Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,026 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0735 | Not scored | KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories. | Jan 4, 2000 |
| CVE-1999-0732 | Not scored | The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links. | Jan 4, 2000 |
| CVE-1999-0731 | Not scored | The KDE klock program allows local users to unlock a session using malformed input. | Jan 4, 2000 |
| CVE-1999-0730 | Not scored | The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack. | Jan 4, 2000 |
| CVE-1999-0728 | Not scored | A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them. | Jan 4, 2000 |
| CVE-1999-0726 | Not scored | An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header. | Jan 4, 2000 |
| CVE-1999-0725 | Not scored | When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page". | Jan 4, 2000 |
| CVE-1999-0724 | Not scored | Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function. | Jan 4, 2000 |
| CVE-1999-0723 | Not scored | The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input. | Jan 4, 2000 |
| CVE-1999-0722 | Not scored | The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages. | Jan 4, 2000 |
| CVE-1999-0721 | Not scored | Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request. | Jan 4, 2000 |
| CVE-1999-0717 | Not scored | A remote attacker can disable the virus warning mechanism in Microsoft Excel 97. | Jan 4, 2000 |
| CVE-1999-0716 | Not scored | Buffer overflow in Windows NT 4.0 help file utility via a malformed help file. | Jan 4, 2000 |
| CVE-1999-0715 | Not scored | Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry. | Jan 4, 2000 |
| CVE-1999-0714 | Not scored | Vulnerability in Compaq Tru64 UNIX edauth command. | Jan 4, 2000 |
| CVE-1999-0713 | Not scored | The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges. | Jan 4, 2000 |
| CVE-1999-0710 | Not scored | The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems. | Jan 4, 2000 |
| CVE-1999-0707 | Not scored | The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization. | Jan 4, 2000 |
| CVE-1999-0706 | Not scored | Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables. | Jan 4, 2000 |
| CVE-1999-0705 | Not scored | Buffer overflow in INN inews program. | Jan 4, 2000 |
| CVE-1999-0704 | Not scored | Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others. | Jan 4, 2000 |
| CVE-1999-0703 | Not scored | OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices. | Jan 4, 2000 |
| CVE-1999-0702 | Not scored | Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability. | Jan 4, 2000 |
| CVE-1999-0701 | Not scored | After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password. | Jan 4, 2000 |
| CVE-1999-0700 | Not scored | Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file. | Jan 4, 2000 |
| CVE-1999-0699 | Not scored | The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs. | Jan 4, 2000 |
| CVE-1999-0695 | Not scored | The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack. | Jan 4, 2000 |
| CVE-1999-0693 | Not scored | Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges. | Jan 4, 2000 |
| CVE-1999-0692 | Not scored | The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges. | Jan 4, 2000 |
| CVE-1999-0691 | Not scored | Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. | Jan 4, 2000 |
| CVE-1999-0690 | Not scored | HP CDE program includes the current directory in root's PATH variable. | Jan 4, 2000 |
| CVE-1999-0689 | Not scored | The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack. | Jan 4, 2000 |
| CVE-1999-0688 | Not scored | Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x. | Jan 4, 2000 |
| CVE-1999-0687 | Not scored | The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. | Jan 4, 2000 |
| CVE-1999-0686 | Not scored | Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL. | Jan 4, 2000 |
| CVE-1999-0685 | Not scored | Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option. | Jan 4, 2000 |
| CVE-1999-0682 | Not scored | Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled. | Jan 4, 2000 |
| CVE-1999-0680 | Not scored | Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service. | Jan 4, 2000 |
| CVE-1999-0674 | Not scored | The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve. | Jan 4, 2000 |
| CVE-1999-0470 | Not scored | A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted. | Jan 4, 2000 |
| CVE-1999-0439 | Not scored | Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file. | Jan 4, 2000 |
| CVE-1999-0428 | Not scored | OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls. | Jan 4, 2000 |
| CVE-1999-0421 | Not scored | During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password. | Jan 4, 2000 |
| CVE-1999-0409 | Not scored | Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access. | Jan 4, 2000 |
| CVE-1999-0408 | Not scored | Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server. | Jan 4, 2000 |
| CVE-1999-0343 | Not scored | A malicious Palace server can force a client to execute arbitrary programs. | Jan 4, 2000 |
| CVE-1999-0322 | Not scored | The open() function in FreeBSD allows local attackers to write to arbitrary files. | Jan 4, 2000 |
| CVE-1999-0318 | Not scored | Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable. | Jan 4, 2000 |
| CVE-1999-0304 | Not scored | mmap function in BSD allows local attackers in the kmem group to modify memory through devices. | Jan 4, 2000 |
| CVE-1999-0297 | Not scored | Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable. | Jan 4, 2000 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.