[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 415709
> CVE-1999-0580 [CRITICAL]
The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions.
> CVE-1999-0581 [CRITICAL]
The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions.
AFFECTED_PRODUCTS: Microsoft Windows Nt
> CVE-1999-0583 [CRITICAL]
There is a one-way or two-way trust relationship between Windows NT domains.
> CVE-1999-0584 [CRITICAL]
A Windows NT file system is not NTFS.
> CVE-1999-0586
A network service is running on a nonstandard port.
> CVE-1999-0587 [CRITICAL]
A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data.
> CVE-1999-0588 [HIGH]
A filter in a router or firewall allows unusual fragmented packets.
> CVE-1999-0589 [CRITICAL]
A system-critical Windows NT registry key has inappropriate permissions.
> CVE-1999-0591 [CRITICAL]
An event log in Windows NT has inappropriate access permissions.
> CVE-1999-0592 [CRITICAL]
The Logon box of a Windows NT system displays the name of the last user who logged in.
> CVE-1999-0593 [MEDIUM]
The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.
AFFECTED_PRODUCTS: Microsoft Windows Nt
> CVE-1999-0594 [CRITICAL]
A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.
> CVE-1999-0596 [CRITICAL]
A Windows NT log file has an inappropriate maximum size or retention period.
> CVE-1999-0597 [CRITICAL]
A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.
> CVE-1999-0598 [CRITICAL]
A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection.
> CVE-1999-0599 [CRITICAL]
A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
> CVE-1999-0600 [CRITICAL]
A network intrusion detection system (IDS) does not verify the checksum on a packet.
> CVE-1999-0601 [CRITICAL]
A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.
> CVE-1999-0602 [CRITICAL]
A network intrusion detection system (IDS) does not properly reassemble fragmented packets.
> CVE-1999-0603 [CRITICAL]
In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.
> CVE-1999-0611 [CRITICAL]
A system-critical Windows NT registry key has an inappropriate value.
> CVE-1999-0613
The rpc.sprayd service is running.
> CVE-1999-0614
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0615
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0616
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0617
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0618 [CRITICAL]
The rexec service is running.
> CVE-1999-0619
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0620
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0621
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0622
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0623
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0624
The rstat/rstatd service is running.
> CVE-1999-0625
The rpc.rquotad service is running.
> CVE-1999-0629
The ident/identd service is running.
> CVE-1999-0630 [CRITICAL]
The NT Alerter and Messenger services are running.
> CVE-1999-0631
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0632
The RPC portmapper service is running.
> CVE-1999-0633
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0634
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0635
The echo service is running.
> CVE-1999-0636 [CRITICAL]
The discard service is running.
> CVE-1999-0637
The systat service is running.
> CVE-1999-0638
The daytime service is running.
> CVE-1999-0639
The chargen service is running.
> CVE-1999-0640 [CRITICAL]
The Gopher service is running.
> CVE-1999-0641
The UUCP service is running.
> CVE-1999-0642
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0643
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...
> CVE-1999-0644
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description...