Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,438 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0831 | Not scored | Denial of service in Linux syslogd via a large number of connections. | Jan 18, 2000 |
| CVE-1999-0811 | Not scored | Buffer overflow in Samba smbd program via a malformed message command. | Jan 18, 2000 |
| CVE-1999-0775 | Not scored | Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list. | Jan 18, 2000 |
| CVE-1999-0770 | Not scored | Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems. | Jan 18, 2000 |
| CVE-1999-0768 | Not scored | Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable. | Jan 18, 2000 |
| CVE-1999-0753 | Not scored | The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories. | Jan 18, 2000 |
| CVE-1999-0743 | Not scored | Trn allows local users to overwrite other users' files via symlinks. | Jan 18, 2000 |
| CVE-1999-0742 | Not scored | The Debian mailman package uses weak authentication, which allows attackers to gain privileges. | Jan 18, 2000 |
| CVE-1999-0734 | Not scored | A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication. | Jan 18, 2000 |
| CVE-1999-0708 | Not scored | Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field. | Jan 18, 2000 |
| CVE-1999-0694 | Not scored | Denial of service in AIX ptrace system call allows local users to crash the system. | Jan 18, 2000 |
| CVE-1999-0683 | Not scored | Denial of service in Gauntlet Firewall via a malformed ICMP packet. | Jan 18, 2000 |
| CVE-1999-0270 | Not scored | Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows remote attackers to read arbitrary files. | Jan 18, 2000 |
| CVE-1999-0259 | Not scored | cfingerd lists all users on a system via search.**@target. | Jan 18, 2000 |
| CVE-1999-0233 | Not scored | IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files. | Jan 18, 2000 |
| CVE-1999-0101 | Not scored | Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names. | Jan 18, 2000 |
| CVE-1999-0991 | Not scored | Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name. | Jan 4, 2000 |
| CVE-1999-0989 | Not scored | Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol. | Jan 4, 2000 |
| CVE-1999-0987 | Not scored | Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name. | Jan 4, 2000 |
| CVE-1999-0986 | Not scored | The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option. | Jan 4, 2000 |
| CVE-1999-0982 | Not scored | The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file. | Jan 4, 2000 |
| CVE-1999-0981 | Not scored | Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect." | Jan 4, 2000 |
| CVE-1999-0980 | Not scored | Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request. | Jan 4, 2000 |
| CVE-1999-0979 | Not scored | The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed. | Jan 4, 2000 |
| CVE-1999-0978 | Not scored | htdig allows remote attackers to execute commands via filenames with shell metacharacters. | Jan 4, 2000 |
| CVE-1999-0977 | Not scored | Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request. | Jan 4, 2000 |
| CVE-1999-0975 | Not scored | The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is… | Jan 4, 2000 |
| CVE-1999-0974 | Not scored | Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service. | Jan 4, 2000 |
| CVE-1999-0973 | Not scored | Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode. | Jan 4, 2000 |
| CVE-1999-0972 | Not scored | Buffer overflow in Xshipwars xsw program. | Jan 4, 2000 |
| CVE-1999-0969 | Not scored | The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork. | Jan 4, 2000 |
| CVE-1999-0967 | Not scored | Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. | Jan 4, 2000 |
| CVE-1999-0965 | Not scored | Race condition in xterm allows local users to modify arbitrary files via the logging option. | Jan 4, 2000 |
| CVE-1999-0963 | Not scored | FreeBSD mount_union command allows local users to gain root privileges via a symlink attack. | Jan 4, 2000 |
| CVE-1999-0962 | Not scored | Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option. | Jan 4, 2000 |
| CVE-1999-0960 | Not scored | IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option. | Jan 4, 2000 |
| CVE-1999-0956 | Not scored | The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service. | Jan 4, 2000 |
| CVE-1999-0953 | Not scored | WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers. | Jan 4, 2000 |
| CVE-1999-0951 | Not scored | Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands. | Jan 4, 2000 |
| CVE-1999-0947 | Not scored | AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters. | Jan 4, 2000 |
| CVE-1999-0943 | Not scored | Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator. | Jan 4, 2000 |
| CVE-1999-0940 | Not scored | Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages. | Jan 4, 2000 |
| CVE-1999-0939 | Not scored | Denial of service in Debian IRC Epic/epic4 client via a long string. | Jan 4, 2000 |
| CVE-1999-0938 | Not scored | MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages. | Jan 4, 2000 |
| CVE-1999-0937 | Not scored | BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable. | Jan 4, 2000 |
| CVE-1999-0936 | Not scored | BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters. | Jan 4, 2000 |
| CVE-1999-0935 | Not scored | classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form. | Jan 4, 2000 |
| CVE-1999-0934 | Not scored | classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters. | Jan 4, 2000 |
| CVE-1999-0933 | Not scored | TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | Jan 4, 2000 |
| CVE-1999-0918 | Not scored | Denial of service in various Windows systems via malformed, fragmented IGMP packets. | Jan 4, 2000 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.