CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 9 and 10)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
16001 CVE-1999-0935 Exec Code 1999-12-15 2005-05-02
10.0
None Remote Low Not required Complete Complete Complete
classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.
16002 CVE-1999-0926 DoS 1999-09-03 2008-09-05
10.0
None Remote Low Not required Complete Complete Complete
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
16003 CVE-1999-0920 Overflow +Priv 1999-05-26 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.
16004 CVE-1999-0919 DoS 1998-05-10 2017-12-18
10.0
Admin Remote Low Not required Complete Complete Complete
A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections.
16005 CVE-1999-0913 Exec Code 1999-08-05 2016-10-17
10.0
Admin Remote Low Not required Complete Complete Complete
dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.
16006 CVE-1999-0911 Overflow 1999-08-27 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
16007 CVE-1999-0896 Exec Code Overflow 1999-11-04 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.
16008 CVE-1999-0894 2000-01-04 2008-09-05
10.0
None Remote Low Not required Complete Complete Complete
Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.
16009 CVE-1999-0886 16 1999-09-17 2018-10-12
9.0
Admin Remote Low Single system Complete Complete Complete
The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.
16010 CVE-1999-0883 1999-10-25 2018-05-02
10.0
Admin Remote Low Not required Complete Complete Complete
Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.
16011 CVE-1999-0879 Overflow +Priv 1999-10-01 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
16012 CVE-1999-0878 Overflow +Priv 1999-08-22 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.
16013 CVE-1999-0876 119 Overflow 2000-01-04 2018-08-13
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in Internet Explorer 4.0 via EMBED tag.
16014 CVE-1999-0874 119 DoS Overflow 1999-06-16 2018-10-12
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
16015 CVE-1999-0853 Overflow +Priv 1999-12-01 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
16016 CVE-1999-0837 DoS 1999-11-10 2018-10-30
10.0
Admin Remote Low Not required Complete Complete Complete
Denial of service in BIND by improperly closing TCP sessions via so_linger.
16017 CVE-1999-0836 1998-12-02 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
16018 CVE-1999-0835 DoS 1999-11-10 2018-10-30
10.0
Admin Remote Low Not required Complete Complete Complete
Denial of service in BIND named via malformed SIG records.
16019 CVE-1999-0834 Overflow 1999-12-01 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library.
16020 CVE-1999-0832 Exec Code Overflow 1999-11-09 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.
16021 CVE-1999-0822 Overflow 1999-11-30 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.
16022 CVE-1999-0817 1999-09-15 2008-09-05
10.0
None Remote Low Not required Complete Complete Complete
Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.
16023 CVE-1999-0816 1998-05-10 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024.
16024 CVE-1999-0814 1999-08-11 2008-09-09
10.0
None Remote Low Not required Complete Complete Complete
Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.
16025 CVE-1999-0810 DoS 1999-07-21 2008-09-05
10.0
None Remote Low Not required Complete Complete Complete
Denial of service in Samba NETBIOS name service daemon (nmbd).
16026 CVE-1999-0801 1999-04-09 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.
16027 CVE-1999-0799 Overflow 1997-06-01 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location.
16028 CVE-1999-0798 Overflow 1998-12-04 2016-10-17
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
16029 CVE-1999-0791 1999-10-06 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol.
16030 CVE-1999-0789 Overflow 1999-09-28 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in AIX ftpd in the libc library.
16031 CVE-1999-0775 1999-06-10 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list.
16032 CVE-1999-0766 16 Exec Code 1999-10-21 2018-10-12
9.3
Admin Remote Medium Not required Complete Complete Complete
The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.
16033 CVE-1999-0765 1999-05-19 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.
16034 CVE-1999-0760 +Priv 2001-03-12 2017-10-09
10.0
Admin Remote Low Not required Complete Complete Complete
Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.
16035 CVE-1999-0759 Overflow 1999-09-13 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
16036 CVE-1999-0754 +Priv 1999-05-11 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.
16037 CVE-1999-0745 Overflow 1999-08-18 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.
16038 CVE-1999-0741 1999-08-19 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
QMS CrownNet Unix Utilities for 2060 allows root to log on without a password.
16039 CVE-1999-0730 1999-06-12 2008-09-05
10.0
None Remote Low Not required Complete Complete Complete
The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.
16040 CVE-1999-0722 1999-08-08 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.
16041 CVE-1999-0704 Overflow 1999-09-16 2008-09-09
9.3
Admin Remote Medium Not required Complete Complete Complete
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
16042 CVE-1999-0702 94 1999-09-10 2018-10-12
10.0
None Remote Low Not required Complete Complete Complete
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability.
16043 CVE-1999-0698 DoS 1999-01-01 2005-10-20
10.0
None Remote Low Not required Complete Complete Complete
Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux.
16044 CVE-1999-0696 Overflow 1999-07-01 2018-10-30
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).
16045 CVE-1999-0692 +Priv 1999-07-19 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
16046 CVE-1999-0667 DoS 1997-09-19 2008-09-09
10.0
None Remote Low Not required Complete Complete Complete
The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service.
16047 CVE-1999-0665 1999-01-01 2005-10-20
10.0
None Remote Low Not required Complete Complete Complete
An application-critical Windows NT registry key has an inappropriate value.
16048 CVE-1999-0664 1999-01-01 2005-10-20
10.0
None Remote Low Not required Complete Complete Complete
An application-critical Windows NT registry key has inappropriate permissions.
16049 CVE-1999-0663 1999-01-01 2005-10-20
10.0
None Remote Low Not required Complete Complete Complete
A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.
16050 CVE-1999-0662 1999-01-01 2005-10-20
10.0
None Remote Low Not required Complete Complete Complete
A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.