Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29909 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-1446 1 Microsoft 1 Internet Explorer 2026-06-16 2.1 LOW N/A
Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not visible when the user browses the folders because of tailored displays.
CVE-1999-1445 1 Slackware 1 Slackware Linux 2026-06-16 5.0 MEDIUM N/A
Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords.
CVE-1999-1444 1 Computer Software Manufaktur 1 Alibaba 2026-06-16 5.0 MEDIUM N/A
genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext.
CVE-1999-1443 1 Micah Software 1 Full Armor 2026-06-16 4.6 MEDIUM N/A
Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by (1) using <CTRL><ALT><DEL> and kill the process using the task manager, (2) booting the system from a separate disk, or (3) interrupting certain processes that execute while the system is booting.
CVE-1999-1442 1 Linux 1 Linux Kernel 2026-06-16 7.2 HIGH N/A
Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a particular sequence of instructions, possibly related to accessing addresses outside of segments.
CVE-1999-1441 1 Linux 1 Linux Kernel 2026-06-16 2.1 LOW N/A
Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local users to cause a denial of service by sending SIGIO to processes that do not catch it.
CVE-1999-1440 1 Mirabilis 1 Icq 98a 2026-06-16 5.1 MEDIUM N/A
Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is safe to open from the client.
CVE-1999-1439 1 Gcc 1 Gcc 2026-06-16 2.1 LOW N/A
gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.
CVE-1999-1438 1 Sun 1 Sunos 2026-06-16 7.2 HIGH N/A
Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments.
CVE-1999-1437 1 Ralf S. Engelschall 1 Eperl 2026-06-16 7.5 HIGH N/A
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml.
CVE-1999-1436 1 Ray Chan 1 Www Authorization Gateway 2026-06-16 7.5 HIGH N/A
Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "user" parameter.
CVE-1999-1435 1 Nec 1 Socks 5 2026-06-16 7.2 HIGH N/A
Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables.
CVE-1999-1434 1 Slackware 1 Slackware Linux 2026-06-16 7.2 HIGH N/A
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server.
CVE-1999-1433 1 Hp 1 Jetadmin 2026-06-16 7.2 HIGH N/A
HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file.
CVE-1999-1432 1 Sun 2 Solaris, Sunos 2026-06-16 7.5 HIGH N/A
Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.
CVE-1999-1431 1 Microsoft 1 Zero Administration Kit 2026-06-16 4.6 MEDIUM N/A
ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing software into the TEMP directory, and changing the name to that for an allowed application, such as Winword.exe.
CVE-1999-1430 1 Royal 1 Davinci 2026-06-16 2.1 LOW N/A
PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access.
CVE-1999-1429 1 Dit 1 Transferpro 2026-06-16 2.1 LOW N/A
DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver.
CVE-1999-1428 1 Sun 1 Solstice Adminsuite 2026-06-16 6.2 MEDIUM N/A
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges.
CVE-1999-1427 1 Sun 1 Solstice Adminsuite 2026-06-16 6.2 MEDIUM N/A
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges.