Export limit exceeded: 421368 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 421368 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 421368 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (30000 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-1999-1274 | 1 Ipass | 1 Roamserver | 2026-04-16 | N/A |
| iPass RoamServer 3.1 creates temporary files with world-writable permissions. | ||||
| CVE-1999-1273 | 1 National Science Foundation | 1 Squid Web Proxy | 2026-04-16 | N/A |
| Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences. | ||||
| CVE-1999-1272 | 1 Sgi | 1 Irix | 2026-04-16 | N/A |
| Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges. | ||||
| CVE-1999-1271 | 1 Macromedia | 1 Dreamweaver | 2026-04-16 | N/A |
| Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users. | ||||
| CVE-1999-1270 | 1 Kde | 1 Kde | 2026-04-16 | N/A |
| KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps. | ||||
| CVE-1999-1269 | 1 Kde | 1 Kde Beta 3 | 2026-04-16 | N/A |
| Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file. | ||||
| CVE-1999-1268 | 1 Kde | 1 Kde | 2026-04-16 | N/A |
| Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices. | ||||
| CVE-1999-1267 | 1 Kde | 1 Kde | 2026-04-16 | N/A |
| KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server. | ||||
| CVE-1999-1266 | 1 Metamail Corporation | 1 Metamail | 2026-04-16 | N/A |
| rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system. | ||||
| CVE-1999-1265 | 1 Seatle Lab Software | 1 Slmail | 2026-04-16 | N/A |
| SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character, such as (1) SEND, (2) VRFY, (3) EXPN, (4) MAIL FROM, (5) RCPT TO. | ||||
| CVE-1999-1264 | 1 Ramp Networks | 1 Webramp | 2026-04-16 | N/A |
| WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled. | ||||
| CVE-1999-1263 | 1 Metamail Corporation | 1 Metamail | 2026-04-16 | N/A |
| Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file. | ||||
| CVE-1999-1262 | 1 Netscape | 1 Communicator | 2026-04-16 | N/A |
| Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities. | ||||
| CVE-1999-1261 | 1 Metamail Corporation | 1 Metamail | 2026-04-16 | N/A |
| Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname (nick) command. | ||||
| CVE-1999-1260 | 1 Hughes | 1 Msql | 2026-04-16 | N/A |
| mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query. | ||||
| CVE-1999-1259 | 1 Microsoft | 1 Office | 2026-04-16 | N/A |
| Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data from previously deleted files into the Office file, which could allow attackers to obtain sensitive information. | ||||
| CVE-1999-1012 | 1 Lotus | 1 Domino | 2026-04-16 | N/A |
| SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string. | ||||
| CVE-1999-1010 | 1 Openbsd | 1 Openssh | 2026-04-16 | N/A |
| An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy. | ||||
| CVE-1999-1009 | 1 Disney | 1 Go Express Search | 2026-04-16 | N/A |
| The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system. | ||||
| CVE-1999-1008 | 2 Freebsd, Mandrakesoft | 2 Freebsd, Mandrake Linux | 2026-04-16 | N/A |
| xsoldier program allows local users to gain root access via a long argument. | ||||