Search for vulnerabilities


CVE-ID
Description
CVSS-Score
V2
V3
CVE-1999-0499 NETBIOS share information may be published through SNMP registry keys in NT.

7.5

None

CVE-1999-0498 TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files.

10.0

None

CVE-1999-0497 Anonymous FTP is enabled.

0.0

None

CVE-1999-0496 A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin.

7.2

None

CVE-1999-0495 A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares.

10.0

None

CVE-1999-0494 Denial of service in WinGate proxy through a buffer overflow in POP3.

5.0

None

CVE-1999-0493 rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.

7.5

None

CVE-1999-0492 The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.

10.0

None

CVE-1999-0491 The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.

4.6

None

CVE-1999-0490 MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.

7.5

None

CVE-1999-0489 MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013.

10.0

None

CVE-1999-0488 Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability.

7.5

None

CVE-1999-0487 The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.

2.6

None

CVE-1999-0486 Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash.

5.0

None

CVE-1999-0485 Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.

2.6

None

CVE-1999-0484 Buffer overflow in OpenBSD ping.

2.1

None

CVE-1999-0483 OpenBSD crash using nlink value in FFS and EXT2FS filesystems.

2.1

None

CVE-1999-0482 OpenBSD kernel crash through TSS handling, as caused by the crashme program.

5.0

None

CVE-1999-0481 Denial of service in "poll" in OpenBSD.

5.0

None

CVE-1999-0480 Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.

2.1

None