Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
5,818 results · page 117 of 117
Oct 23, 1999ypserv allows local administrators to modify password tables.CVE-1999-0902 · Computers, phones & browsers · Linux-nis · reported by MITREHigh 7.2
ypserv allows local administrators to modify password tables.
- Product
- Ypserv
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Oct 6, 1999Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP pCVE-1999-0791 · Other software · Hybrid Network · reported by MITREHigh 10
Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol.
- Product
- Hsmp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Sep 30, 1999Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) CVE-1999-1469 · Other software · Hughes Technologies · reported by MITREHigh 7.5
Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header.
- Product
- W3-auth
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 30, 1999Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file.CVE-1999-0932 · Other software · Mediahouse Software · reported by MITREHigh 7.2
Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file.
- Product
- Statistics Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Sep 7, 1999Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in the Userbase.dbf dataCVE-1999-1353 · Other software · Nosque · reported by MITREMedium 4.6
Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in the Userbase.dbf data file, which could allow local users to gain privileges.
- Product
- Msgcore
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 1999Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain adminisCVE-1999-1561 · Other software · Nullsoft · reported by MITREHigh 7.2
Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server.
- Product
- Shoutcast Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Aug 3, 1999The WebRamp web administration utility has a default password.CVE-1999-0677 · Other software · Ramp Networks · reported by MITREHigh 7.5
The WebRamp web administration utility has a default password.
- Product
- Webramp 200i
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jul 15, 1999Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the CVE-1999-1086 · Other software · Novell · reported by MITREHigh 10
Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls.
- Product
- Netware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
May 25, 1999IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level priCVE-1999-1414 · Other software · IBM · reported by MITREHigh 7.2
IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level privileges.
- Product
- Netfinity Remote Control
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 27, 1999A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.CVE-1999-0712 · Other software · Caldera · reported by MITRELow 2.1
A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.
- Product
- Coas
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Apr 9, 1999Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administratoCVE-1999-1323 · Other software · Symantec · reported by MITREMedium 4.6
Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrator password in cleartext in (1) the navieg.ini file for NAVIEG, and (2) the ModifyPassword registry key in NAVMSE.
- Product
- Norton Antivirus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 7, 1999The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.CVE-1999-0472 · Other software · Snmp · reported by MITREMedium 5
The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.
- Product
- Snmp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Apr 1, 1999Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.CVE-1999-0443 · Other software · BMC · reported by MITREHigh 10
Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.
- Product
- Patrol Agent
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Mar 1, 1999Denial of service of Ascend routers through port 150 (remote administration).CVE-1999-0221 · Other software · Lucent · reported by MITREMedium 5
Denial of service of Ascend routers through port 150 (remote administration).
- Product
- Ascend Routers
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 25, 1999SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's FinCVE-1999-0380 · Other software · Seattle Lab Software · reported by MITREMedium 4.6
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
- Product
- Slmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 20, 1999Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.CVE-1999-0376 · Computers, phones & browsers · Microsoft · reported by MITREMedium 4.6
Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
- Product
- Windows NT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.microsoft.comdocs.microsoft.com
Jan 1, 1999NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.CVE-1999-0361 · Other software · reported by MITREHigh 10
NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 1, 1999Windows NT automatically logs in an administrator upon rebooting.CVE-1999-0549 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.2
Windows NT automatically logs in an administrator upon rebooting.
- Product
- Windows NT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.