Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,441 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0515 | Not scored | An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv. | Feb 4, 2000 |
| CVE-1999-0512 | Not scored | A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers. | Feb 4, 2000 |
| CVE-1999-0511 | 9.1 Critical | IP forwarding is enabled on a machine which is not a router or firewall. | Feb 4, 2000 |
| CVE-1999-0510 | Not scored | A router or firewall allows source routed packets from arbitrary hosts. | Feb 4, 2000 |
| CVE-1999-0509 | Not scored | Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands. | Feb 4, 2000 |
| CVE-1999-0508 | Not scored | An account on a router, firewall, or other network device has a default, null, blank, or missing password. | Feb 4, 2000 |
| CVE-1999-0507 | Not scored | An account on a router, firewall, or other network device has a guessable password. | Feb 4, 2000 |
| CVE-1999-0506 | Not scored | A Windows NT domain user or administrator account has a default, null, blank, or missing password. | Feb 4, 2000 |
| CVE-1999-0505 | Not scored | A Windows NT domain user or administrator account has a guessable password. | Feb 4, 2000 |
| CVE-1999-0504 | Not scored | A Windows NT local user or administrator account has a default, null, blank, or missing password. | Feb 4, 2000 |
| CVE-1999-0503 | Not scored | A Windows NT local user or administrator account has a guessable password. | Feb 4, 2000 |
| CVE-1999-0502 | Not scored | A Unix account has a default, null, blank, or missing password. | Feb 4, 2000 |
| CVE-1999-0501 | Not scored | A Unix account has a guessable password. | Feb 4, 2000 |
| CVE-1999-0499 | Not scored | NETBIOS share information may be published through SNMP registry keys in NT. | Feb 4, 2000 |
| CVE-1999-0498 | Not scored | TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files. | Feb 4, 2000 |
| CVE-1999-0497 | Not scored | Anonymous FTP is enabled. | Feb 4, 2000 |
| CVE-1999-0495 | Not scored | A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares. | Feb 4, 2000 |
| CVE-1999-0492 | Not scored | The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses. | Feb 4, 2000 |
| CVE-1999-0490 | Not scored | MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag. | Feb 4, 2000 |
| CVE-1999-0489 | Not scored | MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013. | Feb 4, 2000 |
| CVE-1999-0488 | Not scored | Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability. | Feb 4, 2000 |
| CVE-1999-0486 | Not scored | Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash. | Feb 4, 2000 |
| CVE-1999-0480 | Not scored | Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack. | Feb 4, 2000 |
| CVE-1999-0477 | Not scored | The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly. | Feb 4, 2000 |
| CVE-1999-0476 | Not scored | A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user. | Feb 4, 2000 |
| CVE-1999-0469 | Not scored | Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client. | Feb 4, 2000 |
| CVE-1999-0467 | Not scored | The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter. | Feb 4, 2000 |
| CVE-1999-0465 | Not scored | Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter. | Feb 4, 2000 |
| CVE-1999-0462 | Not scored | suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk. | Feb 4, 2000 |
| CVE-1999-0461 | Not scored | Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address. | Feb 4, 2000 |
| CVE-1999-0460 | Not scored | Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service. | Feb 4, 2000 |
| CVE-1999-0459 | Not scored | Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot. | Feb 4, 2000 |
| CVE-1999-0455 | Not scored | The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly. | Feb 4, 2000 |
| CVE-1999-0454 | Not scored | A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso. | Feb 4, 2000 |
| CVE-1999-0453 | Not scored | An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP). | Feb 4, 2000 |
| CVE-1999-0452 | Not scored | A service or application has a backdoor password that was placed there by the developer. | Feb 4, 2000 |
| CVE-1999-0451 | Not scored | Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port. | Feb 4, 2000 |
| CVE-1999-0450 | Not scored | In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). | Feb 4, 2000 |
| CVE-1999-0444 | Not scored | Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files. | Feb 4, 2000 |
| CVE-1999-0443 | Not scored | Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password. | Feb 4, 2000 |
| CVE-1999-0435 | Not scored | MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM. | Feb 4, 2000 |
| CVE-1999-0434 | Not scored | XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. | Feb 4, 2000 |
| CVE-1999-0431 | Not scored | Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service. | Feb 4, 2000 |
| CVE-1999-0427 | Not scored | Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names. | Feb 4, 2000 |
| CVE-1999-0426 | Not scored | The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing. | Feb 4, 2000 |
| CVE-1999-0419 | Not scored | When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service. | Feb 4, 2000 |
| CVE-1999-0411 | Not scored | Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access. | Feb 4, 2000 |
| CVE-1999-0406 | Not scored | Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege. | Feb 4, 2000 |
| CVE-1999-0401 | Not scored | A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files. | Feb 4, 2000 |
| CVE-1999-0400 | Not scored | Denial of service in Linux 2.2.0 running the ldd command on a core file. | Feb 4, 2000 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.