Overview 36 matches · 0 in Waratek scope · 0 protected · 1 CISA KEV · 24 public PoC · 11 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
36
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
36
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
36
100.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 8 / quarter
Q3 971
Not applicable1
High1
not blocked1
Exploited1
Q4 971
Not applicable1
High1
not blocked1
Exploited1
Q1 981
Not applicable1
High1
not blocked1
Exploited1
Q2 980
Q3 980
Q4 980
Q1 990
Q2 990
Q3 991
Not applicable1
High1
not blocked1
Exploited1
Q4 991
Not applicable1
High1
not blocked1
Exploited1
Q1 001
Not applicable1
Medium1
not blocked1
Exploited1
Q2 002
Not applicable2
High2
not blocked2
Exploited2
Q3 000
Q4 002
Not applicable2
High1
Medium1
not blocked2
Exploited2
Q1 010
Q2 013
Not applicable3
High3
not blocked3
Exploited3
Q3 016
Not applicable6
High5
Medium1
not blocked6
Exploited6
Q4 015
Not applicable5
High3
Medium2
not blocked5
Exploited5
Q1 021
Not applicable1
High1
not blocked1
Exploited1
Q2 021
Not applicable1
High1
not blocked1
Exploited1
Q3 022
Not applicable2
High2
not blocked2
Exploited2
Q4 028
Not applicable8
High5
Medium3
not blocked8
Exploited8
Q4 97Q2 98Q4 98Q2 99Q4 99Q2 00Q4 00Q2 01Q4 01Q2 02Q4 02
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-1717 | Medium | 2002-12-31 | Not applicable | Exploited | Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.cnf, (2) /_vti_pvt/botinfs.cnf, (3) /_vti_pvt/bots.cnf, or (4) /_vti_pvt/linkinfo.cnf. |
| CVE-2002-1689 | High | 2002-12-31 | Not applicable | Exploited | Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environment variables when logging on, which exceeds the length of a certain string, possibly triggering a buffer overflow. |
| CVE-2002-1368 | High | 2002-12-26 | Not applicable | Exploited | Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding. |
| CVE-2002-1235 | High | 2002-11-04 | Not applicable | Exploited | The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack. |
| CVE-2002-1149 | Medium | 2002-10-11 | Not applicable | Exploited | The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings. |
| CVE-2002-1131 | High | 2002-10-04 | Not applicable | Exploited | Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php. |
| CVE-2002-1054 | Medium | 2002-10-04 | Not applicable | Exploited | Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command. |
| CVE-2002-0953 | High | 2002-10-04 | Not applicable | Exploited | globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter. |
| CVE-2002-0649 | High | 2002-08-12 | Not applicable | Exploited | Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm. |
| CVE-2002-0392 | High | 2002-07-03 | Not applicable | Exploited | Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size. |
| CVE-2002-0367 | High | 2002-06-25 | Not applicable | Exploited | smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit. |
| CVE-2002-0126 | High | 2002-03-25 | Not applicable | Exploited | Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD. |
| CVE-2001-1580 | Medium | 2001-12-31 | Not applicable | Exploited | Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string. |
| CVE-2001-0877 | Medium | 2001-12-20 | Not applicable | Exploited | Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic (e.g., chargen), or (2) via a spoofed SSDP announcement to broadcast or multicast addresses, which could cause all UPnP clients to send traffic to a single target system. |
| CVE-2001-0876 | High | 2001-12-20 | Not applicable | Exploited | Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL. |
| CVE-2001-0797 | High | 2001-12-12 | Not applicable | Exploited | Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin. |
| CVE-2001-0550 | High | 2001-11-30 | Not applicable | Exploited | wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob). |
| CVE-2001-0690 | High | 2001-09-20 | Not applicable | Exploited | Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers. |
| CVE-2001-0680 | Medium | 2001-09-20 | Not applicable | Exploited | Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a "dot dot" attack in a LIST (ls) command. |
| CVE-2001-0507 | High | 2001-09-20 | Not applicable | Exploited | IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability. |
| CVE-2001-0554 | High | 2001-08-14 | Not applicable | Exploited | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function. |
| CVE-2001-0537 | High | 2001-07-21 | Not applicable | Exploited | HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL. |
| CVE-2001-0500 | High | 2001-07-21 | Not applicable | Exploited | Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red. |
| CVE-2001-0333 | High | 2001-06-27 | Not applicable | Exploited | Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice. |
| CVE-2001-0236 | High | 2001-05-03 | Not applicable | Exploited | Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event. |
| CVE-2001-0154 | High | 2001-05-03 | Not applicable | Exploited | HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly. |
| CVE-2000-0984 | Medium | 2000-12-19 | Not applicable | Exploited | The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string. |
| CVE-2000-0884 | High | 2000-12-19 | Not applicable | Exploited | IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability. |
| CVE-2000-0322 | High | 2000-04-24 | Not applicable | Exploited | The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0248 | High | 2000-04-24 | Not applicable | Exploited | The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands. |
| CVE-2000-0071 | Medium | 2000-01-11 | Not applicable | Exploited | IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. |
| CVE-1999-1058 | High | 1999-11-22 | Not applicable | Exploited | Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands. |
| CVE-2000-0325 | High | 1999-08-20 | Not applicable | Exploited | The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability. |
| CVE-1999-0502 | High | 1998-03-01 | Not applicable | Exploited | A Unix account has a default, null, blank, or missing password. |
| CVE-1999-0192 | High | 1997-10-18 | Not applicable | Exploited | Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable. |
| CVE-1999-0526 | High | 1997-07-01 | Not applicable | Exploited | An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server. |