Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,295 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0588 | Not scored | A filter in a router or firewall allows unusual fragmented packets. | Feb 4, 2000 |
| CVE-1999-0587 | Not scored | A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data. | Feb 4, 2000 |
| CVE-1999-0586 | Not scored | A network service is running on a nonstandard port. | Feb 4, 2000 |
| CVE-1999-0585 | Not scored | A Windows NT administrator account has the default name of Administrator. | Feb 4, 2000 |
| CVE-1999-0584 | Not scored | A Windows NT file system is not NTFS. | Feb 4, 2000 |
| CVE-1999-0583 | Not scored | There is a one-way or two-way trust relationship between Windows NT domains. | Feb 4, 2000 |
| CVE-1999-0582 | Not scored | A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc. | Feb 4, 2000 |
| CVE-1999-0581 | Not scored | The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions. | Feb 4, 2000 |
| CVE-1999-0580 | Not scored | The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions. | Feb 4, 2000 |
| CVE-1999-0579 | Not scored | A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys. | Feb 4, 2000 |
| CVE-1999-0578 | Not scored | A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys. | Feb 4, 2000 |
| CVE-1999-0577 | Not scored | A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories. | Feb 4, 2000 |
| CVE-1999-0576 | Not scored | A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories. | Feb 4, 2000 |
| CVE-1999-0575 | Not scored | A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and… | Feb 4, 2000 |
| CVE-1999-0572 | Not scored | .reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks. | Feb 4, 2000 |
| CVE-1999-0571 | Not scored | A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts. | Feb 4, 2000 |
| CVE-1999-0570 | Not scored | Windows NT is not using a password filter utility, e.g. PASSFILT.DLL. | Feb 4, 2000 |
| CVE-1999-0569 | Not scored | A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file. | Feb 4, 2000 |
| CVE-1999-0568 | Not scored | rpc.admind in Solaris is not running in a secure mode. | Feb 4, 2000 |
| CVE-1999-0565 | Not scored | A Sendmail alias allows input to be piped to a program. | Feb 4, 2000 |
| CVE-1999-0564 | Not scored | An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled. | Feb 4, 2000 |
| CVE-1999-0562 | Not scored | The registry in Windows NT can be accessed remotely by users who are not administrators. | Feb 4, 2000 |
| CVE-1999-0561 | Not scored | IIS has the #exec function enabled for Server Side Include (SSI) files. | Feb 4, 2000 |
| CVE-1999-0560 | Not scored | A system-critical Windows NT file or directory has inappropriate permissions. | Feb 4, 2000 |
| CVE-1999-0559 | Not scored | A system-critical Unix file or directory has inappropriate permissions. | Feb 4, 2000 |
| CVE-1999-0556 | Not scored | Two or more Unix accounts have the same UID. | Feb 4, 2000 |
| CVE-1999-0555 | Not scored | A Unix account with a name other than "root" has UID 0, i.e. root privileges. | Feb 4, 2000 |
| CVE-1999-0554 | Not scored | NFS exports system-critical data to the world, e.g. / or a password file. | Feb 4, 2000 |
| CVE-1999-0550 | Not scored | A router's routing tables can be obtained from arbitrary hosts. | Feb 4, 2000 |
| CVE-1999-0549 | Not scored | Windows NT automatically logs in an administrator upon rebooting. | Feb 4, 2000 |
| CVE-1999-0548 | Not scored | A superfluous NFS server is running, but it is not importing or exporting any file systems. | Feb 4, 2000 |
| CVE-1999-0547 | Not scored | An SSH server allows authentication through the .rhosts file. | Feb 4, 2000 |
| CVE-1999-0546 | Not scored | The Windows NT guest account is enabled. | Feb 4, 2000 |
| CVE-1999-0541 | Not scored | A password for accessing a WWW URL is guessable. | Feb 4, 2000 |
| CVE-1999-0539 | Not scored | A trust relationship exists between two Unix hosts. | Feb 4, 2000 |
| CVE-1999-0537 | Not scored | A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc. | Feb 4, 2000 |
| CVE-1999-0535 | Not scored | A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness. | Feb 4, 2000 |
| CVE-1999-0534 | Not scored | A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority,… | Feb 4, 2000 |
| CVE-1999-0533 | Not scored | A DNS server allows inverse queries. | Feb 4, 2000 |
| CVE-1999-0532 | Not scored | A DNS server allows zone transfers. | Feb 4, 2000 |
| CVE-1999-0530 | Not scored | A system is operating in "promiscuous" mode which allows it to perform packet sniffing. | Feb 4, 2000 |
| CVE-1999-0529 | Not scored | A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc. | Feb 4, 2000 |
| CVE-1999-0528 | Not scored | A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of. | Feb 4, 2000 |
| CVE-1999-0527 | Not scored | The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten. | Feb 4, 2000 |
| CVE-1999-0525 | Not scored | IP traceroute is allowed from arbitrary hosts. | Feb 4, 2000 |
| CVE-1999-0524 | 4.0 Medium | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. | Feb 4, 2000 |
| CVE-1999-0523 | Not scored | ICMP echo (ping) is allowed from arbitrary hosts. | Feb 4, 2000 |
| CVE-1999-0522 | Not scored | The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate. | Feb 4, 2000 |
| CVE-1999-0521 | Not scored | An NIS domain name is easily guessable. | Feb 4, 2000 |
| CVE-1999-0520 | Not scored | A system-critical NETBIOS/SMB share has inappropriate access control. | Feb 4, 2000 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.