Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
5,733 results · page 114 of 115
Feb 28, 2000Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.CVE-2000-0196 · Other software · NMH · reported by MITREHigh 7.5
Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.
- Product
- NMH
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordredhat.comsecurityfocus.com
Feb 20, 2000The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.CVE-2000-0164 · Other software · SUN · reported by MITREHigh 7.2
The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
- Product
- Solaris ISP Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Feb 16, 2000Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.CVE-2000-0158 · Other software · SCO · reported by MITREHigh 7.5
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
- Product
- Openserver
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.sco.comsecurityfocus.com
Feb 15, 2000IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.CVE-2000-0167 · Computers, phones & browsers · Microsoft · reported by MITRELow 2.1
IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.
- Product
- Internet Information Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordntbugtraq.comntbugtraq.com
Feb 10, 2000Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.CVE-2000-0140 · Other software · True North · reported by MITREMedium 5
Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
- Product
- Internet Anywhere Mail Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Feb 1, 2000Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subCVE-2000-0105 · Email & office · Microsoft · reported by MITREMedium 5
Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client.
- Product
- Outlook Express
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 21, 2000Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password.CVE-2000-0091 · Other software · Inter7 · reported by MITREHigh 10
Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password.
- Product
- Vpopmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 13, 2000Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELCVE-2000-0075 · Other software · Nosque · reported by MITREMedium 5
Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELO, MAIL FROM, RCPT TO, and DATA commands in the same session.
- Product
- Msgcore
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 12, 2000Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SCVE-2000-0087 · Other software · Netscape · reported by MITREMedium 5
Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
- Product
- Communicator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 12, 2000Netscape Navigator uses weak encryption for storing a user's Netscape mail password.CVE-1999-1002 · Other software · Netscape · reported by MITREMedium 5
Netscape Navigator uses weak encryption for storing a user's Netscape mail password.
- Product
- Communicator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 11, 2000PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.CVE-2000-0074 · Other software · Powerscripts · reported by MITREHigh 7.5
PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.
- Product
- Plusmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 10, 2000Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specifyCVE-2000-0081 · Computers, phones & browsers · Microsoft · reported by MITREHigh 10
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jAvascript.
- Product
- Hotmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 8, 2000The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute wCVE-2000-1220 · Other software · SGI · reported by MITREHigh 10
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.
- Product
- Irix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpatches.sgi.comseclists.org
Jan 5, 2000IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.CVE-2000-0056 · Other software · Ipswitch · reported by MITREMedium 5
IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.
- Product
- Imail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 5, 2000Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files.CVE-2000-0058 · Other software · Handspring · reported by MITREMedium 5
Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files.
- Product
- Visor Network Hotsync
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity-express.comsecurityfocus.com
Jan 4, 2000Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in theCVE-2000-0085 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.5
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.
- Product
- Hotmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 4, 2000KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.CVE-1999-0735 · Other software · KDE · reported by MITREMedium 4.6
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.
- Product
- K-mail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordredhat.comsecurityfocus.com
Jan 2, 2000WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.CVE-2000-0082 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5
WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.
- Product
- Webtv
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 1999The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacCVE-1999-1512 · Other software · Amavis · reported by MITREHigh 10
The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field.
- Product
- Virus Scanner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 1999Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure defaultCVE-1999-1246 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.5
Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges.
- Product
- Site Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comexchange.xforce.ibmcloud.com
Dec 31, 1999Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact.CVE-1999-1592 · Other software · Sendmail · reported by MITREHigh 7.5
Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might overlap CVE-1999-0129.
- Product
- Sendmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsunsolve.sun.comsecurityfocus.com
Dec 29, 1999Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.CVE-2000-0042 · Other software · CSM · reported by MITREHigh 10
Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.
- Product
- Mail Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 22, 1999Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while SendmCVE-1999-1109 · Other software · Sendmail · reported by MITREMedium 5
Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.
- Product
- Sendmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 22, 1999Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.CVE-2000-0036 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5
Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.
- Product
- IE
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comdocs.microsoft.com
Dec 21, 1999Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.CVE-1999-1497 · Other software · Ipswitch · reported by MITREHigh 7.2
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
- Product
- Imail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 14, 1999daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or rCVE-2000-0068 · Other software · Intel · reported by MITREHigh 7.5
daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail.
