1999 CVE Vulnerabilities
900 CVEs published in 1999.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-1999-0384 | — | — | 1.2% | Jan 1, 1999 | The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's c... |
| CVE-1999-0361 | — | — | 1.6% | Jan 1, 1999 | NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logg... |
| CVE-1999-0355 | — | — | 1.8% | Jan 1, 1999 | Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service. |
| CVE-1999-0393 | — | — | 2.4% | Jan 1, 1999 | Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of he... |
| CVE-1999-0286 | — | — | 2.0% | Jan 1, 1999 | In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages. |
| CVE-1999-0285 | — | — | 6.6% | Jan 1, 1999 | Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection. |
| CVE-1999-0283 | — | — | 8.9% | Jan 1, 1999 | The Java Web Server would allow remote users to obtain the source code for CGI programs. |
| CVE-1999-0276 | — | — | 3.1% | Jan 1, 1999 | mSQL v2.0.1 and below allows remote execution through a buffer overflow. |
| CVE-1999-0268 | — | — | 5.9% | Jan 1, 1999 | MetaInfo MetaWeb web server allows users to upload, execute, and read scripts. |
| CVE-1999-0255 | — | — | 3.0% | Jan 1, 1999 | Buffer overflow in ircd allows arbitrary command execution. |
| CVE-1999-0248 | — | — | 1.6% | Jan 1, 1999 | A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credent... |
| CVE-1999-0220 | — | — | 1.6% | Jan 1, 1999 | Attackers can do a denial of service of IRC by crashing the server. |
| CVE-1999-0205 | — | — | 1.3% | Jan 1, 1999 | Denial of service in Sendmail 8.6.11 and 8.6.12. |
| CVE-1999-0200 | — | — | 1.6% | Jan 1, 1999 | Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP se... |
| CVE-1999-0198 | — | — | 1.6% | Jan 1, 1999 | finger .@host on some systems may print information on some user accounts. |
| CVE-1999-0197 | — | — | 1.6% | Jan 1, 1999 | finger 0@host on some systems may print information on some user accounts. |
| CVE-1999-0395 | — | — | 0.9% | Jan 1, 1999 | A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server. |
| CVE-1999-0397 | — | — | 1.6% | Jan 1, 1999 | The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext. |
| CVE-1999-0398 | — | — | 0.4% | Jan 1, 1999 | In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login. |
| CVE-1999-0399 | — | — | 2.7% | Jan 1, 1999 | The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attack... |
| CVE-1999-0401 | — | — | 0.3% | Jan 1, 1999 | A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files. |
| CVE-1999-0020 | — | — | — | Jan 1, 1999 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of... |
| CVE-1999-0110 | — | — | — | Jan 1, 1999 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0315. Reason: This candidate's original descri... |
| CVE-1999-0187 | — | — | — | Jan 1, 1999 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0022. Reason: This candidate is a duplicate of... |
| CVE-1999-0226 | — | — | 5.9% | Jan 1, 1999 | Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service. |
Check if your code is affected by 1999 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now