Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 10.0

    HIGH
    CVE-1999-0765

    SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.... Read more

    Affected Products : irix
    • Published: May. 19, 1999
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-1999-1510

    Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands.... Read more

    Affected Products : bisonware_ftp_server
    • Published: May. 17, 1999
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-1999-1156

    BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns.... Read more

    Affected Products : bisonware_ftp_server
    • Published: May. 17, 1999
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-1999-0489

    MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013.... Read more

    Affected Products : windows_nt
    • Published: May. 17, 1999
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-1999-0716

    Buffer overflow in Windows NT 4.0 help file utility via a malformed help file.... Read more

    Affected Products : windows_2000 windows_nt
    • Published: May. 17, 1999
    • Modified: Apr. 03, 2025

  • 3.6

    LOW
    CVE-1999-1366

    Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail.... Read more

    Affected Products : pegasus_mail
    • Published: May. 15, 1999
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-1999-1029

    SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.... Read more

    Affected Products : ssh2
    • Published: May. 13, 1999
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-1999-1368

    AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft Exchange server, which could allow viruses to escape detection if a user's rules cause the message to be moved to a ... Read more

    Affected Products : inoculateit
    • Published: May. 12, 1999
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-1999-0229

    Denial of service in Windows NT IIS server using ..\..... Read more

    Affected Products : internet_information_server iis
    • Published: May. 12, 1999
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-1999-0776

    Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.... Read more

    Affected Products : alibaba
    • Published: May. 12, 1999
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-1999-0773

    Buffer overflow in Solaris lpset program allows local users to gain root access.... Read more

    Affected Products : solaris sunos
    • Published: May. 11, 1999
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-1999-1520

    A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.... Read more

    Affected Products : site_server
    • Published: May. 11, 1999
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-1999-1033

    Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang.... Read more

    Affected Products : outlook_express
    • Published: May. 11, 1999
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-1999-0785

    The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.... Read more

    Affected Products : inn
    • Published: May. 11, 1999
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-1999-0754

    The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.... Read more

    Affected Products : inn
    • Published: May. 11, 1999
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-1999-0806

    Buffer overflow in Solaris dtprintinfo program.... Read more

    Affected Products : sunos
    • Published: May. 10, 1999
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-1999-1566

    Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters.... Read more

    Affected Products : iparty
    • Published: May. 08, 1999
    • Modified: Apr. 03, 2025

  • 2.6

    LOW
    CVE-1999-0717

    A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.... Read more

    • Published: May. 07, 1999
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-1999-0736

    The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.... Read more

    Affected Products : internet_information_server iis
    • Published: May. 07, 1999
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-1999-0686

    Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.... Read more

    Affected Products : hp-ux enterprise_server vvos
    • Published: May. 07, 1999
    • Modified: Apr. 03, 2025
Showing 20 of 292838 Results