Export limit exceeded: 30000 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (30000 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-1999-0177 1 Oreilly 1 Website 2026-04-16 N/A
The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs.
CVE-1999-0185 1 Sun 2 Solaris, Sunos 2026-04-16 N/A
In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.
CVE-1999-0180 2026-04-16 N/A
in.rshd allows users to login with a NULL username and execute commands.
CVE-1999-0183 2 Linux, Tftp 2 Linux Kernel, Tftp 2026-04-16 N/A
Linux implementations of TFTP would allow access to files outside the restricted directory.
CVE-1999-0184 1 Isc 1 Bind 2026-04-16 N/A
When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.
CVE-1999-0186 1 Sun 1 Solaris 2026-04-16 N/A
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters.
CVE-1999-0188 1 Sun 2 Solaris, Sunos 2026-04-16 N/A
The passwd command in Solaris can be subjected to a denial of service.
CVE-1999-0191 1 Microsoft 1 Internet Information Server 2026-04-16 N/A
IIS newdsn.exe CGI script allows remote users to overwrite files.
CVE-1999-0193 1 Ascend 1 Cascadeview Ux 2026-04-16 N/A
Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
CVE-2006-2987 1 Dominios Europa 1 Picrate 2026-04-16 N/A
Multiple SQL injection vulnerabilities in Dominios Europa PICRATE (aka TAL RateMyPic) 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) voteid, and (3) vfiel parameters to (a) index.php, and via the (4) nick, (5) email, (6) city, (7) messen, and (8) message form field parameters to (b) add.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVE-1999-0196 1 Webgais Development Team 1 Webgais 2026-04-16 N/A
websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).
CVE-1999-0197 2026-04-16 N/A
finger 0@host on some systems may print information on some user accounts.
CVE-1999-0198 2026-04-16 N/A
finger .@host on some systems may print information on some user accounts.
CVE-1999-0204 1 Eric Allman 1 Sendmail 2026-04-16 N/A
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
CVE-1999-0202 1 University Of Washington 1 Wu-ftpd 2026-04-16 N/A
The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.
CVE-1999-0205 1 Eric Allman 1 Sendmail 2026-04-16 N/A
Denial of service in Sendmail 8.6.11 and 8.6.12.
CVE-1999-0207 1 Great Circle Associates 1 Majordomo 2026-04-16 N/A
Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
CVE-1999-0206 1 Eric Allman 1 Sendmail 2026-04-16 N/A
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
CVE-2006-3002 1 Easy Ad-manager 1 Easy Ad-manager 2026-04-16 N/A
Cross-site scripting (XSS) vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary web script or HTML via the mbid parameter, which is reflected in an error message. NOTE: on 20060829, the vendor notified CVE that this issue has been fixed.
CVE-1999-0215 1 Sgi 1 Irix 2026-04-16 N/A
Routed allows attackers to append data to files.