WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published to 2000-02-29✕
Overview 1,761 matches · 3 in Waratek scope · 0 protected · 6 exploited · 0 CISA KEV · 504 public PoC · 18 EPSS ≥ 0.5
1,761matches 3in Waratek scope0.2% 0protected0.0% 6exploited0.3% 0CISA KEV0.0% 504public PoC28.6% 18EPSS ≥ 0.51.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 0.2% Outside Waratek scope 1 0.1% Not applicable 1,723 97.8% Withdrawn CVE 34 1.9%
Critical 7 0.4% High 905 51.4% Medium 631 35.8% Low 184 10.4% None 0 0.0% Unknown 34 1.9%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 1,761 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 6 0.3% Working exploit published 500 28.4% Proof of concept only 0 0.0% Forecast only 3 0.2% No public exploit 1,252 71.1%
split by peak 923 / year
Withdrawn CVE: 34Not applicable: 1,723Outside Waratek scope: 1No exploit published: 3 Unknown: 34Low: 184Medium: 631High: 905Critical: 7 not blocked: 1,761 No public exploit: 1,252Forecast only: 3Working exploit published: 500Exploited: 6
19882 Not applicable2 High2 not blocked2 Working exploit published1 No public exploit1 19893 Not applicable3 High2 Medium1 not blocked3 No public exploit3 199011 Not applicable11 High8 Medium2 Low1 not blocked11 Working exploit published1 No public exploit10 199115 Not applicable15 High11 Medium4 not blocked15 Working exploit published2 No public exploit13 199214 Not applicable13 Withdrawn CVE1 High12 Low1 Unknown1 not blocked14 No public exploit14 199313 Not applicable13 High8 Medium3 Low2 not blocked13 No public exploit13 199426 Not applicable25 Withdrawn CVE1 High14 Medium10 Low1 Unknown1 not blocked26 Working exploit published6 No public exploit20 199525 Not applicable25 Critical1 High17 Medium6 Low1 not blocked25 Working exploit published5 No public exploit20 199675 No exploit published1 Not applicable73 Withdrawn CVE1 Critical1 High43 Medium21 Low9 Unknown1 not blocked75 Working exploit published18 Forecast only1 No public exploit56 1997253 Not applicable252 Withdrawn CVE1 Critical1 High143 Medium89 Low19 Unknown1 not blocked253 Exploited2 Working exploit published73 Forecast only2 No public exploit176 1998247 Not applicable246 Withdrawn CVE1 Critical1 High137 Medium85 Low23 Unknown1 not blocked247 Exploited1 Working exploit published50 No public exploit196 1999923 No exploit published2 Outside Waratek scope1 Not applicable891 Withdrawn CVE29 Critical3 High423 Medium357 Low111 Unknown29 not blocked923 Exploited2 Working exploit published282 No public exploit639 2000154 Not applicable154 High85 Medium53 Low16 not blocked154 Exploited1 Working exploit published62 No public exploit91
1988199019921994199619982000
1,761 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 18 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2000-0216 Medium 2000-02-29 Not applicable No public exploit Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.
CVE-2000-0208 Medium 2000-02-29 Not applicable Working exploit published The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.
CVE-2000-0191 High 2000-02-29 Not applicable Working exploit published Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.
CVE-2000-0176 Medium 2000-02-29 Not applicable No public exploit The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
CVE-2000-0204 Medium 2000-02-28 Not applicable Working exploit published The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%.
CVE-2000-0203 Medium 2000-02-28 Not applicable No public exploit The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.
CVE-2000-0196 High 2000-02-28 Not applicable No public exploit Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.
CVE-2000-0186 High 2000-02-28 Not applicable No public exploit Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.
CVE-2000-0179 Medium 2000-02-28 Not applicable Working exploit published HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.
CVE-2000-0178 High 2000-02-28 Not applicable No public exploit ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.
CVE-2000-0209 High 2000-02-27 Not applicable No public exploit Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.
CVE-2000-0188 High 2000-02-27 Not applicable No public exploit EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
CVE-2000-0187 High 2000-02-27 Not applicable Working exploit published EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
CVE-2000-0170 High 2000-02-26 Not applicable Working exploit published Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
CVE-2000-0221 Medium 2000-02-25 Not applicable Working exploit published The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.
CVE-2000-0220 Medium 2000-02-24 Not applicable No public exploit ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event.
CVE-2000-0217 Medium 2000-02-24 Not applicable No public exploit The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
CVE-2000-0214 Medium 2000-02-24 Not applicable Working exploit published FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.
CVE-2000-0212 Medium 2000-02-24 Not applicable Working exploit published InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information.
CVE-2000-0195 High 2000-02-24 Not applicable Working exploit published setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.
CVE-2000-0194 High 2000-02-24 Not applicable Working exploit published buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
CVE-2000-0219 High 2000-02-23 Not applicable Working exploit published Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
CVE-2000-0213 Medium 2000-02-23 Not applicable Working exploit published The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters.
CVE-2000-0211 Medium 2000-02-23 Not applicable Working exploit published The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.
CVE-2000-0182 Medium 2000-02-23 Not applicable No public exploit iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.
CVE-2000-0210 Low 2000-02-21 Not applicable Working exploit published The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.
CVE-2000-0166 High 2000-02-21 Not applicable Working exploit published Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.
CVE-2000-0163 Medium 2000-02-21 Not applicable Working exploit published asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
CVE-2000-0160 High 2000-02-21 Not applicable No public exploit The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
CVE-2000-0164 High 2000-02-20 Not applicable No public exploit The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
CVE-2000-0162 Medium 2000-02-18 Not applicable No public exploit The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.
CVE-2000-0161 High 2000-02-18 Not applicable No public exploit Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.
