Total
27865 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-1999-0119 | 1 Microsoft | 1 Windows Nt | 2022-08-16 | 10.0 HIGH | N/A |
Windows NT 4.0 beta allows users to read and delete shares. | |||||
CVE-1999-0080 | 1 Washington University | 1 Wu-ftpd | 2022-08-16 | 10.0 HIGH | N/A |
Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command. | |||||
CVE-1999-0578 | 1 Microsoft | 1 Windows Nt | 2022-08-16 | 4.6 MEDIUM | N/A |
A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys. | |||||
CVE-1999-0345 | 4 Freebsd, Ibm, Sco and 1 more | 7 Freebsd, Aix, Sng and 4 more | 2022-08-16 | 5.0 MEDIUM | N/A |
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. | |||||
CVE-1999-0748 | 1 Redhat | 1 Linux | 2022-08-16 | 7.5 HIGH | N/A |
Buffer overflows in Red Hat net-tools package. | |||||
CVE-1999-0081 | 1 Washington University | 1 Wu-ftpd | 2022-08-16 | 5.0 MEDIUM | N/A |
wu-ftp allows files to be overwritten via the rnfr command. | |||||
CVE-1999-0651 | 2022-08-16 | 7.5 HIGH | N/A | ||
The rsh/rlogin service is running. | |||||
CVE-1999-0599 | 2022-08-16 | 10.0 HIGH | N/A | ||
A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers. | |||||
CVE-1999-0583 | 2022-08-16 | 10.0 HIGH | N/A | ||
There is a one-way or two-way trust relationship between Windows NT domains. | |||||
CVE-1999-0590 | 3 Apple, Linux, Microsoft | 6 Macos, Linux Kernel, Windows 2000 and 3 more | 2022-08-16 | 10.0 HIGH | N/A |
A system does not present an appropriate legal message or warning to a user who is accessing it. | |||||
CVE-1999-0601 | 2022-08-16 | 10.0 HIGH | N/A | ||
A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets. | |||||
CVE-1999-0064 | 1 Ibm | 1 Aix | 2022-08-16 | 7.2 HIGH | N/A |
Buffer overflow in AIX lquerylv program gives root access to local users. | |||||
CVE-1999-0287 | 1 Webcom | 1 Cgi Guestbook | 2022-08-16 | 7.5 HIGH | N/A |
Vulnerability in the Wguest CGI program. | |||||
CVE-1999-0200 | 2022-08-16 | 10.0 HIGH | N/A | ||
Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password. | |||||
CVE-1999-0856 | 1 Slackware | 1 Slackware Linux | 2022-08-16 | 5.0 MEDIUM | N/A |
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist. | |||||
CVE-1999-0444 | 1 Microsoft | 3 Windows 95, Windows 98, Windows Nt | 2022-08-16 | 5.0 MEDIUM | N/A |
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files. | |||||
CVE-2003-0836 | 1 Ibm | 1 Db2 Universal Database | 2022-08-16 | 7.5 HIGH | N/A |
Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to execute arbitrary code via a LOAD command. | |||||
CVE-2022-2824 | 1 Open-emr | 1 Openemr | 2022-08-16 | N/A | 5.4 MEDIUM |
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.0.1. | |||||
CVE-2022-35980 | 1 Amazon | 1 Opensearch | 2022-08-16 | N/A | 7.5 HIGH |
OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Versions 2.0.0.0 and 2.1.0.0 of the security plugin are affected by an information disclosure vulnerability. Requests to an OpenSearch cluster configured with advanced access control features document level security (DLS), field level security (FLS), and/or field masking will not be filtered when the query's search pattern matches an aliased index. OpenSearch Dashboards creates an alias to `.kibana` by default, so filters with the index pattern of `*` to restrict access to documents or fields will not be applied. This issue allows requests to access sensitive information when customer have acted to restrict access that specific information. OpenSearch 2.2.0, which is compatible with OpenSearch Security 2.2.0.0, contains the fix for this issue. There is no recommended work around. | |||||
CVE-2016-3189 | 2 Bzip, Python | 2 Bzip2, Python | 2022-08-16 | 4.3 MEDIUM | 6.5 MEDIUM |
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. |