Overview 670 matches · 1 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 20 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
1
0.1%
No exploit published
0
0.0%
Outside Waratek scope
1
0.1%
Not applicable
666
99.4%
Withdrawn CVE
2
0.3%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
670
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
670
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 282 / year
19881
Not applicable1
High1
not blocked1
Working exploit published1
19890
19901
Not applicable1
Medium1
not blocked1
Working exploit published1
19912
Not applicable2
High2
not blocked2
Working exploit published2
19920
19930
19946
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published6
19955
Not applicable5
Critical1
High2
Medium2
not blocked5
Working exploit published5
199618
Not applicable17
Withdrawn CVE1
High12
Medium5
Unknown1
not blocked18
Working exploit published18
199773
Not applicable73
High51
Medium18
Low4
not blocked73
Working exploit published73
199850
Not applicable50
Critical1
High33
Medium11
Low5
not blocked50
Working exploit published50
1999282
Outside Waratek scope1
Not applicable280
Withdrawn CVE1
Critical2
High132
Medium119
Low28
Unknown1
not blocked282
Working exploit published282
2000232
Mitigation candidate1
Not applicable231
High108
Medium100
Low24
not blocked232
Working exploit published232
1988199019921994199619982000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0582 | Medium | 2000-06-30 | Not applicable | Working exploit published | Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server proxy. |
| CVE-2000-0581 | Medium | 2000-06-30 | Not applicable | Working exploit published | Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to crash. |
| CVE-2000-0580 | Medium | 2000-06-30 | Not applicable | Working exploit published | Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization. |
| CVE-2000-0569 | Medium | 2000-06-30 | Not applicable | Working exploit published | Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface. |
| CVE-2000-0586 | High | 2000-06-29 | Not applicable | Working exploit published | Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary commands via the SUMMON command. |
| CVE-2000-0592 | High | 2000-06-27 | Not applicable | Working exploit published | Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE commands. |
| CVE-2000-0570 | Medium | 2000-06-27 | Not applicable | Working exploit published | FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header. |
| CVE-2000-0589 | High | 2000-06-26 | Not applicable | Working exploit published | SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration. |
| CVE-2000-0588 | Medium | 2000-06-26 | Not applicable | Working exploit published | SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands. |
| CVE-2000-0601 | Medium | 2000-06-25 | Not applicable | Working exploit published | LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages. |
| CVE-2000-0617 | Medium | 2000-06-22 | Not applicable | Working exploit published | Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable. |
| CVE-2000-0607 | High | 2000-06-21 | Not applicable | Working exploit published | Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings. |
| CVE-2000-0577 | High | 2000-06-21 | Not applicable | Working exploit published | Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0500 | Medium | 2000-06-21 | Mitigation candidate | Working exploit published | The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing. |
| CVE-2000-0504 | Medium | 2000-06-19 | Not applicable | Working exploit published | libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro. |
| CVE-2000-0501 | Low | 2000-06-16 | Not applicable | Working exploit published | Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server. |
| CVE-2000-0494 | High | 2000-06-16 | Not applicable | Working exploit published | Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script. |
| CVE-2000-0480 | Medium | 2000-06-16 | Not applicable | Working exploit published | Dragon telnet server allows remote attackers to cause a denial of service via a long username. |
| CVE-2000-0484 | Medium | 2000-06-15 | Not applicable | Working exploit published | Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Exception Handler resulting in a Denial of Service. |
| CVE-2000-0473 | High | 2000-06-15 | Not applicable | Working exploit published | Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin directory. |
| CVE-2000-0471 | High | 2000-06-14 | Not applicable | Working exploit published | Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname. |
| CVE-2000-0639 | High | 2000-06-11 | Not applicable | Working exploit published | The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary commands by using bbd to upload a file whose extension will cause it to be executed as a CGI script by the web server. |
| CVE-2000-0527 | High | 2000-06-09 | Not applicable | Working exploit published | userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0526 | Medium | 2000-06-09 | Not applicable | Working exploit published | mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0506 | High | 2000-06-09 | Not applicable | Working exploit published | The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability." |
