Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
401,233 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0173 | Not scored | FormMail CGI program can be used by web servers other than the host server that the program resides on. | Sep 29, 1999 |
| CVE-1999-0172 | Not scored | FormMail CGI program allows remote execution of commands. | Sep 29, 1999 |
| CVE-1999-0170 | Not scored | Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list. | Sep 29, 1999 |
| CVE-1999-0168 | Not scored | The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place. For example, NFS file… | Sep 29, 1999 |
| CVE-1999-0167 | Not scored | In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system. | Sep 29, 1999 |
| CVE-1999-0166 | Not scored | NFS allows users to use a "cd .." command to access other directories besides the exported file system. | Sep 29, 1999 |
| CVE-1999-0164 | Not scored | A race condition in the Solaris ps command allows an attacker to overwrite critical files. | Sep 29, 1999 |
| CVE-1999-0162 | Not scored | The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering. | Sep 29, 1999 |
| CVE-1999-0161 | Not scored | In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering. | Sep 29, 1999 |
| CVE-1999-0160 | Not scored | Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections. | Sep 29, 1999 |
| CVE-1999-0159 | 3.5 Low | Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11.x releases. | Sep 29, 1999 |
| CVE-1999-0158 | Not scored | Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known. | Sep 29, 1999 |
| CVE-1999-0157 | Not scored | Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service. | Sep 29, 1999 |
| CVE-1999-0155 | Not scored | The ghostscript command with the -dSAFER option allows remote attackers to execute commands. | Sep 29, 1999 |
| CVE-1999-0153 | Not scored | Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. | Sep 29, 1999 |
| CVE-1999-0152 | Not scored | The DG/UX finger daemon allows remote command execution through shell metacharacters. | Sep 29, 1999 |
| CVE-1999-0150 | Not scored | The Perl fingerd program allows arbitrary command execution from remote users. | Sep 29, 1999 |
| CVE-1999-0149 | Not scored | The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack. | Sep 29, 1999 |
| CVE-1999-0148 | Not scored | The handler CGI program in IRIX allows arbitrary command execution. | Sep 29, 1999 |
| CVE-1999-0147 | Not scored | The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands. | Sep 29, 1999 |
| CVE-1999-0146 | Not scored | The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file. | Sep 29, 1999 |
| CVE-1999-0143 | Not scored | Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys. | Sep 29, 1999 |
| CVE-1999-0141 | Not scored | Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet. | Sep 29, 1999 |
| CVE-1999-0139 | Not scored | Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access. | Sep 29, 1999 |
| CVE-1999-0138 | Not scored | The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access. | Sep 29, 1999 |
| CVE-1999-0137 | Not scored | The dip program on many Linux systems allows local users to gain root access via a buffer overflow. | Sep 29, 1999 |
| CVE-1999-0136 | Not scored | Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access. | Sep 29, 1999 |
| CVE-1999-0135 | Not scored | admintool in Solaris allows a local user to write to arbitrary files and gain root access. | Sep 29, 1999 |
| CVE-1999-0134 | Not scored | vold in Solaris 2.x allows local users to gain root access. | Sep 29, 1999 |
| CVE-1999-0133 | Not scored | fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access. | Sep 29, 1999 |
| CVE-1999-0132 | Not scored | Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access. | Sep 29, 1999 |
| CVE-1999-0131 | Not scored | Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users. | Sep 29, 1999 |
| CVE-1999-0130 | Not scored | Local users can start Sendmail in daemon mode and gain root privileges. | Sep 29, 1999 |
| CVE-1999-0129 | Not scored | Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. | Sep 29, 1999 |
| CVE-1999-0128 | Not scored | Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. | Sep 29, 1999 |
| CVE-1999-0126 | Not scored | SGI IRIX buffer overflow in xterm and Xaw allows root access. | Sep 29, 1999 |
| CVE-1999-0125 | Not scored | Buffer overflow in SGI IRIX mailx program. | Sep 29, 1999 |
| CVE-1999-0122 | Not scored | Buffer overflow in AIX lchangelv gives root access. | Sep 29, 1999 |
| CVE-1999-0120 | Not scored | Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root. | Sep 29, 1999 |
| CVE-1999-0117 | Not scored | AIX passwd allows local users to gain root access. | Sep 29, 1999 |
| CVE-1999-0116 | Not scored | Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood. | Sep 29, 1999 |
| CVE-1999-0113 | Not scored | Some implementations of rlogin allow root access if given a -froot parameter. | Sep 29, 1999 |
| CVE-1999-0112 | Not scored | Buffer overflow in AIX dtterm program for the CDE. | Sep 29, 1999 |
| CVE-1999-0111 | Not scored | RIP v1 is susceptible to spoofing. | Sep 29, 1999 |
| CVE-1999-0109 | Not scored | Buffer overflow in ffbconfig in Solaris 2.5.1. | Sep 29, 1999 |
| CVE-1999-0108 | Not scored | The printers program in IRIX has a buffer overflow that gives root access to local users. | Sep 29, 1999 |
| CVE-1999-0103 | Not scored | Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm. | Sep 29, 1999 |
| CVE-1999-0102 | Not scored | Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line. | Sep 29, 1999 |
| CVE-1999-0100 | Not scored | Remote access in AIX innd 1.5.1, using control messages. | Sep 29, 1999 |
| CVE-1999-0099 | Not scored | Buffer overflow in syslog utility allows local or remote attackers to gain root privileges. | Sep 29, 1999 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.