Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
401,734 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2000-0078 | Not scored | The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command. | Feb 4, 2000 |
| CVE-2000-0077 | Not scored | The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands. | Feb 4, 2000 |
| CVE-2000-0074 | Not scored | PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions. | Feb 4, 2000 |
| CVE-2000-0071 | Not scored | IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. | Feb 4, 2000 |
| CVE-2000-0069 | Not scored | The recover program in Solstice Backup allows local users to restore sensitive files. | Feb 4, 2000 |
| CVE-2000-0068 | Not scored | daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail. | Feb 4, 2000 |
| CVE-2000-0067 | Not scored | CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack. | Feb 4, 2000 |
| CVE-2000-0066 | Not scored | WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request. | Feb 4, 2000 |
| CVE-2000-0061 | Not scored | Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context… | Feb 4, 2000 |
| CVE-2000-0059 | Not scored | PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands. | Feb 4, 2000 |
| CVE-2000-0058 | Not scored | Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files. | Feb 4, 2000 |
| CVE-2000-0055 | Not scored | Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option. | Feb 4, 2000 |
| CVE-2000-0054 | Not scored | search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack. | Feb 4, 2000 |
| CVE-2000-0049 | Not scored | Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file. | Feb 4, 2000 |
| CVE-2000-0047 | Not scored | Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message. | Feb 4, 2000 |
| CVE-2000-0046 | Not scored | Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message. | Feb 4, 2000 |
| CVE-2000-0038 | Not scored | glFtpD includes a default glftpd user account with a default password and a UID of 0. | Feb 4, 2000 |
| CVE-2000-0035 | Not scored | resend command in Majordomo allows local users to gain privileges via shell metacharacters. | Feb 4, 2000 |
| CVE-2000-0028 | Not scored | Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function. | Feb 4, 2000 |
| CVE-2000-0021 | Not scored | Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin. | Feb 4, 2000 |
| CVE-2000-0019 | Not scored | IMail POP3 daemon uses weak encryption, which allows local users to read files. | Feb 4, 2000 |
| CVE-2000-0017 | Not scored | Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter. | Feb 4, 2000 |
| CVE-2000-0016 | Not scored | Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username. | Feb 4, 2000 |
| CVE-2000-0008 | Not scored | FTPPro allows local users to read sensitive information, which is stored in plain text. | Feb 4, 2000 |
| CVE-2000-0005 | Not scored | HP-UX aserver program allows local users to gain privileges via a symlink attack. | Feb 4, 2000 |
| CVE-1999-1009 | Not scored | The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system. | Feb 4, 2000 |
| CVE-1999-1006 | Not scored | Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter. | Feb 4, 2000 |
| CVE-1999-1003 | Not scored | War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections. | Feb 4, 2000 |
| CVE-1999-1002 | Not scored | Netscape Navigator uses weak encryption for storing a user's Netscape mail password. | Feb 4, 2000 |
| CVE-1999-0993 | Not scored | Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed. | Feb 4, 2000 |
| CVE-1999-0990 | Not scored | Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system. | Feb 4, 2000 |
| CVE-1999-0988 | Not scored | UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack. | Feb 4, 2000 |
| CVE-1999-0985 | Not scored | CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. | Feb 4, 2000 |
| CVE-1999-0984 | Not scored | Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. | Feb 4, 2000 |
| CVE-1999-0983 | Not scored | Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. | Feb 4, 2000 |
| CVE-1999-0970 | Not scored | The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created. | Feb 4, 2000 |
| CVE-1999-0952 | Not scored | Buffer overflow in Solaris lpstat via class argument allows local users to gain root access. | Feb 4, 2000 |
| CVE-1999-0949 | Not scored | Buffer overflow in canuum program for Canna input system allows local users to gain root privileges. | Feb 4, 2000 |
| CVE-1999-0948 | Not scored | Buffer overflow in uum program for Canna input system allows local users to gain root privileges. | Feb 4, 2000 |
| CVE-1999-0944 | Not scored | IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections. | Feb 4, 2000 |
| CVE-1999-0941 | Not scored | Mutt mail client allows a remote attacker to execute commands via shell metacharacters. | Feb 4, 2000 |
| CVE-1999-0929 | Not scored | Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests. | Feb 4, 2000 |
| CVE-1999-0925 | Not scored | UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers. | Feb 4, 2000 |
| CVE-1999-0919 | Not scored | A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections. | Feb 4, 2000 |
| CVE-1999-0913 | Not scored | dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters. | Feb 4, 2000 |
| CVE-1999-0911 | Not scored | Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories. | Feb 4, 2000 |
| CVE-1999-0910 | Not scored | Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user. | Feb 4, 2000 |
| CVE-1999-0885 | Not scored | Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL. | Feb 4, 2000 |
| CVE-1999-0882 | Not scored | Falcon web server allows remote attackers to determine the absolute path of the web root via long file names. | Feb 4, 2000 |
| CVE-1999-0872 | Not scored | Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file. | Feb 4, 2000 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.