1999 CVE Vulnerabilities
897 CVEs published in 1999.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-1999-1337 | — | — | 0.3% | Aug 1, 1999 | FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the... |
| CVE-1999-0683 | — | — | 2.4% | Jul 30, 1999 | Denial of service in Gauntlet Firewall via a malformed ICMP packet. |
| CVE-1999-1130 | — | — | 3.1% | Jul 30, 1999 | Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remo... |
| CVE-1999-1227 | — | — | 0.3% | Jul 30, 1999 | Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file. |
| CVE-1999-1536 | — | — | 0.3% | Jul 30, 1999 | .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by append... |
| CVE-1999-1078 | — | — | 1.8% | Jul 29, 1999 | WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily d... |
| CVE-1999-0770 | — | — | 1.1% | Jul 29, 1999 | Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to ... |
| CVE-1999-0700 | — | — | 4.8% | Jul 29, 1999 | Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file. |
| CVE-1999-1017 | — | — | 1.1% | Jul 28, 1999 | Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting ... |
| CVE-1999-1018 | — | — | 7.2% | Jul 27, 1999 | IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, wh... |
| CVE-1999-0710 | — | — | 11.6% | Jul 25, 1999 | The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory... |
| CVE-1999-0224 | — | — | 16.8% | Jul 23, 1999 | Denial of service in Windows NT messenger service through a long username. |
| CVE-1999-1338 | — | — | 1.0% | Jul 21, 1999 | Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions. |
| CVE-1999-0810 | — | — | 2.1% | Jul 21, 1999 | Denial of service in Samba NETBIOS name service daemon (nmbd). |
| CVE-1999-1165 | — | — | 0.5% | Jul 21, 1999 | GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (... |
| CVE-1999-0811 | — | — | 2.6% | Jul 21, 1999 | Buffer overflow in Samba smbd program via a malformed message command. |
| CVE-1999-1535 | — | — | 3.7% | Jul 20, 1999 | Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial ... |
| CVE-1999-0721 | — | — | 9.4% | Jul 20, 1999 | Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request. |
| CVE-1999-1560 | — | — | 0.4% | Jul 20, 1999 | Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the T... |
| CVE-1999-0692 | — | — | 2.4% | Jul 19, 1999 | The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain r... |
| CVE-1999-1011 | — | — | 77.1% | Jul 19, 1999 | The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x expose... |
| CVE-1999-1378 | — | — | 1.3% | Jul 19, 1999 | dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read... |
| CVE-1999-1086 | — | — | 2.6% | Jul 15, 1999 | Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain a... |
| CVE-1999-1518 | — | — | 3.1% | Jul 15, 1999 | Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service a... |
| CVE-1999-1545 | — | — | 0.3% | Jul 14, 1999 | Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local u... |
Check if your code is affected by 1999 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now