CVE-2000-0155 High 2000-02-18 Not applicable Working exploit published Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.
CVE-2000-0159 High 2000-02-17 Not applicable No public exploit HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges.
CVE-2000-0158 High 2000-02-16 Not applicable No public exploit Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
CVE-2000-0156 Medium 2000-02-16 Not applicable Working exploit published Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.
CVE-2000-0154 Low 2000-02-16 Not applicable Working exploit published The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
CVE-2000-0094 High 2000-02-16 Not applicable Working exploit published procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr.
CVE-2000-0224 Low 2000-02-15 Not applicable Working exploit published ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.
CVE-2000-0222 High 2000-02-15 Not applicable No public exploit The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.
CVE-2000-0167 Low 2000-02-15 Not applicable Working exploit published IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.
CVE-2000-0197 Medium 2000-02-14 Not applicable No public exploit The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
CVE-2000-0150 High 2000-02-12 Not applicable No public exploit Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
CVE-2000-0143 Medium 2000-02-11 Not applicable No public exploit The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
CVE-2000-0142 Medium 2000-02-11 Not applicable Working exploit published The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.
CVE-2000-0141 High 2000-02-11 Not applicable No public exploit Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
CVE-2000-0140 Medium 2000-02-10 Not applicable No public exploit Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
CVE-2000-0215 High 2000-02-08 Not applicable No public exploit Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
CVE-2000-0149 Medium 2000-02-08 Not applicable Working exploit published Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
CVE-2000-0148 High 2000-02-08 Not applicable No public exploit MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
CVE-2000-0147 Low 2000-02-08 Not applicable No public exploit snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.
CVE-2000-0146 Medium 2000-02-07 Not applicable Working exploit published The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.
CVE-2000-0144 High 2000-02-07 Not applicable No public exploit Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
CVE-2000-0472 Low 2000-02-06 Not applicable Working exploit published Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.
CVE-2000-0145 High 2000-02-05 Not applicable No public exploit The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
CVE-2000-0129 Low 2000-02-04 Not applicable Working exploit published Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.
CVE-2000-0128 High 2000-02-04 Not applicable Working exploit published The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
CVE-2000-0089 Low 2000-02-04 Not applicable No public exploit The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability.
CVE-2000-0218 High 2000-02-03 Not applicable Working exploit published Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.
CVE-2000-0127 High 2000-02-03 Not applicable No public exploit The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
CVE-2000-0125 High 2000-02-03 Not applicable Working exploit published wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
CVE-2000-0124 Low 2000-02-03 Not applicable No public exploit surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions.
CVE-2000-0122 Medium 2000-02-03 Not applicable No public exploit Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.
CVE-2000-0469 Medium 2000-02-02 Not applicable No public exploit Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0114 Medium 2000-02-02 Not applicable Working exploit published Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
CVE-2000-0112 High 2000-02-02 Not applicable No public exploit The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during the installation.
CVE-2000-1205 Medium 2000-02-01 Not applicable No public exploit Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explicit charset, or (3) various messages that are generated by certain Apache modules or core code. NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as Internet Explorer, but CVE regards this as a design limitation of those browsers, not Apache. The printenv.pl/acuparam vector, discloser on 20070724, is one such variant.
CVE-2000-0157 High 2000-02-01 Not applicable No public exploit NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
CVE-2000-0151 Medium 2000-02-01 Not applicable No public exploit GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
CVE-2000-0137 High 2000-02-01 Not applicable No public exploit The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0136 High 2000-02-01 Not applicable Working exploit published The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0135 High 2000-02-01 Not applicable No public exploit The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0134 High 2000-02-01 Not applicable No public exploit The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0133 High 2000-02-01 Not applicable Working exploit published Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands.
CVE-2000-0131 Medium 2000-02-01 Not applicable Working exploit published Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
CVE-2000-0123 High 2000-02-01 Not applicable No public exploit The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0121 Low 2000-02-01 Not applicable Working exploit published The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability.
CVE-2000-0110 High 2000-02-01 Not applicable No public exploit The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0108 High 2000-02-01 Not applicable No public exploit The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0107 High 2000-02-01 Not applicable Working exploit published Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
CVE-2000-0106 High 2000-02-01 Not applicable No public exploit The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0105 Medium 2000-02-01 Not applicable Working exploit published Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client.
CVE-2000-0104 High 2000-02-01 Not applicable No public exploit The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0103 High 2000-02-01 Not applicable No public exploit The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0102 High 2000-02-01 Not applicable No public exploit The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0101 High 2000-02-01 Not applicable No public exploit The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0132 Low 2000-01-31 Not applicable Working exploit published Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
CVE-2000-0109 High 2000-01-31 Not applicable Working exploit published The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.
CVE-2000-0117 High 2000-01-30 Not applicable No public exploit The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).
CVE-2000-0116 High 2000-01-29 Not applicable Working exploit published Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag.
CVE-2000-0111 High 2000-01-29 Not applicable No public exploit The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.
CVE-2000-1216 High 2000-01-27 Not applicable No public exploit Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.
CVE-2000-0130 High 2000-01-27 Not applicable No public exploit Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
CVE-2000-0113 High 2000-01-27 Not applicable No public exploit The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics.
CVE-2000-0126 Medium 2000-01-26 Not applicable Working exploit published Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
CVE-2000-0098 Medium 2000-01-26 Not applicable No public exploit Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
CVE-2000-0097 Medium 2000-01-26 Not applicable Working exploit published The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
CVE-2000-0096 High 2000-01-26 Not applicable Working exploit published Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.
CVE-2000-0095 Medium 2000-01-24 Not applicable No public exploit The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier.
CVE-2000-0115 Medium 2000-01-21 Not applicable No public exploit IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
‹ prev page 1 of 18 next ›