Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,445 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0411 | Not scored | Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access. | Feb 4, 2000 |
| CVE-1999-0406 | Not scored | Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege. | Feb 4, 2000 |
| CVE-1999-0401 | Not scored | A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files. | Feb 4, 2000 |
| CVE-1999-0400 | Not scored | Denial of service in Linux 2.2.0 running the ldd command on a core file. | Feb 4, 2000 |
| CVE-1999-0399 | Not scored | The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands. | Feb 4, 2000 |
| CVE-1999-0398 | Not scored | In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login. | Feb 4, 2000 |
| CVE-1999-0397 | Not scored | The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext. | Feb 4, 2000 |
| CVE-1999-0394 | Not scored | DPEC Online Courseware allows an attacker to change another user's password without knowing the original password. | Feb 4, 2000 |
| CVE-1999-0389 | Not scored | Buffer overflow in the bootp server in the Debian Linux netstd package. | Feb 4, 2000 |
| CVE-1999-0381 | Not scored | super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access. | Feb 4, 2000 |
| CVE-1999-0370 | Not scored | In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files. | Feb 4, 2000 |
| CVE-1999-0364 | Not scored | Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data. | Feb 4, 2000 |
| CVE-1999-0361 | Not scored | NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging. | Feb 4, 2000 |
| CVE-1999-0360 | Not scored | MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely. | Feb 4, 2000 |
| CVE-1999-0356 | Not scored | ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book. | Feb 4, 2000 |
| CVE-1999-0354 | Not scored | Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to… | Feb 4, 2000 |
| CVE-1999-0352 | Not scored | ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption. | Feb 4, 2000 |
| CVE-1999-0347 | Not scored | Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character. | Feb 4, 2000 |
| CVE-1999-0345 | Not scored | Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. | Feb 4, 2000 |
| CVE-1999-0336 | Not scored | Buffer overflow in mstm in HP-UX allows local users to gain root access. | Feb 4, 2000 |
| CVE-1999-0333 | Not scored | HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack. | Feb 4, 2000 |
| CVE-1999-0331 | Not scored | Buffer overflow in Internet Explorer 4.0(1). | Feb 4, 2000 |
| CVE-1999-0330 | Not scored | Linux bdash game has a buffer overflow that allows local users to gain root access. | Feb 4, 2000 |
| CVE-1999-0319 | Not scored | Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting. | Feb 4, 2000 |
| CVE-1999-0317 | Not scored | Buffer overflow in Linux su command gives root access to local users. | Feb 4, 2000 |
| CVE-1999-0307 | Not scored | Buffer overflow in HP-UX cstm program allows local users to gain root privileges. | Feb 4, 2000 |
| CVE-1999-0306 | Not scored | buffer overflow in HP xlock program. | Feb 4, 2000 |
| CVE-1999-0298 | Not scored | ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack. | Feb 4, 2000 |
| CVE-1999-0287 | Not scored | Vulnerability in the Wguest CGI program. | Feb 4, 2000 |
| CVE-1999-0286 | Not scored | In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages. | Feb 4, 2000 |
| CVE-1999-0285 | Not scored | Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection. | Feb 4, 2000 |
| CVE-1999-0284 | Not scored | Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command. | Feb 4, 2000 |
| CVE-1999-0283 | Not scored | The Java Web Server would allow remote users to obtain the source code for CGI programs. | Feb 4, 2000 |
| CVE-1999-0271 | Not scored | Progressive Networks Real Video server (pnserver) can be crashed remotely. | Feb 4, 2000 |
| CVE-1999-0261 | Not scored | Netmanager Chameleon SMTPd has several buffer overflows that cause a crash. | Feb 4, 2000 |
| CVE-1999-0258 | Not scored | Bonk variation of teardrop IP fragmentation denial of service. | Feb 4, 2000 |
| CVE-1999-0257 | Not scored | Nestea variation of teardrop IP fragmentation denial of service. | Feb 4, 2000 |
| CVE-1999-0255 | Not scored | Buffer overflow in ircd allows arbitrary command execution. | Feb 4, 2000 |
| CVE-1999-0254 | Not scored | A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information. | Feb 4, 2000 |
| CVE-1999-0253 | Not scored | IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL. | Feb 4, 2000 |
| CVE-1999-0250 | Not scored | Denial of service in Qmail through long SMTP commands. | Feb 4, 2000 |
| CVE-1999-0249 | Not scored | Windows NT RSHSVC program allows remote users to execute arbitrary commands. | Feb 4, 2000 |
| CVE-1999-0246 | Not scored | HP Remote Watch allows a remote user to gain root access. | Feb 4, 2000 |
| CVE-1999-0243 | Not scored | Linux cfingerd could be exploited to gain root access. | Feb 4, 2000 |
| CVE-1999-0242 | Not scored | Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords. | Feb 4, 2000 |
| CVE-1999-0241 | Not scored | Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. | Feb 4, 2000 |
| CVE-1999-0240 | Not scored | Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy. | Feb 4, 2000 |
| CVE-1999-0238 | Not scored | php.cgi allows attackers to read any file on the system. | Feb 4, 2000 |
| CVE-1999-0235 | Not scored | Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access. | Feb 4, 2000 |
| CVE-1999-0232 | Not scored | Buffer overflow in NCSA WebServer (version 1.5c) gives remote access. | Feb 4, 2000 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.