Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
401,670 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0624 | Not scored | The rstat/rstatd service is running. | Feb 4, 2000 |
| CVE-1999-0618 | Not scored | The rexec service is running. | Feb 4, 2000 |
| CVE-1999-0613 | Not scored | The rpc.sprayd service is running. | Feb 4, 2000 |
| CVE-1999-0611 | Not scored | A system-critical Windows NT registry key has an inappropriate value. | Feb 4, 2000 |
| CVE-1999-0610 | Not scored | An incorrect configuration of the Webcart CGI program could disclose private information. | Feb 4, 2000 |
| CVE-1999-0609 | Not scored | An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information. | Feb 4, 2000 |
| CVE-1999-0607 | Not scored | quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges. | Feb 4, 2000 |
| CVE-1999-0606 | Not scored | An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information. | Feb 4, 2000 |
| CVE-1999-0605 | Not scored | An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information. | Feb 4, 2000 |
| CVE-1999-0604 | Not scored | An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information. | Feb 4, 2000 |
| CVE-1999-0603 | Not scored | In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc. | Feb 4, 2000 |
| CVE-1999-0602 | Not scored | A network intrusion detection system (IDS) does not properly reassemble fragmented packets. | Feb 4, 2000 |
| CVE-1999-0601 | Not scored | A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets. | Feb 4, 2000 |
| CVE-1999-0600 | Not scored | A network intrusion detection system (IDS) does not verify the checksum on a packet. | Feb 4, 2000 |
| CVE-1999-0599 | Not scored | A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers. | Feb 4, 2000 |
| CVE-1999-0598 | Not scored | A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection. | Feb 4, 2000 |
| CVE-1999-0597 | Not scored | A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire. | Feb 4, 2000 |
| CVE-1999-0596 | Not scored | A Windows NT log file has an inappropriate maximum size or retention period. | Feb 4, 2000 |
| CVE-1999-0595 | Not scored | A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded. | Feb 4, 2000 |
| CVE-1999-0594 | Not scored | A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive. | Feb 4, 2000 |
| CVE-1999-0593 | Not scored | The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in. | Feb 4, 2000 |
| CVE-1999-0592 | Not scored | The Logon box of a Windows NT system displays the name of the last user who logged in. | Feb 4, 2000 |
| CVE-1999-0591 | Not scored | An event log in Windows NT has inappropriate access permissions. | Feb 4, 2000 |
| CVE-1999-0590 | Not scored | A system does not present an appropriate legal message or warning to a user who is accessing it. | Feb 4, 2000 |
| CVE-1999-0589 | Not scored | A system-critical Windows NT registry key has inappropriate permissions. | Feb 4, 2000 |
| CVE-1999-0588 | Not scored | A filter in a router or firewall allows unusual fragmented packets. | Feb 4, 2000 |
| CVE-1999-0587 | Not scored | A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data. | Feb 4, 2000 |
| CVE-1999-0586 | Not scored | A network service is running on a nonstandard port. | Feb 4, 2000 |
| CVE-1999-0585 | Not scored | A Windows NT administrator account has the default name of Administrator. | Feb 4, 2000 |
| CVE-1999-0584 | Not scored | A Windows NT file system is not NTFS. | Feb 4, 2000 |
| CVE-1999-0583 | Not scored | There is a one-way or two-way trust relationship between Windows NT domains. | Feb 4, 2000 |
| CVE-1999-0582 | Not scored | A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc. | Feb 4, 2000 |
| CVE-1999-0581 | Not scored | The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions. | Feb 4, 2000 |
| CVE-1999-0580 | Not scored | The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions. | Feb 4, 2000 |
| CVE-1999-0579 | Not scored | A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys. | Feb 4, 2000 |
| CVE-1999-0578 | Not scored | A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys. | Feb 4, 2000 |
| CVE-1999-0577 | Not scored | A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories. | Feb 4, 2000 |
| CVE-1999-0576 | Not scored | A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories. | Feb 4, 2000 |
| CVE-1999-0575 | Not scored | A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and… | Feb 4, 2000 |
| CVE-1999-0572 | Not scored | .reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks. | Feb 4, 2000 |
| CVE-1999-0571 | Not scored | A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts. | Feb 4, 2000 |
| CVE-1999-0570 | Not scored | Windows NT is not using a password filter utility, e.g. PASSFILT.DLL. | Feb 4, 2000 |
| CVE-1999-0569 | Not scored | A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file. | Feb 4, 2000 |
| CVE-1999-0568 | Not scored | rpc.admind in Solaris is not running in a secure mode. | Feb 4, 2000 |
| CVE-1999-0565 | Not scored | A Sendmail alias allows input to be piped to a program. | Feb 4, 2000 |
| CVE-1999-0564 | Not scored | An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled. | Feb 4, 2000 |
| CVE-1999-0562 | Not scored | The registry in Windows NT can be accessed remotely by users who are not administrators. | Feb 4, 2000 |
| CVE-1999-0561 | Not scored | IIS has the #exec function enabled for Server Side Include (SSI) files. | Feb 4, 2000 |
| CVE-1999-0560 | Not scored | A system-critical Windows NT file or directory has inappropriate permissions. | Feb 4, 2000 |
| CVE-1999-0559 | Not scored | A system-critical Unix file or directory has inappropriate permissions. | Feb 4, 2000 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.