Common Vulnerabilities and Exposures (CVE) is a critical tool for maintaining software security, providing a standardized way to track and manage vulnerabilities across systems. Organizations should regularly monitor CVE databases, assess the impact of vulnerabilities, and apply patches promptly to reduce the risk of exploitation.
CVE (Common Vulnerabilities and Exposures) is a public database that provides a standardized method for identifying, tracking, and referencing publicly disclosed security vulnerabilities in software and hardware.
Each vulnerability receives a unique identifier called a CVE ID (e.g., CVE-2023-12345), making it easier to reference specific vulnerabilities across different tools and databases.
Total Search Results: 158437
CVE ID | Description | Severity | Published Date | Affected Vendor | Action |
---|---|---|---|---|---|
CVE-1999-0406 | Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege. | Unknown | N/A | n/a | |
CVE-1999-0407 | By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system. | Unknown | N/A | n/a | |
CVE-1999-0408 | Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server. | Unknown | N/A | n/a | |
CVE-1999-0409 | Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access. | Unknown | N/A | n/a | |
CVE-1999-0410 | The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access. | Unknown | N/A | n/a | |
CVE-1999-0411 | Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access. | Unknown | N/A | n/a | |
CVE-1999-0412 | In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. | Unknown | N/A | n/a | |
CVE-1999-0413 | A buffer overflow in the SGI X server allows local users to gain root access through the X server font path. | Unknown | N/A | n/a | |
CVE-1999-0414 | In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection. | Unknown | N/A | n/a | |
CVE-1999-0415 | The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration. | Unknown | N/A | n/a | |
CVE-1999-0416 | Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port. | Unknown | N/A | n/a | |
CVE-1999-0417 | 64 bit Solaris 7 procfs allows local users to perform a denial of service. | Unknown | N/A | n/a | |
CVE-1999-0418 | Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection. | Unknown | N/A | n/a | |
CVE-1999-0419 | When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service. | Unknown | N/A | n/a | |
CVE-1999-0420 | umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program. | Unknown | N/A | n/a | |
CVE-1999-0421 | During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password. | Unknown | N/A | n/a | |
CVE-1999-0422 | In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set. | Unknown | N/A | n/a | |
CVE-1999-0423 | Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges. | Unknown | N/A | n/a | |
CVE-1999-0424 | talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes. | Unknown | N/A | n/a | |
CVE-1999-0425 | talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes. | Unknown | N/A | n/a | |
CVE-1999-0426 | The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing. | Unknown | N/A | n/a | |
CVE-1999-0427 | Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names. | Unknown | N/A | n/a | |
CVE-1999-0428 | OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls. | Unknown | N/A | n/a | |
CVE-1999-0429 | The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference. | Unknown | N/A | n/a | |
CVE-1999-0430 | Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload. | Unknown | N/A | n/a | |
CVE-1999-0431 | Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service. | Unknown | N/A | n/a | |
CVE-1999-0432 | ftp on HP-UX 11.00 allows local users to gain privileges. | Unknown | N/A | n/a | |
CVE-1999-0433 | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. | Unknown | N/A | n/a | |
CVE-1999-0434 | XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. | Unknown | N/A | n/a | |
CVE-1999-0435 | MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM. | Unknown | N/A | n/a | |
CVE-1999-0436 | Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges. | Unknown | N/A | n/a | |
CVE-1999-0437 | Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port. | Unknown | N/A | n/a | |
CVE-1999-0438 | Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address. | Unknown | N/A | n/a | |
CVE-1999-0439 | Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file. | Unknown | N/A | n/a | |
CVE-1999-0440 | The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages. | Unknown | N/A | n/a | |
CVE-1999-0441 | Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service. | Unknown | N/A | n/a | |
CVE-1999-0442 | Solaris ff.core allows local users to modify files. | Unknown | N/A | n/a | |
CVE-1999-0443 | Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password. | Unknown | N/A | n/a | |
CVE-1999-0444 | Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files. | Unknown | N/A | n/a | |
CVE-1999-0445 | In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters. | Unknown | N/A | n/a | |
CVE-1999-0446 | Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS. | Unknown | N/A | n/a | |
CVE-1999-0447 | Local users can gain privileges using the debug utility in the MPE/iX operating system. | Unknown | N/A | n/a | |
CVE-1999-0448 | IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request. | Unknown | N/A | n/a | |
CVE-1999-0449 | The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts. | Unknown | N/A | n/a | |
CVE-1999-0450 | In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). | Unknown | N/A | n/a | |
CVE-1999-0451 | Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port. | Unknown | N/A | n/a | |
