Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
7,417 results · page 148 of 149
Jul 12, 2000The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a ..CVE-2000-0660 · Other software · Alt-n · reported by MITREMedium 5
The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
- Product
- Worldclient
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comaltn.com
Jul 7, 2000The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonatCVE-2000-0651 · Other software · Novell · reported by MITREHigh 7.5
The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine.
- Product
- Bordermanager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jul 4, 2000BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whCVE-2000-0594 · Other software · Caldera · reported by MITREMedium 5
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.
- Product
- Openlinux Desktop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Jun 25, 2000LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages.CVE-2000-0601 · Other software · Leafdigital · reported by MITREMedium 5
LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages.
- Product
- Leafchat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordleafdigital.comsecurityfocus.com
Jun 24, 2000ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0585 · Other software · ISC · reported by MITREHigh 10
ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters.
- Product
- Dhcp Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.freebsd.orgftp.netbsd.org
Jun 6, 2000ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive informCVE-2000-0552 · Other software · ICQ · reported by MITREMedium 5.5
ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.
- Product
- ICQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
May 17, 2000Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via tCVE-2000-0465 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5.1
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability.
- Product
- Internet Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmicrosoft.commicrosoft.com
May 11, 2000Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in aCVE-2000-0439 · Computers, phones & browsers · Microsoft · reported by MITRELow 2.6
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.
- Product
- Internet Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordosvdb.orgsecurityfocus.com
May 3, 2000Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.CVE-2000-0303 · Other software · ID Software · reported by MITREMedium 6.4
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
- Product
- Quake 3 Arena
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordosvdb.orgquake3arena.com
Apr 3, 2000Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL.CVE-2000-0280 · Other software · Realnetworks · reported by MITRELow 2.6
Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL.
- Product
- Realplayer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Mar 26, 2000Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.CVE-2000-0281 · Other software · Napster · reported by MITRELow 2.1
Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.
- Product
- Napster Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Mar 10, 2000Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.CVE-2000-0183 · Other software · Michael Sandrof · reported by MITREMedium 5.1
Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.
- Product
- Ircii
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comredhat.com
Mar 3, 2000Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.CVE-2000-0205 · Other software · Trend Micro · reported by MITREMedium 6.4
Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.
- Product
- Officescan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comantivirus.com
Mar 2, 2000AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.CVE-2000-0190 · Other software · AOL · reported by MITREMedium 5
AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.
- Product
- Instant Messenger
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Feb 29, 2000Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attackCVE-2000-0216 · Email & office · Microsoft · reported by MITREMedium 5
Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.
- Product
- Exchange Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Feb 28, 2000The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 10CVE-2000-0204 · Other software · Trend Micro · reported by MITREMedium 5
The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%.
- Product
- Officescan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comantivirus.com
Feb 28, 2000The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.CVE-2000-0203 · Other software · Trend Micro · reported by MITREMedium 5
The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.
- Product
- Officescan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordantivirus.comsecurityfocus.com
Feb 24, 2000InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information.CVE-2000-0212 · Other software · Pragma Systems · reported by MITREMedium 5
InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information.
- Product
- Interaccess Telnetd Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comexchange.xforce.ibmcloud.com
Feb 24, 2000The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.CVE-2000-0217 · Other software · Openbsd · reported by MITREMedium 5.1
The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Feb 23, 2000The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, akCVE-2000-0211 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.
- Product
- Windows Media Services
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comdocs.microsoft.com
Feb 16, 2000Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vCVE-2000-0156 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5.1
Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.
- Product
- Internet Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordosvdb.orgdocs.microsoft.com
Jan 31, 2000The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable dCVE-2000-0109 · Other software · Comstock · reported by MITREHigh 10
The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.
- Product
- Multicsp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 29, 2000The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.CVE-2000-0111 · Other software · AVT · reported by MITREHigh 7.5
The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.
- Product
- Rightfax
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 12, 2000NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."CVE-2000-0070 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.2
NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."
- Product
- Windows NT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.combindview.com
Jan 10, 2000Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message.CVE-2000-0046 · Other software · Mirabilis · reported by MITREHigh 7.5
Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message.
