Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 5.0

    MEDIUM
    CVE-2000-0054

    search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack.... Read more

    Affected Products : home_free
    • Published: Jan. 03, 1999
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-1999-0914

    Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.... Read more

    Affected Products : debian_linux
    • Published: Jan. 03, 1999
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2000-0005

    HP-UX aserver program allows local users to gain privileges via a symlink attack.... Read more

    Affected Products : hp-ux aserver 9000
    • Published: Jan. 02, 1999
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-1999-1422

    The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are inadvertently executed by other use... Read more

    Affected Products : slackware_linux
    • Published: Jan. 02, 1999
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-1999-0402

    wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.... Read more

    Affected Products : wget
    • Published: Jan. 02, 1999
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-1999-1170

    IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.... Read more

    Affected Products : imail ws_ftp_server
    • Published: Jan. 02, 1999
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-1999-0240

    Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.... Read more

    Affected Products :
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0527

    The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten.... Read more

    Affected Products :
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0198

    finger .@host on some systems may print information on some user accounts.... Read more

    Affected Products :
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 0.0

    NONE
    CVE-1999-0637

    The systat service is running.... Read more

    Affected Products :
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0454

    A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso.... Read more

    Affected Products :
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0665

    An application-critical Windows NT registry key has an inappropriate value.... Read more

    Affected Products :
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0596

    A Windows NT log file has an inappropriate maximum size or retention period.... Read more

    Affected Products :
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0661

    A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH... Read more

    Affected Products : sendmail
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0569

    A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file.... Read more

    Affected Products :
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0364

    Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.... Read more

    Affected Products : access total_vb_sourcebook
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0577

    A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.... Read more

    Affected Products : windows_nt
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0663

    A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.... Read more

    Affected Products :
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0465

    Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.... Read more

    Affected Products :
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
  • 10.0

    HIGH
    CVE-1999-0601

    A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.... Read more

    Affected Products :
    • Published: Jan. 01, 1999
    • Modified: Apr. 03, 2025
Showing 20 of 294837 Results