Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,892 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0942 | Not scored | UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes. | Oct 13, 2000 |
| CVE-1999-0932 | Not scored | Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file. | Oct 13, 2000 |
| CVE-1999-0928 | Not scored | Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL. | Oct 13, 2000 |
| CVE-1999-0927 | Not scored | NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack. | Oct 13, 2000 |
| CVE-1999-0912 | Not scored | FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files. | Oct 13, 2000 |
| CVE-1999-0904 | Not scored | Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username. | Oct 13, 2000 |
| CVE-1999-0873 | Not scored | Buffer overflow in Skyfull mail server via MAIL FROM command. | Oct 13, 2000 |
| CVE-1999-0826 | Not scored | Buffer overflow in FreeBSD angband allows local users to gain privileges. | Oct 13, 2000 |
| CVE-1999-0823 | Not scored | Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument. | Oct 13, 2000 |
| CVE-1999-0791 | Not scored | Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol. | Oct 13, 2000 |
| CVE-1999-0788 | Not scored | Arkiea nlservd allows remote attackers to conduct a denial of service. | Oct 13, 2000 |
| CVE-1999-0787 | Not scored | The SSH authentication agent follows symlinks via a UNIX domain socket. | Oct 13, 2000 |
| CVE-1999-0759 | Not scored | Buffer overflow in FuseMAIL POP service via long USER and PASS commands. | Oct 13, 2000 |
| CVE-1999-0697 | Not scored | SCO Doctor allows local users to gain root privileges through a Tools option. | Oct 13, 2000 |
| CVE-1999-0679 | Not scored | Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option. | Oct 13, 2000 |
| CVE-1999-0675 | Not scored | Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host. | Oct 13, 2000 |
| CVE-1999-0672 | Not scored | Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics. | Oct 13, 2000 |
| CVE-1999-0671 | Not scored | Buffer overflow in ToxSoft NextFTP client through CWD command. | Oct 13, 2000 |
| CVE-1999-0440 | Not scored | The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages. | Oct 13, 2000 |
| CVE-1999-0429 | Not scored | The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference. | Oct 13, 2000 |
| CVE-1999-0403 | Not scored | A bug in Cyrix CPUs on Linux allows local users to perform a denial of service. | Oct 13, 2000 |
| CVE-1999-0395 | Not scored | A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server. | Oct 13, 2000 |
| CVE-1999-0393 | Not scored | Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers. | Oct 13, 2000 |
| CVE-1999-0358 | Not scored | Digital Unix 4.0 has a buffer overflow in the inc program of the mh package. | Oct 13, 2000 |
| CVE-1999-0248 | Not scored | A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials. | Oct 13, 2000 |
| CVE-1999-0247 | Not scored | Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands. | Oct 13, 2000 |
| CVE-1999-0145 | Not scored | Sendmail WIZ command enabled, allowing root access. | Oct 13, 2000 |
| CVE-2000-0802 | Not scored | The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access to the menu by modifying the registry key that starts BAIR. | Sep 21, 2000 |
| CVE-2000-0801 | Not scored | Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option. | Sep 21, 2000 |
| CVE-2000-0800 | Not scored | String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gain root privileges. | Sep 21, 2000 |
| CVE-2000-0798 | Not scored | The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files. | Sep 21, 2000 |
| CVE-2000-0794 | Not scored | Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview. | Sep 21, 2000 |
| CVE-2000-0793 | Not scored | Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system. | Sep 21, 2000 |
| CVE-2000-0791 | Not scored | Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse. | Sep 21, 2000 |
| CVE-2000-0789 | Not scored | WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges. | Sep 21, 2000 |
| CVE-2000-0785 | Not scored | WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message of the Day (MOTD) to the specified file. | Sep 21, 2000 |
| CVE-2000-0784 | Not scored | sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh. | Sep 21, 2000 |
| CVE-2000-0775 | Not scored | Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since… | Sep 21, 2000 |
| CVE-2000-0774 | Not scored | The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root. | Sep 21, 2000 |
| CVE-2000-0772 | Not scored | The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password. | Sep 21, 2000 |
| CVE-2000-0769 | Not scored | O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe. | Sep 21, 2000 |
| CVE-2000-0760 | Not scored | The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension. | Sep 21, 2000 |
| CVE-2000-0759 | Not scored | Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path. | Sep 21, 2000 |
| CVE-2000-0757 | Not scored | The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed. | Sep 21, 2000 |
| CVE-2000-0756 | Not scored | Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service. | Sep 21, 2000 |
| CVE-2000-0755 | Not scored | Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges. | Sep 21, 2000 |
| CVE-2000-0752 | Not scored | Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments. | Sep 21, 2000 |
| CVE-2000-0748 | Not scored | OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse. | Sep 21, 2000 |
| CVE-2000-0746 | Not scored | Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error… | Sep 21, 2000 |
| CVE-2000-0736 | Not scored | Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user forwards a message. | Sep 21, 2000 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.