Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
3,212 results · page 65 of 65
Nov 10, 1999Denial of service in BIND by improperly closing TCP sessions via so_linger.CVE-1999-0837 · Other software · ISC · reported by MITREHigh 10
Denial of service in BIND by improperly closing TCP sessions via so_linger.
- Product
- Bind
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.caldera.comsunsolve.sun.com
Nov 1, 1999Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequCVE-1999-1077 · Computers, phones & browsers · Apple · reported by MITREMedium 4.6
Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.
- Product
- Macos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Oct 26, 1999Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "CanceCVE-1999-1076 · Computers, phones & browsers · Apple · reported by MITREMedium 4.6
Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.
- Product
- Macos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Oct 7, 1999Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anoCVE-1999-1347 · Other software · Redhat · reported by MITREMedium 4.6
Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 13, 1999The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.CVE-1999-0687 · Other software · CDE · reported by MITREHigh 7.5
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
- Product
- CDE
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsunsolve.sun.comciac.org
Aug 24, 1999Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.CVE-2000-0328 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.
- Product
- Windows NT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jul 1, 1999Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.CVE-1999-0889 · Network & remote access · Cisco · reported by MITREHigh 7.5
Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.
- Product
- 675 Router
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 28, 1999MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages.CVE-1999-0938 · Other software · University College London · reported by MITREHigh 7.5
MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages.
- Product
- SDR
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jun 23, 1999The KDE klock program allows local users to unlock a session using malformed input.CVE-1999-0731 · Other software · Caldera · reported by MITREMedium 4.6
The KDE klock program allows local users to unlock a session using malformed input.
- Product
- Openlinux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comgithub.com
Mar 22, 1999OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.CVE-1999-0428 · Websites & servers · Openssl · reported by MITREHigh 7.5
OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.
- Product
- Openssl
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 25, 1999Files created from interactive shell sessions in Cobalt RaQ microservers (e.g.CVE-1999-0408 · Other software · SUN · reported by MITREHigh 10
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.
- Product
- Cobalt RAQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 6, 1999Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices.CVE-1999-1268 · Other software · KDE · reported by MITREHigh 7.2
Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices.
- Product
- KDE
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.kde.orgexchange.xforce.ibmcloud.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.