Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
2,617 results · page 53 of 53
Jul 25, 1999The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use iCVE-1999-0710 · Other software · Redhat · reported by MITREHigh 7.5
The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordfedoranews.orgdebian.org
Jul 19, 1999dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files.CVE-1999-1378 · Other software · Dbmlparser.exe · reported by MITREMedium 5
dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files.
- Product
- Dbmlparser.exe
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 1, 1999CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.CVE-1999-1063 · Other software · Cdomain · reported by MITREHigh 10
CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.
- Product
- Cdomainfree
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Apr 20, 1999quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtCVE-1999-0607 · Other software · I-soft · reported by MITREMedium 5
quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.
- Product
- Quikstore
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 20, 1999An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.CVE-1999-0604 · Other software · Selena SOL · reported by MITREMedium 5
An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.
- Product
- Selena SOL Webstore
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 9, 1999Vulnerability in the Wguest CGI program.CVE-1999-0287 · Other software · Webcom · reported by MITREHigh 7.5
Vulnerability in the Wguest CGI program.
- Product
- CGI Guestbook
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 1, 1999An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information.CVE-1999-0609 · Other software · Mercantec · reported by MITREMedium 5
An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information.
- Product
- Softcart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 1, 1999An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.CVE-1999-0608 · Other software · Pdgsoft · reported by MITREMedium 5
An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.
- Product
- PDG Shopping Cart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 1, 1999An incorrect configuration of the Webcart CGI program could disclose private information.CVE-1999-0610 · Other software · Mountain Network Systems · reported by MITREMedium 5
An incorrect configuration of the Webcart CGI program could disclose private information.
- Product
- Webcart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 1, 1999An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information.CVE-1999-0606 · Other software · Seaside Enterprises · reported by MITREMedium 5
An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information.
- Product
- Ezmall
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 1, 1999An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.CVE-1999-0605 · Other software · Austin Contract Computing · reported by MITREMedium 5
An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.
- Product
- Merchant Order Form
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 1, 1999The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.CVE-1999-0467 · Other software · Webcom · reported by MITREMedium 5
The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.
- Product
- CGI Guestbook
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Mar 8, 1999Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to pCVE-1999-1567 · Other software · Seapine Software · reported by MITREMedium 5
Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to port 99 and disconnecting without sending any data.
- Product
- Testtrack
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordntbugtraq.comntbugtraq.com
Feb 19, 1999Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.CVE-1999-1255 · Other software · CCS Network · reported by MITREMedium 5
Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.
- Product
- Hyperseek Search Engine
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrootshell.comexchange.xforce.ibmcloud.com
Jan 10, 1999Buffer overflow in Thomas Boutell's cgic library version up to 1.05.CVE-1999-0392 · Other software · Thomas Boutell · reported by MITREMedium 5
Buffer overflow in Thomas Boutell's cgic library version up to 1.05.
- Product
- Cgic Library
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 3, 1999search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a ..CVE-2000-0054 · Other software · Solution Scripts · reported by MITREMedium 5
search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack.
- Product
- Home Free
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 1, 1999The Java Web Server would allow remote users to obtain the source code for CGI programs.CVE-1999-0283 · Other software · reported by MITREHigh 10
The Java Web Server would allow remote users to obtain the source code for CGI programs.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.