CVE Vulnerability Database
Search and browse 394,627 CVE records with CVSS scores, EPSS exploit predictions, CISA KEV status and whether the Vulnix engine has a detection for them.
894 records from 1999Clear filters
- CVE-2000-0030Medium 5.0Dec 22, 1999Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
- CVE-2000-0018High 7.2Dec 22, 1999wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.
- CVE-2000-0002Critical 10.0Dec 22, 1999Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.
- CVE-1999-1109Medium 5.0Dec 22, 1999Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.
- CVE-1999-1066Medium 5.0Dec 22, 1999Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request.
- CVE-2000-0026Critical 10.0Dec 21, 1999Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.
- CVE-2000-0025Medium 5.0Dec 21, 1999IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.
- CVE-2000-0024Medium 6.4Dec 21, 1999IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.
- CVE-2000-0023Medium 5.0Dec 21, 1999Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.
- CVE-2000-0022Medium 5.0Dec 21, 1999Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.
- CVE-2000-0017Critical 10.0Dec 21, 1999Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.
- CVE-1999-1497High 7.2Dec 21, 1999Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
- CVE-2000-0020Medium 5.0Dec 20, 1999DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.
- CVE-1999-0997High 7.5Dec 20, 1999wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
- CVE-1999-1006Medium 5.0Dec 19, 1999Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.
- CVE-1999-1005Medium 5.0Dec 19, 1999Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
- CVE-1999-1004Medium 5.0Dec 16, 1999Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.
- CVE-1999-1001Low 2.6Dec 16, 1999Cisco Cache Engine allows a remote attacker to gain access via a null username and password.
- CVE-1999-1000Medium 5.0Dec 16, 1999The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.
- CVE-1999-0998Medium 5.0Dec 16, 1999Cisco Cache Engine allows an attacker to replace content in the cache.
- CVE-1999-0995High 7.8Dec 16, 1999Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."
- CVE-1999-0994Medium 5.0Dec 16, 1999Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.
- CVE-1999-0996High 7.5Dec 15, 1999Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.
- CVE-1999-0935Critical 10.0Dec 15, 1999classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.
- CVE-1999-0934Medium 5.0Dec 15, 1999classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.