WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published to 2003-10-31✕
Overview 15 matches · 2 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC
15matches 2in Waratek scope13.3% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 13.3% Outside Waratek scope 1 6.7% Not applicable 12 80.0% Withdrawn CVE 0 0.0%
Critical 1 6.7% High 5 33.3% Medium 5 33.3% Low 4 26.7% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 15 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 15 100.0% No public exploit 0 0.0%
split by peak 9 / year
Not applicable: 12Outside Waratek scope: 1No exploit published: 2 Low: 4Medium: 5High: 5Critical: 1 not blocked: 15 Forecast only: 15
19961 Not applicable1 High1 not blocked1 Forecast only1 19972 Not applicable2 Low2 not blocked2 Forecast only2 19980 19990 20001 Outside Waratek scope1 High1 not blocked1 Forecast only1 20012 Not applicable2 Medium2 not blocked2 Forecast only2 20029 No exploit published2 Not applicable7 Critical1 High3 Medium3 Low2 not blocked9 Forecast only9
1996199719981999200020012002
15 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2002-0422 Low 2002-08-12 Not applicable Forecast only IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or (2) via the WRITE or MKCOL method, which leaks the IP in the Location server header.
CVE-2002-0391 Critical 2002-08-12 Not applicable Forecast only Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
CVE-2002-0568 Low 2002-07-03 No exploit published Forecast only Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.
CVE-2002-0563 Medium 2002-07-03 No exploit published Forecast only The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and (6) dms/AggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes.
CVE-2002-0150 High 2002-04-22 Not applicable Forecast only Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
CVE-2002-0149 High 2002-04-22 Not applicable Forecast only Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.
CVE-2002-0147 High 2002-04-22 Not applicable Forecast only Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."
CVE-2002-0073 Medium 2002-04-22 Not applicable Forecast only The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.
CVE-2002-0072 Medium 2002-04-22 Not applicable Forecast only The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer.
CVE-2001-1217 Medium 2001-12-21 Not applicable Forecast only Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.
CVE-2001-0540 Medium 2001-10-30 Not applicable Forecast only Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.
CVE-2000-0681 High 2000-10-20 Outside Waratek scope Forecast only Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.
CVE-1999-0532 Low 1997-07-01 Not applicable Forecast only A DNS server allows zone transfers.
CVE-1999-0612 Low 1997-03-01 Not applicable Forecast only A version of finger is running that exposes valid user information to any entity on the network.
CVE-1999-0067 High 1996-03-20 Not applicable Forecast only phf CGI program allows remote command execution through shell metacharacters.