-0307 | Not scored | Buffer overflow in HP-UX cstm program allows local users to gain root privileges. | Feb 4, 2000 |
| CVE-1999-0306 | Not scored | buffer overflow in HP xlock program. | Feb 4, 2000 |
| CVE-1999-0298 | Not scored | ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack. | Feb 4, 2000 |
| CVE-1999-0287 | Not scored | Vulnerability in the Wguest CGI program. | Feb 4, 2000 |
| CVE-1999-0286 | Not scored | In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages. | Feb 4, 2000 |
| CVE-1999-0285 | Not scored | Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection. | Feb 4, 2000 |
| CVE-1999-0284 | Not scored | Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command. | Feb 4, 2000 |
| CVE-1999-0283 | Not scored | The Java Web Server would allow remote users to obtain the source code for CGI programs. | Feb 4, 2000 |
| CVE-1999-0271 | Not scored | Progressive Networks Real Video server (pnserver) can be crashed remotely. | Feb 4, 2000 |
| CVE-1999-0261 | Not scored | Netmanager Chameleon SMTPd has several buffer overflows that cause a crash. | Feb 4, 2000 |
| CVE-1999-0258 | Not scored | Bonk variation of teardrop IP fragmentation denial of service. | Feb 4, 2000 |
| CVE-1999-0257 | Not scored | Nestea variation of teardrop IP fragmentation denial of service. | Feb 4, 2000 |
| CVE-1999-0255 | Not scored | Buffer overflow in ircd allows arbitrary command execution. | Feb 4, 2000 |
| CVE-1999-0254 | Not scored | A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information. | Feb 4, 2000 |
| CVE-1999-0253 | Not scored | IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL. | Feb 4, 2000 |
| CVE-1999-0250 | Not scored | Denial of service in Qmail through long SMTP commands. | Feb 4, 2000 |
| CVE-1999-0249 | Not scored | Windows NT RSHSVC program allows remote users to execute arbitrary commands. | Feb 4, 2000 |
| CVE-1999-0246 | Not scored | HP Remote Watch allows a remote user to gain root access. | Feb 4, 2000 |
| CVE-1999-0243 | Not scored | Linux cfingerd could be exploited to gain root access. | Feb 4, 2000 |
| CVE-1999-0242 | Not scored | Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords. | Feb 4, 2000 |
| CVE-1999-0241 | Not scored | Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. | Feb 4, 2000 |
| CVE-1999-0240 | Not scored | Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy. | Feb 4, 2000 |
| CVE-1999-0238 | Not scored | php.cgi allows attackers to read any file on the system. | Feb 4, 2000 |
| CVE-1999-0235 | Not scored | Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access. | Feb 4, 2000 |
| CVE-1999-0232 | Not scored | Buffer overflow in NCSA WebServer (version 1.5c) gives remote access. | Feb 4, 2000 |
| CVE-1999-0231 | Not scored | Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access. | Feb 4, 2000 |
| CVE-1999-0229 | Not scored | Denial of service in Windows NT IIS server using ..\.. | Feb 4, 2000 |
| CVE-1999-0226 | Not scored | Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service. | Feb 4, 2000 |
| CVE-1999-0222 | Not scored | Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL. | Feb 4, 2000 |
| CVE-1999-0220 | Not scored | Attackers can do a denial of service of IRC by crashing the server. | Feb 4, 2000 |
| CVE-1999-0216 | Not scored | Denial of service of inetd on Linux through SYN and RST packets. | Feb 4, 2000 |
| CVE-1999-0213 | Not scored | libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind. | Feb 4, 2000 |
| CVE-1999-0205 | Not scored | Denial of service in Sendmail 8.6.11 and 8.6.12. | Feb 4, 2000 |
| CVE-1999-0200 | Not scored | Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password. | Feb 4, 2000 |
| CVE-1999-0198 | Not scored | finger .@host on some systems may print information on some user accounts. | Feb 4, 2000 |
| CVE-1999-0197 | Not scored | finger 0@host on some systems may print information on some user accounts. | Feb 4, 2000 |
| CVE-1999-0195 | Not scored | Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1. | Feb 4, 2000 |
| CVE-1999-0193 | Not scored | Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option. | Feb 4, 2000 |
| CVE-1999-0186 | Not scored | In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. | Feb 4, 2000 |
| CVE-1999-0171 | Not scored | Denial of service in syslog by sending it a large number of superfluous messages. | Feb 4, 2000 |
| CVE-1999-0169 | Not scored | NFS allows attackers to read and write any file on the system by specifying a false UID. | Feb 4, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.