Search

Search

CVEs (127,912, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 376–400 of 127,912 (capped at 500)

CVE ID	Severity	Patch	CVSS	Published ↑	Description
CVE-1999-1289	HIGH		7.5	1998-11-11	ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g. through NAT), which provide…
CVE-1999-0057	HIGH		7.5	1998-11-16	Vacation program allows command execution by remote users through a sendmail command.
CVE-1999-0781	HIGH		7.2	1998-11-18	KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables.
CVE-1999-1107	HIGH		7.2	1998-11-18	Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable.
CVE-1999-1411	HIGH		7.5	1998-11-26	The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonym…
CVE-1999-1071	HIGH		7.2	1998-11-30	Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite account…
CVE-1999-1072	HIGH		7.2	1998-11-30	Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and re…
CVE-1999-1073	HIGH		7.2	1998-11-30	Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker …
CVE-1999-0321	HIGH		7.2	1998-12-01	Buffer overflow in Solaris kcms_configure command allows local users to gain root access.
CVE-1999-0332	HIGH		7.5	1998-12-01	Buffer overflow in NetMeeting allows denial of service and remote command execution.
CVE-1999-0385	HIGH		10.0	1998-12-01	The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands.
CVE-1999-0836	HIGH		10.0	1998-12-02	UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
CVE-1999-0936	HIGH		10.0	1998-12-03	BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.
CVE-1999-0937	HIGH		10.0	1998-12-03	BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.
CVE-1999-1280	HIGH		7.5	1998-12-03	Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file.
CVE-1999-0798	HIGH		10.0	1998-12-04	Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
CVE-1999-1147	HIGH		7.5	1998-12-04	Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute arbitrary commands via a long string to the Agent port (1827), which is h…
CVE-1999-1276	HIGH	Patched	7.2	1998-12-07	fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root access via the virtual console device.
CVE-1999-0139	HIGH		7.2	1998-12-12	Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access.
CVE-1999-0188	HIGH		7.2	1998-12-17	The passwd command in Solaris can be subjected to a denial of service.
CVE-1999-1278	HIGH		7.5	1998-12-25	nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (1) nlog-smb.p…
CVE-1999-0968	HIGH	Patched	7.5	1998-12-26	Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges.
CVE-1999-0197	HIGH		10.0	1999-01-01	finger 0@host on some systems may print information on some user accounts.
CVE-1999-0198	HIGH		10.0	1999-01-01	finger .@host on some systems may print information on some user accounts.
CVE-1999-0200	HIGH		10.0	1999-01-01	Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.