CVE Vulnerability Database
Search and browse 394,712 CVE records with CVSS scores, EPSS exploit predictions, CISA KEV status and whether the Vulnix engine has a detection for them.
894 records from 1999Clear filters
- CVE-2000-0361Low 2.1Dec 14, 1999The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.
- CVE-2000-0068High 7.5Dec 14, 1999daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail.
- CVE-1999-1010Low 2.1Dec 14, 1999An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
- CVE-1999-1007High 7.6Dec 13, 1999Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file.
- CVE-1999-1003Medium 5.0Dec 13, 1999War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.
- CVE-1999-0993High 7.5Dec 13, 1999Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.
- CVE-1999-1009Low 2.6Dec 12, 1999The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.
- CVE-1999-0289Medium 5.0Dec 12, 1999The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
- CVE-1999-0977Critical 10.0Dec 10, 1999Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
- CVE-1999-0975Medium 4.6Dec 10, 1999The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
- CVE-1999-0978High 7.5Dec 9, 1999htdig allows remote attackers to execute commands via filenames with shell metacharacters.
- CVE-1999-0974Critical 10.0Dec 9, 1999Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.
- CVE-1999-0972High 7.5Dec 9, 1999Buffer overflow in Xshipwars xsw program.
- CVE-1999-0986Medium 5.0Dec 8, 1999The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.
- CVE-1999-0981Medium 5.1Dec 8, 1999Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."
- CVE-1999-0976Low 2.1Dec 7, 1999Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail.
- CVE-1999-0973Critical 10.0Dec 7, 1999Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.
- CVE-1999-0991Medium 5.0Dec 6, 1999Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.
- CVE-1999-0989High 7.5Dec 6, 1999Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol.
- CVE-1999-0990Low 2.1Dec 5, 1999Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system.
- CVE-1999-0982High 7.2Dec 5, 1999The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file.
- CVE-1999-0988High 7.2Dec 4, 1999UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
- CVE-2000-0358Medium 5.0Dec 3, 1999ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
- CVE-2000-0357High 7.5Dec 3, 1999ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.
- CVE-2000-0139Low 2.1Dec 3, 1999Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.