Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,445 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0793 | Not scored | Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet. | Jan 4, 2000 |
| CVE-1999-0779 | Not scored | Denial of service in HP-UX SharedX recserv program. | Jan 4, 2000 |
| CVE-1999-0777 | Not scored | IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions. | Jan 4, 2000 |
| CVE-1999-0774 | Not scored | Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names. | Jan 4, 2000 |
| CVE-1999-0772 | Not scored | Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301. | Jan 4, 2000 |
| CVE-1999-0771 | Not scored | The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack. | Jan 4, 2000 |
| CVE-1999-0769 | Not scored | Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable. | Jan 4, 2000 |
| CVE-1999-0766 | Not scored | The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment. | Jan 4, 2000 |
| CVE-1999-0765 | Not scored | SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor. | Jan 4, 2000 |
| CVE-1999-0764 | Not scored | NetBSD allows ARP packets to overwrite static ARP entries. | Jan 4, 2000 |
| CVE-1999-0763 | Not scored | NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network. | Jan 4, 2000 |
| CVE-1999-0762 | Not scored | When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information. | Jan 4, 2000 |
| CVE-1999-0761 | Not scored | Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. | Jan 4, 2000 |
| CVE-1999-0755 | Not scored | Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option. | Jan 4, 2000 |
| CVE-1999-0752 | Not scored | Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake. | Jan 4, 2000 |
| CVE-1999-0751 | Not scored | Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch. | Jan 4, 2000 |
| CVE-1999-0749 | Not scored | Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument. | Jan 4, 2000 |
| CVE-1999-0745 | Not scored | Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler. | Jan 4, 2000 |
| CVE-1999-0744 | Not scored | Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request. | Jan 4, 2000 |
| CVE-1999-0735 | Not scored | KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories. | Jan 4, 2000 |
| CVE-1999-0732 | Not scored | The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links. | Jan 4, 2000 |
| CVE-1999-0731 | Not scored | The KDE klock program allows local users to unlock a session using malformed input. | Jan 4, 2000 |
| CVE-1999-0730 | Not scored | The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack. | Jan 4, 2000 |
| CVE-1999-0728 | Not scored | A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them. | Jan 4, 2000 |
| CVE-1999-0726 | Not scored | An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header. | Jan 4, 2000 |
| CVE-1999-0725 | Not scored | When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page". | Jan 4, 2000 |
| CVE-1999-0724 | Not scored | Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function. | Jan 4, 2000 |
| CVE-1999-0723 | Not scored | The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input. | Jan 4, 2000 |
| CVE-1999-0722 | Not scored | The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages. | Jan 4, 2000 |
| CVE-1999-0721 | Not scored | Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request. | Jan 4, 2000 |
| CVE-1999-0717 | Not scored | A remote attacker can disable the virus warning mechanism in Microsoft Excel 97. | Jan 4, 2000 |
| CVE-1999-0716 | Not scored | Buffer overflow in Windows NT 4.0 help file utility via a malformed help file. | Jan 4, 2000 |
| CVE-1999-0715 | Not scored | Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry. | Jan 4, 2000 |
| CVE-1999-0714 | Not scored | Vulnerability in Compaq Tru64 UNIX edauth command. | Jan 4, 2000 |
| CVE-1999-0713 | Not scored | The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges. | Jan 4, 2000 |
| CVE-1999-0710 | Not scored | The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems. | Jan 4, 2000 |
| CVE-1999-0707 | Not scored | The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization. | Jan 4, 2000 |
| CVE-1999-0706 | Not scored | Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables. | Jan 4, 2000 |
| CVE-1999-0705 | Not scored | Buffer overflow in INN inews program. | Jan 4, 2000 |
| CVE-1999-0704 | Not scored | Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others. | Jan 4, 2000 |
| CVE-1999-0703 | Not scored | OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices. | Jan 4, 2000 |
| CVE-1999-0702 | Not scored | Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability. | Jan 4, 2000 |
| CVE-1999-0701 | Not scored | After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password. | Jan 4, 2000 |
| CVE-1999-0700 | Not scored | Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file. | Jan 4, 2000 |
| CVE-1999-0699 | Not scored | The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs. | Jan 4, 2000 |
| CVE-1999-0695 | Not scored | The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack. | Jan 4, 2000 |
| CVE-1999-0693 | Not scored | Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges. | Jan 4, 2000 |
| CVE-1999-0692 | Not scored | The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges. | Jan 4, 2000 |
| CVE-1999-0691 | Not scored | Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. | Jan 4, 2000 |
| CVE-1999-0690 | Not scored | HP CDE program includes the current directory in root's PATH variable. | Jan 4, 2000 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.