WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published to 2001-07-31✕
Overview 15 matches · 0 in Waratek scope · 0 protected · 0 CISA KEV · 12 public PoC · 7 EPSS ≥ 0.5
15matches 0in Waratek scope0.0% 0protected0.0% 0CISA KEV0.0% 12public PoC80.0% 7EPSS ≥ 0.546.7%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 15 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 13 86.7% Medium 2 13.3% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 15 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 15 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 3 / quarter
Not applicable: 15 Medium: 2High: 13 not blocked: 15 Exploited: 15
Q3 971 Not applicable1 High1 not blocked1 Exploited1 Q4 971 Not applicable1 High1 not blocked1 Exploited1 Q1 981 Not applicable1 High1 not blocked1 Exploited1 Q2 980 Q3 980 Q4 980 Q1 990 Q2 990 Q3 991 Not applicable1 High1 not blocked1 Exploited1 Q4 991 Not applicable1 High1 not blocked1 Exploited1 Q1 001 Not applicable1 Medium1 not blocked1 Exploited1 Q2 002 Not applicable2 High2 not blocked2 Exploited2 Q3 000 Q4 002 Not applicable2 High1 Medium1 not blocked2 Exploited2 Q1 010 Q2 013 Not applicable3 High3 not blocked3 Exploited3 Q3 012 Not applicable2 High2 not blocked2 Exploited2
Q3 97Q1 98Q3 98Q1 99Q3 99Q1 00Q3 00Q1 01Q3 01
15 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2001-0537 High 2001-07-21 Not applicable Exploited HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
CVE-2001-0500 High 2001-07-21 Not applicable Exploited Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.
CVE-2001-0333 High 2001-06-27 Not applicable Exploited Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.
CVE-2001-0236 High 2001-05-03 Not applicable Exploited Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.
CVE-2001-0154 High 2001-05-03 Not applicable Exploited HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.
CVE-2000-0984 Medium 2000-12-19 Not applicable Exploited The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string.
CVE-2000-0884 High 2000-12-19 Not applicable Exploited IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
CVE-2000-0322 High 2000-04-24 Not applicable Exploited The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
CVE-2000-0248 High 2000-04-24 Not applicable Exploited The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
CVE-2000-0071 Medium 2000-01-11 Not applicable Exploited IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.
CVE-1999-1058 High 1999-11-22 Not applicable Exploited Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands.
CVE-2000-0325 High 1999-08-20 Not applicable Exploited The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
CVE-1999-0502 High 1998-03-01 Not applicable Exploited A Unix account has a default, null, blank, or missing password.
CVE-1999-0192 High 1997-10-18 Not applicable Exploited Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.
CVE-1999-0526 High 1997-07-01 Not applicable Exploited An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.