Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
5,743 results · page 115 of 115
Oct 1, 1999Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters CVE-1999-1500 · Other software · True North · reported by MITREMedium 5
Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments.
- Product
- Internet Anywhere Mail Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Oct 1, 1999Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the pCVE-1999-1236 · Other software · True North · reported by MITREMedium 4.6
Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.
- Product
- Internet Anywhere Mail Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordntbugtraq.comsecurityfocus.com
Sep 27, 1999Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.CVE-1999-0940 · Other software · Mutt · reported by MITREHigh 7.5
Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.
- Product
- Mutt Mail Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Sep 13, 1999Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.CVE-1999-0750 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5.1
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.
- Product
- Hotmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Sep 13, 1999Buffer overflow in FuseMAIL POP service via long USER and PASS commands.CVE-1999-0759 · Other software · Fuseware · reported by MITREHigh 10
Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
- Product
- Fusemail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcrosswinds.netsecurityfocus.com
Sep 13, 1999Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.CVE-1999-1014 · Other software · SUN · reported by MITREMedium 4.6
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 12, 1999Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to exeCVE-1999-1521 · Other software · Computalynx · reported by MITREHigh 10
Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server.
- Product
- Cmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 1999UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.CVE-1999-0925 · Other software · Messagemedia · reported by MITREMedium 5
UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
- Product
- Unitymail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 2, 1999A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more tCVE-1999-1516 · Other software · Tenfour · reported by MITREHigh 7.5
A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string.
- Product
- TFS Gateway Smtp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 30, 1999E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2CVE-1999-1354 · Other software · Softarc · reported by MITREMedium 4.6
E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2) network.fc for version 3.5, or (3) FCCLIENT.LOG when logging is enabled.
- Product
- Firstclass Internet Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 25, 1999Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable.CVE-1999-0768 · Other software · Redhat · reported by MITREHigh 7.5
Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Aug 25, 1999Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.CVE-1999-0872 · Other software · Paul Vixie · reported by MITREHigh 7.2
Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.
- Product
- Vixie Cron
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Aug 25, 1999Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.CVE-1999-0769 · Other software · Paul Vixie · reported by MITREHigh 7.2
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.
- Product
- Vixie Cron
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Aug 8, 1999Buffer overflow in ALMail32 POP3 client via From: or To: headers.CVE-1999-0673 · Other software · Crear · reported by MITREMedium 5.1
Buffer overflow in ALMail32 POP3 client via From: or To: headers.
- Product
- Almail32
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Aug 6, 1999Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e.CVE-1999-0682 · Email & office · Microsoft · reported by MITREMedium 5
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
- Product
- Exchange Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comciac.org
Jul 28, 1999Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allows a malicious ASP fiCVE-1999-1017 · Other software · Seattle Lab Software · reported by MITREHigh 7.5
Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allows a malicious ASP file attachment to execute when the recipient opens the message.
- Product
- Emurl
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Jun 25, 1999Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes OutlCVE-1999-1164 · Email & office · Microsoft · reported by MITREMedium 5
Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang.
- Product
- Outlook
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 22, 1999The Debian mailman package uses weak authentication, which allows attackers to gain privileges.CVE-1999-0742 · Other software · Debian · reported by MITREMedium 5
The Debian mailman package uses weak authentication, which allows attackers to gain privileges.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jun 1, 1999Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.CVE-2000-0481 · Other software · KDE · reported by MITREMedium 5
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.
- Product
- K-mail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
May 26, 1999NTMail allows remote attackers to read arbitrary files via a ..CVE-1999-0927 · Other software · Gordano · reported by MITREMedium 5
NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.
- Product
- Ntmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordeeye.comsecurityfocus.com
May 15, 1999Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passworCVE-1999-1366 · Other software · David Harris · reported by MITRELow 3.6
Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail.
- Product
- Pegasus Mail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 4, 1999SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string.CVE-1999-1012 · Other software · Lotus · reported by MITREMedium 5
SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string.
- Product
- Domino
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
May 1, 1999Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line.CVE-1999-1553 · Other software · Xcmail · reported by MITREHigh 10
Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line.
- Product
- Xcmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Apr 19, 1999Denial of service in Sendmail 8.8.6 in HPUX.CVE-1999-0684 · Other software · HP · reported by MITREMedium 5
Denial of service in Sendmail 8.8.6 in HPUX.
- Product
- Sendmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Apr 9, 1999Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administratoCVE-1999-1323 · Other software · Symantec · reported by MITREMedium 4.6
Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrator password in cleartext in (1) the navieg.ini file for NAVIEG, and (2) the ModifyPassword registry key in NAVMSE.
- Product
- Norton Antivirus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 5, 1999A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.CVE-1999-0475 · Other software · Procmail · reported by MITRELow 1.2
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
- Product
- Procmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Apr 5, 1999Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.CVE-1999-0439 · Other software · Procmail · reported by MITREHigh 7.5
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
- Product
- Procmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Mar 8, 1999Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g.CVE-1999-0418 · Other software · reported by MITREMedium 6.4
Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 4, 1999IMail POP3 daemon uses weak encryption, which allows local users to read files.CVE-2000-0019 · Other software · Ipswitch · reported by MITRELow 2.1
IMail POP3 daemon uses weak encryption, which allows local users to read files.
- Product
- Imail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Mar 2, 1999Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.CVE-1999-1551 · Other software · Ipswitch · reported by MITREMedium 5
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.
- Product
- Imail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Mar 1, 1999The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference.CVE-1999-0429 · Other software · IBM · reported by MITREHigh 7.5
The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference.
- Product
- Lotus Notes
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 1, 1999Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to porCVE-1999-1046 · Other software · Ipswitch · reported by MITREHigh 10
Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181.
- Product
- Imail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Feb 25, 1999SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's FinCVE-1999-0380 · Other software · Seattle Lab Software · reported by MITREMedium 4.6
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
- Product
- Slmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 14, 1999Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.CVE-1999-0404 · Other software · Smartmax Software · reported by MITREHigh 7.5
Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
- Product
- Mailmax
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 4, 1999The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.CVE-1999-0365 · Other software · Metainfo · reported by MITREHigh 7.5
The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
- Product
- Metaip
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 2, 1999IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.CVE-1999-1171 · Other software · Ipswitch · reported by MITREMedium 4.6
IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.
- Product
- Imail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Jan 29, 1999The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command.CVE-2000-0370 · Other software · Caldera · reported by MITREHigh 10
The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command.
- Product
- Openlinux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.calderasystems.comsecurityfocus.com
Jan 2, 1999IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.CVE-1999-1170 · Other software · Ipswitch · reported by MITREMedium 4.6
IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.
- Product
- Imail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Jan 1, 1999Denial of service in Sendmail 8.6.11 and 8.6.12.CVE-1999-0205 · Other software · Eric Allman · reported by MITREMedium 5
Denial of service in Sendmail 8.6.11 and 8.6.12.
- Product
- Sendmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 1, 1999Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access.CVE-1999-0231 · Other software · Seattle Lab Software · reported by MITREMedium 5
Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access.
- Product
- Slmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 1, 1999A Sendmail alias allows input to be piped to a program.CVE-1999-0565 · Other software · reported by MITREHigh 10
A Sendmail alias allows input to be piped to a program.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 1, 1999A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.CVE-1999-0512 · Other software · reported by MITREHigh 10
A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 1, 1999Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.CVE-1999-0393 · Other software · Eric Allman · reported by MITREMedium 5
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
- Product
- Sendmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.