Overview 26 matches · 0 in Waratek scope · 0 protected · 1 CISA KEV · 19 public PoC · 9 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
26
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
26
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
26
100.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 6 / quarter
Q3 971
Not applicable1
High1
not blocked1
Exploited1
Q4 971
Not applicable1
High1
not blocked1
Exploited1
Q1 981
Not applicable1
High1
not blocked1
Exploited1
Q2 980
Q3 980
Q4 980
Q1 990
Q2 990
Q3 991
Not applicable1
High1
not blocked1
Exploited1
Q4 991
Not applicable1
High1
not blocked1
Exploited1
Q1 001
Not applicable1
Medium1
not blocked1
Exploited1
Q2 002
Not applicable2
High2
not blocked2
Exploited2
Q3 000
Q4 002
Not applicable2
High1
Medium1
not blocked2
Exploited2
Q1 010
Q2 013
Not applicable3
High3
not blocked3
Exploited3
Q3 016
Not applicable6
High5
Medium1
not blocked6
Exploited6
Q4 015
Not applicable5
High3
Medium2
not blocked5
Exploited5
Q1 021
Not applicable1
High1
not blocked1
Exploited1
Q2 021
Not applicable1
High1
not blocked1
Exploited1
Q4 97Q2 98Q4 98Q2 99Q4 99Q2 00Q4 00Q2 01Q4 01Q2 02
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-0367 | High | 2002-06-25 | Not applicable | Exploited | smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit. |
| CVE-2002-0126 | High | 2002-03-25 | Not applicable | Exploited | Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD. |
| CVE-2001-1580 | Medium | 2001-12-31 | Not applicable | Exploited | Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string. |
| CVE-2001-0877 | Medium | 2001-12-20 | Not applicable | Exploited | Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic (e.g., chargen), or (2) via a spoofed SSDP announcement to broadcast or multicast addresses, which could cause all UPnP clients to send traffic to a single target system. |
| CVE-2001-0876 | High | 2001-12-20 | Not applicable | Exploited | Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL. |
| CVE-2001-0797 | High | 2001-12-12 | Not applicable | Exploited | Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin. |
| CVE-2001-0550 | High | 2001-11-30 | Not applicable | Exploited | wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob). |
| CVE-2001-0690 | High | 2001-09-20 | Not applicable | Exploited | Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers. |
| CVE-2001-0680 | Medium | 2001-09-20 | Not applicable | Exploited | Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a "dot dot" attack in a LIST (ls) command. |
| CVE-2001-0507 | High | 2001-09-20 | Not applicable | Exploited | IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability. |
| CVE-2001-0554 | High | 2001-08-14 | Not applicable | Exploited | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function. |
| CVE-2001-0537 | High | 2001-07-21 | Not applicable | Exploited | HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL. |
| CVE-2001-0500 | High | 2001-07-21 | Not applicable | Exploited | Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red. |
| CVE-2001-0333 | High | 2001-06-27 | Not applicable | Exploited | Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice. |
| CVE-2001-0236 | High | 2001-05-03 | Not applicable | Exploited | Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event. |
| CVE-2001-0154 | High | 2001-05-03 | Not applicable | Exploited | HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly. |
| CVE-2000-0984 | Medium | 2000-12-19 | Not applicable | Exploited | The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string. |
| CVE-2000-0884 | High | 2000-12-19 | Not applicable | Exploited | IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability. |
| CVE-2000-0322 | High | 2000-04-24 | Not applicable | Exploited | The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0248 | High | 2000-04-24 | Not applicable | Exploited | The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands. |
| CVE-2000-0071 | Medium | 2000-01-11 | Not applicable | Exploited | IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. |
| CVE-1999-1058 | High | 1999-11-22 | Not applicable | Exploited | Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands. |
| CVE-2000-0325 | High | 1999-08-20 | Not applicable | Exploited | The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability. |
| CVE-1999-0502 | High | 1998-03-01 | Not applicable | Exploited | A Unix account has a default, null, blank, or missing password. |
| CVE-1999-0192 | High | 1997-10-18 | Not applicable | Exploited | Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable. |
| CVE-1999-0526 | High | 1997-07-01 | Not applicable | Exploited | An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server. |