- Product
- ICQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 4, 2000Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.CVE-2000-0049 · Other software · Nullsoft · reported by MITREHigh 7.2
Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.
- Product
- Winamp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordosvdb.orgsecurityfocus.com
Jan 2, 2000WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.CVE-2000-0082 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5
WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.
- Product
- Webtv
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 1999automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharactCVE-1999-1333 · Other software · Redhat · reported by MITREHigh 7.5
automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 1999Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute CVE-1999-0808 · Other software · ISC · reported by MITREHigh 7.5
Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options.
- Product
- Dhcp Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.isc.orgciac.llnl.gov
Dec 31, 1999HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the maiCVE-1999-1124 · Websites & servers · Allaire · reported by MITREHigh 7.5
HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.
- Product
- Coldfusion
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstorm.securify.compacketstorm.securify.com
Dec 31, 1999Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via aCVE-1999-1290 · Other software · Chris Matthee · reported by MITREMedium 5.1
Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string.
- Product
- Nftp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 1999An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.CVE-1999-1010 · Other software · Openbsd · reported by MITRELow 2.1
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
- Product
- Openssh
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 1999Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file.CVE-1999-1007 · Other software · Vdonet · reported by MITREHigh 7.6
Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file.
- Product
- Vdolive Player
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Dec 8, 1999Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via thCVE-1999-0981 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5.1
Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."
- Product
- Internet Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comdocs.microsoft.com
Dec 2, 1999Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.CVE-1999-0858 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5
Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.
- Product
- Internet Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comsecurityfocus.com
Nov 24, 1999Denial of service in MDaemon WorldClient and WebConfig services via a long URL.CVE-1999-0844 · Other software · Deerfield · reported by MITREMedium 5
Denial of service in MDaemon WorldClient and WebConfig services via a long URL.
- Product
- Mdaemon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Nov 14, 1999ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other useCVE-1999-1528 · Other software · Prosoft Engineering · reported by MITREMedium 4.6
ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session.
- Product
- Netware Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Nov 4, 1999Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.CVE-1999-0843 · Network & remote access · Cisco · reported by MITREMedium 5
Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.
- Product
- Router
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Nov 1, 1999Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn CVE-1999-0354 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.5
Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message.
- Product
- Internet Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.microsoft.comdocs.microsoft.com
Oct 1, 1999Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.CVE-2000-0047 · Other software · Yahoo · reported by MITREMedium 5
Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.
- Product
- Pager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Sep 27, 1999Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.CVE-1999-0940 · Other software · Mutt · reported by MITREHigh 7.5
Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.
- Product
- Mutt Mail Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Sep 24, 1999Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabled allows remote attackers to read arbitCVE-1999-1351 · Other software · Kvirc · reported by MITREMedium 5
Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.
- Product
- IRC Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 1999Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g.CVE-1999-0817 · Other software · University Of Kansas · reported by MITREHigh 10
Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.
- Product
- Lynx
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Sep 5, 1999gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file.CVE-1999-1562 · Other software · Gftp · reported by MITREMedium 4.6
gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file.
- Product
- FTP Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddebian.orgsecurityfocus.com
Aug 30, 1999E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2CVE-1999-1354 · Other software · Softarc · reported by MITREMedium 4.6
E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2) network.fc for version 3.5, or (3) FCCLIENT.LOG when logging is enabled.
- Product
- Firstclass Internet Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 26, 1999Denial of service in Debian IRC Epic/epic4 client via a long string.CVE-1999-0939 · Other software · Debian · reported by MITREMedium 5
Denial of service in Debian IRC Epic/epic4 client via a long string.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Aug 16, 1999Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.CVE-1999-0749 · Computers, phones & browsers · Microsoft · reported by MITRELow 2.6
Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.
- Product
- Windows 95
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comdocs.microsoft.com
Aug 11, 1999DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.CVE-1999-0875 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.5
DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
- Product
- Windows 2000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comsecurityfocus.com
Aug 11, 1999Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.CVE-1999-0814 · Other software · Redhat · reported by MITREHigh 10
Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 9, 1999Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.CVE-1999-0680 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5
Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.
- Product
- Terminal Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comciac.org
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.