CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 6 and 6.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
16051 CVE-1999-1274 1997-12-29 2017-12-18
6.4
None Remote Low Not required Partial Partial None
iPass RoamServer 3.1 creates temporary files with world-writable permissions.
16052 CVE-1999-1167 XSS 1999-12-31 2008-09-05
6.4
None Remote Low Not required Partial Partial None
Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation.
16053 CVE-1999-1162 DoS 1993-05-24 2008-09-05
6.4
None Remote Low Not required None Partial Partial
Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system.
16054 CVE-1999-1097 1999-05-04 2017-12-18
6.4
None Remote Low Not required Partial Partial None
Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty.
16055 CVE-1999-1022 +Priv 1994-10-02 2017-12-18
6.2
Admin Local High Not required Complete Complete Complete
serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.
16056 CVE-1999-0965 1997-09-19 2008-09-09
6.2
Admin Local High Not required Complete Complete Complete
Race condition in xterm allows local users to modify arbitrary files via the logging option.
16057 CVE-1999-0961 +Priv 1996-09-21 2016-10-17
6.2
Admin Local High Not required Complete Complete Complete
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.
16058 CVE-1999-0772 DoS 1999-06-01 2008-09-09
6.4
None Remote Low Not required Partial None Partial
Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.
16059 CVE-1999-0764 1999-05-01 2008-09-09
6.4
None Remote Low Not required None Partial Partial
NetBSD allows ARP packets to overwrite static ARP entries.
16060 CVE-1999-0763 1999-05-01 2008-09-09
6.4
None Remote Low Not required None Partial Partial
NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.
16061 CVE-1999-0740 DoS 1999-08-19 2008-09-09
6.4
None Remote Low Not required Partial None Partial
Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable.
16062 CVE-1999-0718 +Priv 2001-03-12 2017-10-09
6.2
Admin Local High Not required Complete Complete Complete
IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key.
16063 CVE-1999-0700 119 Overflow 1999-07-29 2018-10-12
6.2
None Local High Not required Complete Complete Complete
Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.
16064 CVE-1999-0520 1999-01-01 2005-10-20
6.4
None Remote Low Not required Partial Partial None
A system-critical NETBIOS/SMB share has inappropriate access control.
16065 CVE-1999-0425 1999-03-18 2008-09-09
6.4
None Remote Low Not required None Partial Partial
talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
16066 CVE-1999-0418 DoS 1999-03-08 2016-10-17
6.4
None Remote Low Not required Partial None Partial
Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection.
16067 CVE-1999-0351 DoS 1999-02-01 2018-05-02
6.4
None Remote Low Not required Partial None Partial
FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port that was intended for use by a client.
16068 CVE-1999-0350 1999-02-08 2008-09-09
6.2
Admin Local High Not required Complete Complete Complete
Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.
16069 CVE-1999-0342 1998-12-01 2008-09-09
6.2
Admin Local High Not required Complete Complete Complete
Linux PAM modules allow local users to gain root access using temporary files.
16070 CVE-1999-0215 1998-10-26 2008-09-09
6.4
None Remote Low Not required Partial Partial None
Routed allows attackers to append data to files.
16071 CVE-1999-0201 1997-01-01 2008-09-09
6.4
None Remote Low Not required Partial Partial None
A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.
16072 CVE-1999-0191 1997-09-01 2008-09-09
6.4
None Remote Low Not required Partial Partial None
IIS newdsn.exe CGI script allows remote users to overwrite files.
16073 CVE-1999-0184 1997-07-01 2008-09-09
6.4
None Remote Low Not required None Partial Partial
When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.
16074 CVE-1999-0183 1997-09-01 2008-09-09
6.4
None Remote Low Not required Partial Partial None
Linux implementations of TFTP would allow access to files outside the restricted directory.
16075 CVE-1999-0181 DoS Exec Code 1994-01-01 2008-09-09
6.8
None Remote Medium Not required Partial Partial Partial
The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands.
16076 CVE-1999-0174 1997-02-01 2008-09-09
6.4
None Remote Low Not required Partial Partial None
The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
16077 CVE-1999-0164 1995-08-29 2008-09-09
6.2
Admin Local High Not required Complete Complete Complete
A race condition in the Solaris ps command allows an attacker to overwrite critical files.
16078 CVE-1999-0074 1997-07-01 2008-09-09
6.4
None Remote Low Not required Partial Partial None
Listening TCP ports are sequentially allocated, allowing spoofing attacks.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.