Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

153,531 CVEs · Medium severity

CVEs (153,531, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 476–500 of 153,531 (capped at 500)

CVE ID Severity Patch CVSS Published Description
CVE-1999-0848 MEDIUM 5.0 1999-11-10 Denial of service in BIND named via consuming more than "fdmax" file descriptors.
CVE-1999-0849 MEDIUM 5.0 1999-11-10 Denial of service in BIND named via maxdname.
CVE-2000-0329 MEDIUM 5.1 1999-11-11 A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Con…
CVE-1999-1050 MEDIUM 5.0 1999-11-12 Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach a…
CVE-1999-1110 MEDIUM 5.0 1999-11-14 Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to de…
CVE-1999-1528 MEDIUM 4.6 1999-11-14 ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the sa…
CVE-1999-1051 MEDIUM 5.0 1999-11-16 Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which…
CVE-1999-1092 MEDIUM 4.6 1999-11-17 tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.
CVE-1999-1519 MEDIUM 5.0 1999-11-17 Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.
CVE-2000-0073 MEDIUM 5.0 1999-11-17 Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word.
CVE-1999-0831 MEDIUM 5.0 1999-11-19 Denial of service in Linux syslogd via a large number of connections.
CVE-1999-0999 MEDIUM 4.3 1999-11-19 Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
CVE-1999-1475 MEDIUM 4.6 1999-11-19 ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading …
CVE-1999-0844 MEDIUM 5.0 1999-11-24 Denial of service in MDaemon WorldClient and WebConfig services via a long URL.
CVE-1999-1548 MEDIUM Patched 5.0 1999-11-24 Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests…
CVE-1999-0842 MEDIUM 5.0 1999-11-29 Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.
CVE-1999-0847 MEDIUM 5.0 1999-11-29 Buffer overflow in free internet chess server (FICS) program, xboard.
CVE-1999-0824 MEDIUM 4.6 1999-11-30 A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of f…
CVE-1999-0819 MEDIUM 5.0 1999-12-01 NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
CVE-1999-0820 MEDIUM 4.6 1999-12-01 FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.
CVE-1999-0823 MEDIUM 4.6 1999-12-01 Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.
CVE-1999-0826 MEDIUM 4.6 1999-12-01 Buffer overflow in FreeBSD angband allows local users to gain privileges.
CVE-1999-0838 MEDIUM 5.0 1999-12-01 Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
CVE-1999-0846 MEDIUM 5.0 1999-12-01 Denial of service in MDaemon 2.7 via a large number of connection attempts.
CVE-1999-0856 MEDIUM 5.0 1999-12-01 login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.