Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
2,172 results · page 44 of 44
Dec 1, 1999FreeBSD gdc program allows local users to modify files via a symlink attack.CVE-1999-0857 · Other software · Freebsd · reported by MITRELow 2.1
FreeBSD gdc program allows local users to modify files via a symlink attack.
- Product
- Freebsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Nov 30, 1999A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the lCVE-1999-0824 · Computers, phones & browsers · Microsoft · reported by MITREMedium 4.6
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users.
- Product
- Windows NT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Nov 29, 1999Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled.CVE-1999-0839 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.2
Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled.
- Product
- IE
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comsecurityfocus.com
Oct 23, 1999ypserv allows a local user to modify the GECOS and login shells of other users.CVE-1999-0901 · Computers, phones & browsers · Linux-nis · reported by MITREHigh 7.2
ypserv allows a local user to modify the GECOS and login shells of other users.
- Product
- Ypserv
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Oct 23, 1999ypserv allows local administrators to modify password tables.CVE-1999-0902 · Computers, phones & browsers · Linux-nis · reported by MITREHigh 7.2
ypserv allows local administrators to modify password tables.
- Product
- Ypserv
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Oct 4, 1999shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary CVE-1999-1541 · Other software · Cactus Software · reported by MITREHigh 7.2
shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file.
- Product
- Shell-lock
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 1999Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulneCVE-1999-0702 · Computers, phones & browsers · Microsoft · reported by MITREHigh 10
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability.
- Product
- Internet Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comsecurityfocus.com
Aug 23, 1999The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.CVE-1999-0720 · Computers, phones & browsers · Linux · reported by MITREMedium 4.6
The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.
- Product
- Linux Kernel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Aug 19, 1999A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication.CVE-1999-0734 · Network & remote access · Cisco · reported by MITREHigh 7.5
A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication.
- Product
- Ciscosecure
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comtools.cisco.com
Aug 11, 1999DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.CVE-1999-0875 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.5
DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
- Product
- Windows 2000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comsecurityfocus.com
Aug 9, 1999The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.CVE-1999-0674 · Other software · Netbsd · reported by MITREHigh 7.2
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
- Product
- Netbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordciac.orgsecurityfocus.com
Jul 28, 1999The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.CVE-2000-0323 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.6
The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.
- Product
- JET
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comdocs.microsoft.com
Jul 11, 1999Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory.CVE-1999-1166 · Computers, phones & browsers · Linux · reported by MITREHigh 7.2
Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory.
- Product
- Linux Kernel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
May 19, 1999SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.CVE-1999-0765 · Other software · SGI · reported by MITREHigh 10
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.
- Product
- Irix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpatches.sgi.comsecurityfocus.com
May 5, 1999NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, whicCVE-1999-1195 · Other software · Network Associates · reported by MITREMedium 5.1
NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly.
- Product
- Virusscan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 1, 1999NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.CVE-1999-0763 · Other software · Netbsd · reported by MITREMedium 6.4
NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.
- Product
- Netbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 15, 1999IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.CVE-1999-1244 · Other software · Darren Reed · reported by MITREHigh 7.2
IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.
- Product
- Ipfilter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comexchange.xforce.ibmcloud.com
Feb 19, 1999Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.CVE-1999-1255 · Other software · CCS Network · reported by MITREMedium 5
Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.
- Product
- Hyperseek Search Engine
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrootshell.comexchange.xforce.ibmcloud.com
Feb 2, 1999IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.CVE-1999-1171 · Other software · Ipswitch · reported by MITREMedium 4.6
IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.
- Product
- Imail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Jan 14, 1999By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being sharCVE-1999-1172 · Other software · Maximizer · reported by MITREMedium 5
By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared.
- Product
- Maximizer Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 7, 1999Solaris ff.core allows local users to modify files.CVE-1999-0442 · Other software · SUN · reported by MITRELow 2.1
Solaris ff.core allows local users to modify files.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 2, 1999IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.CVE-1999-1170 · Other software · Ipswitch · reported by MITREMedium 4.6
IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.
- Product
- Imail
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.