Export limit exceeded: 425803 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 30000 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (30000 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2006-2616 | 1 Alstrasoft | 1 Webhost Directory | 2026-04-16 | N/A |
| SQL injection vulnerability in the search script in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to execute arbitrary SQL commands via the uri parameter. | ||||
| CVE-1999-1262 | 1 Netscape | 1 Communicator | 2026-04-16 | N/A |
| Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities. | ||||
| CVE-1999-1261 | 1 Metamail Corporation | 1 Metamail | 2026-04-16 | N/A |
| Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname (nick) command. | ||||
| CVE-1999-1266 | 1 Metamail Corporation | 1 Metamail | 2026-04-16 | N/A |
| rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system. | ||||
| CVE-1999-1265 | 1 Seatle Lab Software | 1 Slmail | 2026-04-16 | N/A |
| SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character, such as (1) SEND, (2) VRFY, (3) EXPN, (4) MAIL FROM, (5) RCPT TO. | ||||
| CVE-1999-1264 | 1 Ramp Networks | 1 Webramp | 2026-04-16 | N/A |
| WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled. | ||||
| CVE-1999-1312 | 1 Dec | 2 Dec Openvms Axp, Dec Openvms Vax | 2026-04-16 | N/A |
| Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges. | ||||
| CVE-1999-1271 | 1 Macromedia | 1 Dreamweaver | 2026-04-16 | N/A |
| Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users. | ||||
| CVE-1999-1272 | 1 Sgi | 1 Irix | 2026-04-16 | N/A |
| Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges. | ||||
| CVE-1999-1275 | 1 Ibm | 1 Lotus Cc Mail | 2026-04-16 | N/A |
| Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges. | ||||
| CVE-1999-1269 | 1 Kde | 1 Kde Beta 3 | 2026-04-16 | N/A |
| Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file. | ||||
| CVE-1999-1273 | 1 National Science Foundation | 1 Squid Web Proxy | 2026-04-16 | N/A |
| Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences. | ||||
| CVE-1999-1274 | 1 Ipass | 1 Roamserver | 2026-04-16 | N/A |
| iPass RoamServer 3.1 creates temporary files with world-writable permissions. | ||||
| CVE-1999-1277 | 1 Backweb Technologies | 1 Backweb Client | 2026-04-16 | N/A |
| BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password. | ||||
| CVE-1999-1278 | 1 Nlog | 1 Nlog | 2026-04-16 | N/A |
| nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (1) nlog-smb.pl or (2) rpc-nlog.pl. | ||||
| CVE-1999-1283 | 1 Opera Software | 1 Opera Web Browser | 2026-04-16 | N/A |
| Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag. | ||||
| CVE-1999-1280 | 1 Hummingbird | 1 Exceed | 2026-04-16 | N/A |
| Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file. | ||||
| CVE-1999-1281 | 1 Winddance Networks Corporation | 1 Breeze Network Server | 2026-04-16 | N/A |
| Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program. | ||||
| CVE-1999-1282 | 1 Realnetworks | 1 Realsystem G2 Server | 2026-04-16 | N/A |
| RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges. | ||||
| CVE-1999-1284 | 1 Puppets Place | 1 Nukenabber | 2026-04-16 | N/A |
| NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sending any data, which causes the CPU usage to rise to 100% from the report.exe program that is executed upon the connection. | ||||