1999 CVE Vulnerabilities
897 CVEs published in 1999.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-1999-1094 | — | — | 18.1% | Dec 31, 1999 | Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long U... |
| CVE-1999-1473 | — | — | 6.5% | Dec 31, 1999 | When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authenticati... |
| CVE-1999-1584 | — | — | 1.4% | Dec 31, 1999 | Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS... |
| CVE-1999-1132 | — | — | 15.0% | Dec 31, 1999 | Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a ... |
| CVE-1999-1246 | — | — | 9.2% | Dec 31, 1999 | Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue n... |
| CVE-1999-1382 | — | — | 0.4% | Dec 31, 1999 | NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allo... |
| CVE-1999-1042 | — | — | 0.3% | Dec 31, 1999 | Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitiv... |
| CVE-1999-1279 | — | — | 5.0% | Dec 31, 1999 | An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view e... |
| CVE-1999-1317 | — | — | 1.8% | Dec 31, 1999 | Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? obj... |
| CVE-1999-1587 | — | — | 0.9% | Dec 31, 1999 | /usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environmen... |
| CVE-1999-1126 | — | — | 0.4% | Dec 31, 1999 | Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to o... |
| CVE-1999-1316 | — | — | 3.9% | Dec 31, 1999 | Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easi... |
| CVE-1999-1233 | — | — | 5.5% | Dec 31, 1999 | IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does n... |
| CVE-1999-1043 | — | — | 13.3% | Dec 31, 1999 | Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, whic... |
| CVE-1999-1300 | — | — | 0.3% | Dec 31, 1999 | Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounti... |
| CVE-1999-1124 | — | — | 1.5% | Dec 31, 1999 | HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports... |
| CVE-1999-1223 | — | — | 15.7% | Dec 31, 1999 | IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a la... |
| CVE-1999-1358 | — | — | 1.4% | Dec 31, 1999 | When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the loc... |
| CVE-1999-0001 | — | — | 3.4% | Dec 30, 1999 | ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) vi... |
| CVE-1999-1573 | — | — | 5.1% | Dec 28, 1999 | Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (... |
| CVE-1999-0455 | — | — | 5.5% | Dec 25, 1999 | The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server ... |
| CVE-1999-0477 | — | — | 5.3% | Dec 25, 1999 | The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via... |
| CVE-1999-0892 | — | — | 0.4% | Dec 24, 1999 | Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the f... |
| CVE-1999-1109 | — | — | 7.2% | Dec 22, 1999 | Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then di... |
| CVE-1999-1066 | — | — | 1.3% | Dec 22, 1999 | Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote at... |
Check if your code is affected by 1999 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now