- Product
- Inbusiness Email Station
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 7, 1999Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail.CVE-1999-0976 · Other software · Eric Allman · reported by MITRELow 2.1
Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail.
- Product
- Sendmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 3, 1999Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.CVE-2000-0139 · Other software · True North · reported by MITRELow 2.1
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
- Product
- Internet Anywhere Mail Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Dec 3, 1999The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.CVE-1999-0825 · Other software · SCO · reported by MITRELow 3.6
The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 2, 1999The default permissions for Endymion MailMan allow local users to read email or modify files.CVE-1999-0850 · Other software · Endymion · reported by MITRELow 3.6
The default permissions for Endymion MailMan allow local users to read email or modify files.
- Product
- Mailman Webmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 1, 1999NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.CVE-1999-0819 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
- Product
- Windows 2000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 30, 1999Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.CVE-1999-0840 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecuriteam.comsecurity-express.com
Nov 30, 1999Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.CVE-1999-0841 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecuriteam.comsecurity-express.com
Nov 29, 1999Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a ..CVE-1999-0842 · Other software · Symantec · reported by MITREMedium 5
Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.
- Product
- Mail-gear
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordosvdb.orgsecurityfocus.com
Nov 15, 1999Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail mesCVE-1999-1190 · Other software · Admiral Systems · reported by MITREHigh 10
Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message.
- Product
- Emailclub
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecuriteam.comsecurityfocus.com
Nov 11, 1999A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "ActiCVE-2000-0329 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5.1
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
- Product
- IE
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.microsoft.comdocs.microsoft.com
Nov 10, 1999Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in thCVE-1999-1511 · Other software · Artisoft · reported by MITREHigh 7.5
Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in the POP3 service, (2) a long HELO command in the SMTP service, or (3) a long user name in the Control Service.
- Product
- Xtramail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Oct 30, 1999Buffer overflow in Skyfull mail server via MAIL FROM command.CVE-1999-0873 · Other software · SKY Communications · reported by MITREHigh 7.5
Buffer overflow in Skyfull mail server via MAIL FROM command.
- Product
- Skyfull
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Oct 4, 1999RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command.CVE-1999-1542 · Other software · Redhat · reported by MITREHigh 10
RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 1, 1999Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the pCVE-1999-1236 · Other software · True North · reported by MITREMedium 4.6
Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.
- Product
- Internet Anywhere Mail Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordntbugtraq.comsecurityfocus.com
Oct 1, 1999Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.CVE-2000-0016 · Other software · True North · reported by MITREMedium 5
Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.
- Product
- Internet Anywhere Mail Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Oct 1, 1999Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters CVE-1999-1500 · Other software · True North · reported by MITREMedium 5
Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments.
- Product
- Internet Anywhere Mail Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Sep 27, 1999Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.CVE-1999-0940 · Other software · Mutt · reported by MITREHigh 7.5
Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.
- Product
- Mutt Mail Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Sep 13, 1999Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.CVE-1999-0750 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5.1
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.
- Product
- Hotmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Sep 13, 1999Buffer overflow in FuseMAIL POP service via long USER and PASS commands.CVE-1999-0759 · Other software · Fuseware · reported by MITREHigh 10
Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
- Product
- Fusemail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcrosswinds.netsecurityfocus.com
Sep 13, 1999Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.CVE-1999-1014 · Other software · SUN · reported by MITREMedium 4.6
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 12, 1999Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to exeCVE-1999-1521 · Other software · Computalynx · reported by MITREHigh 10
Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server.
- Product
- Cmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 1999UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.CVE-1999-0925 · Other software · Messagemedia · reported by MITREMedium 5
UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
- Product
- Unitymail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 2, 1999A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more tCVE-1999-1516 · Other software · Tenfour · reported by MITREHigh 7.5
A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string.
- Product
- TFS Gateway Smtp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 30, 1999E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2CVE-1999-1354 · Other software · Softarc · reported by MITREMedium 4.6
E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2) network.fc for version 3.5, or (3) FCCLIENT.LOG when logging is enabled.
- Product
- Firstclass Internet Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.