Overview 11 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC
11matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
9.1%
Not applicable
10
90.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
11
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
11
100.0%
No public exploit
0
0.0%
split by
peak 5 / year
19961
Not applicable1
High1
not blocked1
Forecast only1
19972
Not applicable2
Low2
not blocked2
Forecast only2
19980
19990
20001
Outside Waratek scope1
High1
not blocked1
Forecast only1
20012
Not applicable2
Medium2
not blocked2
Forecast only2
20025
Not applicable5
High3
Medium2
not blocked5
Forecast only5
1996199719981999200020012002
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-0150 | High | 2002-04-22 | Not applicable | Forecast only | Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values. |
| CVE-2002-0149 | High | 2002-04-22 | Not applicable | Forecast only | Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names. |
| CVE-2002-0147 | High | 2002-04-22 | Not applicable | Forecast only | Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun." |
| CVE-2002-0073 | Medium | 2002-04-22 | Not applicable | Forecast only | The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters. |
| CVE-2002-0072 | Medium | 2002-04-22 | Not applicable | Forecast only | The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer. |
| CVE-2001-1217 | Medium | 2001-12-21 | Not applicable | Forecast only | Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences. |
| CVE-2001-0540 | Medium | 2001-10-30 | Not applicable | Forecast only | Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389. |
| CVE-2000-0681 | High | 2000-10-20 | Outside Waratek scope | Forecast only | Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension. |
| CVE-1999-0532 | Low | 1997-07-01 | Not applicable | Forecast only | A DNS server allows zone transfers. |
| CVE-1999-0612 | Low | 1997-03-01 | Not applicable | Forecast only | A version of finger is running that exposes valid user information to any entity on the network. |
| CVE-1999-0067 | High | 1996-03-20 | Not applicable | Forecast only | phf CGI program allows remote command execution through shell metacharacters. |