Latest Vulnerabilities with Public Exploits

Updated 24m ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

372,094 CVEs tracked 55,455 with exploits 5,163 exploited in wild 1,660 CISA KEV 4,282 Nuclei templates 56,437 vendors 49,775 researchers

55,455 results Clear all

CVE-1999-0869 1 PoC Analysis EPSS 0.17

Internet Explorer 3.x-4.01 - Frame Spoofing

Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.

Dec 01, 1998 STIX 2.1

CVE-1999-0842 1 PoC Analysis EPSS 0.07

Symantec Mail-Gear 1.0 - Path Traversal

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.

Nov 29, 1999 STIX 2.1

CVE-1999-0844 2 PoCs Analysis EPSS 0.06

MDaemon - Denial of Service via Long URL

Denial of service in MDaemon WorldClient and WebConfig services via a long URL.

Nov 24, 1999 STIX 2.1

CVE-1999-0830 1 PoC Analysis EPSS 0.01

SCO UnixWare - Buffer Overflow via Xsco Command Long Argument

Buffer overflow in SCO UnixWare Xsco command via a long argument.

Nov 01, 1999 STIX 2.1

CVE-1999-1123 2 PoCs Analysis EPSS 0.01

SunOS - Privilege Escalation via sunsrc makeinstall or winstall

The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall.

May 20, 1991 STIX 2.1

CVE-1999-0999 1 PoC Analysis EPSS 0.22

Microsoft SQL Server 7.0 - Denial of Service via Malformed TDS Packet

Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.

CWE-20 Nov 19, 1999 STIX 2.1

CVE-1999-1519 1 PoC Analysis EPSS 0.07

Gene6 G6 FTP Server 2.0 - Denial of Service via Long Username or Password

Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.

Nov 17, 1999 STIX 2.1

CVE-1999-1508 1 PoC Analysis EPSS 0.08

Tektronix PhaserLink Printer <840.0 - Auth Bypass

Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html.

Nov 16, 1999 STIX 2.1

CVE-1999-1050 1 PoC Analysis EPSS 0.08

Matt Wright FormHandler.cgi - Directory Traversal via Attachment Parameter or Template Filename

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.

Nov 12, 1999 STIX 2.1

CVE-1999-1190 1 PoC Analysis EPSS 0.05

Admiral Systems EmailClub 1.05 - RCE

Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message.

Nov 15, 1999 STIX 2.1

CVE-1999-1110 1 PoC Analysis EPSS 0.10

Windows Media Player <5.0 - Info Disclosure

Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.

Nov 14, 1999 STIX 2.1

CVE-1999-0848 1 PoC Analysis EPSS 0.06

BIND - Denial of Service via File Descriptor Exhaustion

Denial of service in BIND named via consuming more than "fdmax" file descriptors.

Nov 10, 1999 STIX 2.1

CVE-1999-1539 1 PoC Analysis EPSS 0.12

QVT/Net 4.3 and QVT/Term Plus 4.2d-4.3 - Buffer Overflow via Long Username or Password

Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password.

Nov 10, 1999 STIX 2.1

CVE-1999-0985 1 PoC Analysis EPSS 0.09

CC Whois program - Command Injection

CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.

Nov 09, 1999 STIX 2.1

CVE-1999-1112 1 PoC Analysis EPSS 0.04

IrfanView < 3.0.7 - Buffer Overflow via Photo Shop Image Header

Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop image header.

Nov 09, 1999 STIX 2.1

CVE-1999-0820 1 PoC Analysis EPSS 0.01

FreeBSD seyon - Privilege Escalation

FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.

Dec 01, 1999 STIX 2.1

CVE-1999-0981 1 PoC Analysis EPSS 0.13

Internet Explorer < 5.01 - Local File Access via Server-side Page Reference Redirect

Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."

CWE-59 Dec 08, 1999 STIX 2.1

CVE-1999-0896 2 PoCs Analysis EPSS 0.13

RealServer G2 - Remote Code Execution via Long Username and Password

Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.

Nov 04, 1999 STIX 2.1

CVE-1999-0899 1 PoC Analysis EPSS 0.03

Windows NT 4.0 - Local Privilege Escalation via Print Spooler Alternate Provider

The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider.

CWE-264 Nov 04, 1999 STIX 2.1

CVE-1999-1509 1 PoC Analysis EPSS 0.08

Etype Eserv 2.50 - Directory Traversal via URL

Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL.

Nov 04, 1999 STIX 2.1

Latest Vulnerabilities with Public Exploits

Investigate

Ecosystems

Reference Indexes

Recent Blog Posts

CVEForge Labs

KEV Gaps