CVE-1999-0452 | A service or application has a backdoor password that was placed there by the developer. | Unknown | N/A | n/a | |
CVE-1999-0453 | An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP). | Unknown | N/A | n/a | |
CVE-1999-0454 | A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso. | Unknown | N/A | n/a | |
CVE-1999-0455 | The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly. | Unknown | N/A | n/a | |
CVE-1999-0457 | Linux ftpwatch program allows local users to gain root privileges. | Unknown | N/A | n/a | |
CVE-1999-0458 | L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information. | Unknown | N/A | n/a | |
CVE-1999-0459 | Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot. | Unknown | N/A | n/a | |
CVE-1999-0460 | Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service. | Unknown | N/A | n/a | |
CVE-1999-0461 | Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address. | Unknown | N/A | n/a | |
CVE-1999-0462 | suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk. | Unknown | N/A | n/a | |
CVE-1999-0463 | Remote attackers can perform a denial of service using IRIX fcagent. | Unknown | N/A | n/a | |
CVE-1999-0464 | Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames. | Unknown | N/A | n/a | |
CVE-1999-0465 | Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter. | Unknown | N/A | n/a | |
CVE-1999-0466 | The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device. | Unknown | N/A | n/a | |
CVE-1999-0467 | The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter. | Unknown | N/A | n/a | |
CVE-1999-0468 | Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component. | Unknown | N/A | n/a | |
CVE-1999-0469 | Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client. | Unknown | N/A | n/a | |
CVE-1999-0470 | A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted. | Unknown | N/A | n/a | |
CVE-1999-0471 | The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button. | Unknown | N/A | n/a | |
CVE-1999-0472 | The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it. | Unknown | N/A | n/a | |
CVE-1999-0473 | The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred. | Unknown | N/A | n/a | |
CVE-1999-0474 | The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory. | Unknown | N/A | n/a | |
CVE-1999-0475 | A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail. | Unknown | N/A | n/a | |
CVE-1999-0476 | A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user. | Unknown | N/A | n/a | |
CVE-1999-0477 | The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly. | Unknown | N/A | n/a | |
CVE-1999-0478 | Denial of service in HP-UX sendmail 8.8.6 related to accepting connections. | Unknown | N/A | n/a | |
CVE-1999-0479 | Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems. | Unknown | N/A | n/a | |
CVE-1999-0480 | Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack. | Unknown | N/A | n/a | |
CVE-1999-0481 | Denial of service in "poll" in OpenBSD. | Unknown | N/A | n/a | |
CVE-1999-0482 | OpenBSD kernel crash through TSS handling, as caused by the crashme program. | Unknown | N/A | n/a | |
CVE-1999-0483 | OpenBSD crash using nlink value in FFS and EXT2FS filesystems. | Unknown | N/A | n/a | |
CVE-1999-0484 | Buffer overflow in OpenBSD ping. | Unknown | N/A | n/a | |
CVE-1999-0485 | Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD. | Unknown | N/A | n/a | |
CVE-1999-0486 | Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash. | Unknown | N/A | n/a | |
CVE-1999-0487 | The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files. | Unknown | N/A | n/a | |
CVE-1999-0488 | Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability. | Unknown | N/A | n/a | |
CVE-1999-0489 | MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013. | Unknown | N/A | n/a | |
CVE-1999-0490 | MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag. | Unknown | N/A | n/a | |
CVE-1999-0491 | The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute. | Unknown | N/A | n/a | |
CVE-1999-0492 | The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses. | Unknown | N/A | n/a | |
CVE-1999-0493 | rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd. | Unknown | N/A | n/a | |
CVE-1999-0494 | Denial of service in WinGate proxy through a buffer overflow in POP3. | Unknown | N/A | n/a | |
CVE-1999-0495 | A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares. | Unknown | N/A | n/a | |
CVE-1999-0496 | A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin. | Unknown | N/A | n/a | |
CVE-1999-0497 | Anonymous FTP is enabled. | Unknown | N/A | n/a | |
CVE-1999-0498 | TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files. | Unknown | N/A | n/a | |
CVE-1999-0499 | NETBIOS share information may be published through SNMP registry keys in NT. | Unknown | N/A | n/a | |
CVE-1999-0501 | A Unix account has a guessable password. | Unknown | N/A | n/a | |
CVE-1999-0502 | A Unix account has a default, null, blank, or missing password. | Unknown | N/A | n/a | |
CVE-1999-0503 | A Windows NT local user or administrator account has a guessable password. | Unknown | N/A | n/a | |
CVE-1999-0504 | A Windows NT local user or administrator account has a default, null, blank, or missing password. | Unknown | N/A | n/a | |
CVE-1999-0505 | A Windows NT domain user or administrator account has a guessable password. | Unknown | N/A | n/a | |
CVE-1999-0506 | A Windows NT domain user or administrator account has a default, null, blank, or missing password. | Unknown | N/A | n/a | |
CVE-1999-0507 | An account on a router, firewall, or other network device has a guessable password. | Unknown | N/A | n/a |
vunerability-insight.com © 2023 - 2025. All Rights Reserved.
Vulnerability Data Repositories v