WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published to 2000-12-31✕
Overview 10 matches · 0 in Waratek scope · 0 protected · 0 CISA KEV · 8 public PoC · 3 EPSS ≥ 0.5
10matches 0in Waratek scope0.0% 0protected0.0% 0CISA KEV0.0% 8public PoC80.0% 3EPSS ≥ 0.530.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 10 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 8 80.0% Medium 2 20.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 10 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 10 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / quarter
Not applicable: 10 Medium: 2High: 8 not blocked: 10 Exploited: 10
Q3 971 Not applicable1 High1 not blocked1 Exploited1 Q4 971 Not applicable1 High1 not blocked1 Exploited1 Q1 981 Not applicable1 High1 not blocked1 Exploited1 Q2 980 Q3 980 Q4 980 Q1 990 Q2 990 Q3 991 Not applicable1 High1 not blocked1 Exploited1 Q4 991 Not applicable1 High1 not blocked1 Exploited1 Q1 001 Not applicable1 Medium1 not blocked1 Exploited1 Q2 002 Not applicable2 High2 not blocked2 Exploited2 Q3 000 Q4 002 Not applicable2 High1 Medium1 not blocked2 Exploited2
Q4 97Q2 98Q4 98Q2 99Q4 99Q2 00Q4 00
10 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2000-0984 Medium 2000-12-19 Not applicable Exploited The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string.
CVE-2000-0884 High 2000-12-19 Not applicable Exploited IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
CVE-2000-0322 High 2000-04-24 Not applicable Exploited The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
CVE-2000-0248 High 2000-04-24 Not applicable Exploited The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
CVE-2000-0071 Medium 2000-01-11 Not applicable Exploited IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.
CVE-1999-1058 High 1999-11-22 Not applicable Exploited Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands.
CVE-2000-0325 High 1999-08-20 Not applicable Exploited The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
CVE-1999-0502 High 1998-03-01 Not applicable Exploited A Unix account has a default, null, blank, or missing password.
CVE-1999-0192 High 1997-10-18 Not applicable Exploited Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.
CVE-1999-0526 High 1997-07-01 Not applicable Exploited An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.