Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
399,988 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0447 | Not scored | Local users can gain privileges using the debug utility in the MPE/iX operating system. | Sep 29, 1999 |
| CVE-1999-0446 | Not scored | Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS. | Sep 29, 1999 |
| CVE-1999-0445 | Not scored | In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters. | Sep 29, 1999 |
| CVE-1999-0442 | Not scored | Solaris ff.core allows local users to modify files. | Sep 29, 1999 |
| CVE-1999-0441 | Not scored | Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service. | Sep 29, 1999 |
| CVE-1999-0438 | Not scored | Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address. | Sep 29, 1999 |
| CVE-1999-0437 | Not scored | Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port. | Sep 29, 1999 |
| CVE-1999-0436 | Not scored | Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges. | Sep 29, 1999 |
| CVE-1999-0433 | Not scored | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. | Sep 29, 1999 |
| CVE-1999-0432 | Not scored | ftp on HP-UX 11.00 allows local users to gain privileges. | Sep 29, 1999 |
| CVE-1999-0430 | Not scored | Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload. | Sep 29, 1999 |
| CVE-1999-0425 | Not scored | talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes. | Sep 29, 1999 |
| CVE-1999-0424 | Not scored | talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes. | Sep 29, 1999 |
| CVE-1999-0423 | Not scored | Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges. | Sep 29, 1999 |
| CVE-1999-0422 | Not scored | In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set. | Sep 29, 1999 |
| CVE-1999-0420 | Not scored | umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program. | Sep 29, 1999 |
| CVE-1999-0417 | Not scored | 64 bit Solaris 7 procfs allows local users to perform a denial of service. | Sep 29, 1999 |
| CVE-1999-0414 | Not scored | In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection. | Sep 29, 1999 |
| CVE-1999-0413 | Not scored | A buffer overflow in the SGI X server allows local users to gain root access through the X server font path. | Sep 29, 1999 |
| CVE-1999-0412 | Not scored | In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. | Sep 29, 1999 |
| CVE-1999-0410 | Not scored | The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access. | Sep 29, 1999 |
| CVE-1999-0405 | Not scored | A buffer overflow in lsof allows local users to obtain root privilege. | Sep 29, 1999 |
| CVE-1999-0404 | Not scored | Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution. | Sep 29, 1999 |
| CVE-1999-0402 | Not scored | wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself. | Sep 29, 1999 |
| CVE-1999-0396 | Not scored | A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service. | Sep 29, 1999 |
| CVE-1999-0392 | Not scored | Buffer overflow in Thomas Boutell's cgic library version up to 1.05. | Sep 29, 1999 |
| CVE-1999-0391 | Not scored | The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user. | Sep 29, 1999 |
| CVE-1999-0388 | Not scored | DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root. | Sep 29, 1999 |
| CVE-1999-0386 | Not scored | Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL. | Sep 29, 1999 |
| CVE-1999-0385 | Not scored | The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands. | Sep 29, 1999 |
| CVE-1999-0384 | Not scored | The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content. | Sep 29, 1999 |
| CVE-1999-0383 | Not scored | ACC Tigris allows public access without a login. | Sep 29, 1999 |
| CVE-1999-0382 | Not scored | The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges. | Sep 29, 1999 |
| CVE-1999-0379 | Not scored | Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting. | Sep 29, 1999 |
| CVE-1999-0377 | Not scored | Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services. | Sep 29, 1999 |
| CVE-1999-0376 | Not scored | Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs. | Sep 29, 1999 |
| CVE-1999-0375 | Not scored | Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands. | Sep 29, 1999 |
| CVE-1999-0374 | Not scored | Debian GNU/Linux cfengine package is susceptible to a symlink attack. | Sep 29, 1999 |
| CVE-1999-0373 | Not scored | Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root. | Sep 29, 1999 |
| CVE-1999-0372 | Not scored | The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted. | Sep 29, 1999 |
| CVE-1999-0371 | Not scored | Lynx allows a local user to overwrite sensitive files through /tmp symlinks. | Sep 29, 1999 |
| CVE-1999-0369 | Not scored | The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access. | Sep 29, 1999 |
| CVE-1999-0368 | Not scored | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto. | Sep 29, 1999 |
| CVE-1999-0367 | Not scored | NetBSD netstat command allows local users to access kernel memory. | Sep 29, 1999 |
| CVE-1999-0366 | Not scored | In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value. | Sep 29, 1999 |
| CVE-1999-0365 | Not scored | The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry. | Sep 29, 1999 |
| CVE-1999-0363 | Not scored | SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise. | Sep 29, 1999 |
| CVE-1999-0362 | Not scored | WS_FTP server remote denial of service through cwd command. | Sep 29, 1999 |
| CVE-1999-0357 | Not scored | Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets. | Sep 29, 1999 |
| CVE-1999-0355 | Not scored | Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service. | Sep 29, 1999 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.