Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
2,172 results · page 43 of 44
May 23, 2000The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files.CVE-2000-0551 · Other software · Danware Data · reported by MITREHigh 10
The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files.
- Product
- Netop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
May 16, 2000The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so.CVE-2000-0379 · Other software · Netopia · reported by MITRELow 3.6
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so.
- Product
- R-series Routers
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordnetopia.comsecurityfocus.com
May 3, 2000Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.CVE-2000-0303 · Other software · ID Software · reported by MITREMedium 6.4
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
- Product
- Quake 3 Arena
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordosvdb.orgquake3arena.com
Apr 27, 2000Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.CVE-1999-0706 · Other software · ISC · reported by MITREHigh 7.5
Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
- Product
- INN
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Apr 26, 2000The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.CVE-2000-0249 · Other software · IBM · reported by MITREHigh 7.2
The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comxforce.iss.net
Apr 21, 2000Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.CVE-2000-0336 · Other software · Openldap · reported by MITRELow 2.1
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
- Product
- Openldap
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.calderasystems.comredhat.com
Apr 20, 2000The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object ACVE-2000-0311 · Computers, phones & browsers · Microsoft · reported by MITRELow 2.1
The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability.
- Product
- Windows 2000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comdocs.microsoft.com
Apr 18, 2000Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications betwCVE-2000-0269 · Other software · GNU · reported by MITRELow 2.1
Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess.
- Product
- Emacs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Apr 18, 2000Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify CVE-2000-0266 · Computers, phones & browsers · Microsoft · reported by MITRELow 2.6
Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL.
- Product
- Internet Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Apr 11, 2000The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.CVE-2000-0253 · Other software · Craig Dansie · reported by MITREHigh 10
The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.
- Product
- Dansie Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comexchange.xforce.ibmcloud.com
Mar 27, 2000IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port CVE-2000-0289 · Other software · Debian · reported by MITREMedium 5
IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comnovell.com
Mar 3, 2000Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.CVE-2000-0205 · Other software · Trend Micro · reported by MITREMedium 6.4
Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.
- Product
- Officescan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comantivirus.com
Feb 24, 2000buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.CVE-2000-0194 · Other software · Corel · reported by MITREHigh 7.2
buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Feb 21, 2000The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.CVE-2000-0210 · Other software · SUN · reported by MITRELow 1.2
The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.
- Product
- Workshop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Feb 16, 2000The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.CVE-2000-0154 · Other software · SCO · reported by MITRELow 1.2
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsco.comsecurityfocus.com
Feb 16, 2000procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr.CVE-2000-0094 · Other software · Netbsd · reported by MITREHigh 7.2
procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr.
- Product
- Netbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.netbsd.orgosvdb.org
Feb 8, 2000snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.CVE-2000-0147 · Other software · SCO · reported by MITRELow 2.1
snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.
- Product
- Openserver
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.sco.comarchives.neohapsis.com
Feb 1, 2000The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0134 · Other software · Adgrafix Corporation · reported by MITREHigh 7.5
The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Check IT OUT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.CVE-2000-0107 · Other software · Debian · reported by MITREHigh 7.2
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddebian.orgsecurityfocus.com
Feb 1, 2000The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0108 · Other software · Intelligent Vending Systems · reported by MITREHigh 7.5
The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Intellivend
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0110 · Other software · Baron Consulting Group · reported by MITREHigh 7.5
The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Websitetool
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0101 · Other software · Make-a-store · reported by MITREHigh 7.5
The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Orderpage
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0102 · Other software · Salescart · reported by MITREHigh 7.5
The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Salescart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0103 · Other software · Netsmart · reported by MITREHigh 7.5
The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Smartcart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0104 · Other software · Web Express · reported by MITREHigh 7.5
The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Shoptron
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0106 · Other software · Easycart · reported by MITREHigh 7.5
The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Easycart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recyclCVE-2000-0121 · Computers, phones & browsers · Microsoft · reported by MITRELow 3.6
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability.
- Product
- Windows NT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comsecurityfocus.com
Feb 1, 2000The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0123 · Other software · Filemaker · reported by MITREHigh 7.5
The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Filemaker
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0135 · Other software · Atretail · reported by MITREHigh 7.5
The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Atretail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0136 · Other software · Mcmurtrey Whitaker And Associates · reported by MITREHigh 7.5
The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Cart32
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-0137 · Other software · Cartit · reported by MITREHigh 7.5
The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
- Product
- Cartit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.CVE-2000-0157 · Other software · Netbsd · reported by MITREHigh 7.2
NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
- Product
- Netbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.netbsd.orgsecurityfocus.com
Jan 30, 2000The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (rCVE-2000-0117 · Other software · SUN · reported by MITREHigh 7.2
The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).
- Product
- Cobalt RAQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 19, 2000The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.CVE-2000-0092 · Other software · Freebsd · reported by MITREMedium 6.2
The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
- Product
- Freebsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.freebsd.orgsecurityfocus.com
Jan 11, 2000CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack.CVE-2000-0067 · Other software · Cybercash · reported by MITRELow 2.1
CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack.
- Product
- Merchant Connection KIT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 11, 2000MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.CVE-2000-0045 · Other software · Oracle · reported by MITREMedium 6.4
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
- Product
- Mysql
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 7, 2000Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could alCVE-2000-0061 · Computers, phones & browsers · Microsoft · reported by MITREHigh 10
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.
- Product
- Internet Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 31, 1999Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration.CVE-1999-1300 · Other software · Cray · reported by MITRELow 3.6
Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration.
- Product
- Unicos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordciac.llnl.govciac.llnl.gov
Dec 31, 1999Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letterCVE-1999-1317 · Computers, phones & browsers · Microsoft · reported by MITREMedium 4.6
Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.
- Product
- Windows NT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 1999The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automaCVE-1999-1084 · Computers, phones & browsers · Microsoft · reported by MITREMedium 4.6
The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash.
- Product
- Windows NT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosupport.microsoft.com
Dec 29, 1999The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.CVE-2000-0100 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.2
The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.
- Product
- Systems Management Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comdocs.microsoft.com
Dec 14, 1999daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or rCVE-2000-0068 · Other software · Intel · reported by MITREHigh 7.5
daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail.
- Product
- Inbusiness Email Station
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 1999The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.CVE-1999-1009 · Other software · Disney · reported by MITRELow 2.6
The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.
- Product
- GO Express Search
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Dec 10, 1999The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying tCVE-1999-0975 · Computers, phones & browsers · Microsoft · reported by MITREMedium 4.6
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
- Product
- Windows 95
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 3, 1999UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.CVE-1999-0864 · Other software · SCO · reported by MITREHigh 7.2
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 1999The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.CVE-1999-0825 · Other software · SCO · reported by MITRELow 3.6
The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 2, 1999IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.CVE-1999-0852 · Other software · IBM · reported by MITREHigh 7.2
IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.
- Product
- Websphere Application Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 2, 1999The default permissions for Endymion MailMan allow local users to read email or modify files.CVE-1999-0850 · Other software · Endymion · reported by MITRELow 3.6
The default permissions for Endymion MailMan allow local users to read email or modify files.
- Product
- Mailman Webmail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 2, 1999dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.CVE-2000-0366 · Other software · Debian · reported by MITRELow 2.1
dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddebian.orgsecurityfocus.com
Dec 2, 1999Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.CVE-1999-0858 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5
Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.
- Product
- Internet Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comsecurityfocus.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.