| CVE-2000-0377 | Medium | 2000-06-08 | Not applicable | Working exploit published | The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability. |
| CVE-2000-0559 | Low | 2000-06-07 | Not applicable | Working exploit published | eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords. |
| CVE-2000-0538 | Medium | 2000-06-07 | Not applicable | Working exploit published | ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password. |
| CVE-2000-0520 | High | 2000-06-07 | Not applicable | Working exploit published | Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name. |
| CVE-2000-0515 | High | 2000-06-07 | Not applicable | Working exploit published | The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges. |
| CVE-2000-0552 | Medium | 2000-06-06 | Not applicable | Working exploit published | ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information. |
| CVE-2000-0523 | High | 2000-06-06 | Not applicable | Working exploit published | Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command. |
| CVE-2000-0516 | High | 2000-06-06 | Not applicable | Working exploit published | When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server. |
| CVE-2000-0482 | Medium | 2000-06-06 | Not applicable | Working exploit published | Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets. |
| CVE-2000-0537 | High | 2000-06-05 | Not applicable | Working exploit published | BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG environmental variable. |
| CVE-2000-0521 | Medium | 2000-06-05 | Not applicable | Working exploit published | Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number. |
| CVE-2000-0492 | Medium | 2000-06-04 | Not applicable | Working exploit published | PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords. |
| CVE-2000-0468 | Medium | 2000-06-02 | Not applicable | Working exploit published | man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack. |
| CVE-2000-0507 | Medium | 2000-06-01 | Not applicable | Working exploit published | Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command. |
| CVE-2000-0493 | High | 2000-06-01 | Not applicable | Working exploit published | Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string. |
| CVE-2000-0490 | High | 2000-06-01 | Not applicable | Working exploit published | Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request. |
| CVE-2000-0476 | Medium | 2000-06-01 | Not applicable | Working exploit published | xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized. |
| CVE-2000-0474 | High | 2000-06-01 | Not applicable | Working exploit published | Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory. |
| CVE-2000-0470 | High | 2000-06-01 | Not applicable | Working exploit published | Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request. |
| CVE-2000-0467 | High | 2000-06-01 | Not applicable | Working exploit published | Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function. |
| CVE-2000-0530 | High | 2000-05-31 | Not applicable | Working exploit published | The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files. |
| CVE-2000-0505 | Medium | 2000-05-31 | Not applicable | Working exploit published | The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters. |
| CVE-2000-0495 | Medium | 2000-05-30 | Not applicable | Working exploit published | Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability. |
| CVE-2000-0402 | Low | 2000-05-30 | Not applicable | Working exploit published | The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability. |
| CVE-2000-0454 | High | 2000-05-29 | Not applicable | Working exploit published | Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter. |
| CVE-2000-0460 | High | 2000-05-27 | Not applicable | Working exploit published | Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable. |
| CVE-2000-0491 | High | 2000-05-24 | Not applicable | Working exploit published | Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request. |
| CVE-2000-0446 | High | 2000-05-24 | Not applicable | Working exploit published | Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string. |
| CVE-2000-0444 | Medium | 2000-05-24 | Not applicable | Working exploit published | HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000. |
| CVE-2000-0443 | High | 2000-05-24 | Not applicable | Working exploit published | The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0442 | High | 2000-05-24 | Not applicable | Working exploit published | Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command. |
| CVE-2000-0396 | Medium | 2000-05-24 | Not applicable | Working exploit published | The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files. |
| CVE-2000-0418 | Medium | 2000-05-23 | Not applicable | Working exploit published | The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests. |
| CVE-2000-0438 | High | 2000-05-22 | Not applicable | Working exploit published | Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. |
| CVE-2000-0451 | Medium | 2000-05-19 | Not applicable | Working exploit published | The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets. |
| CVE-2000-0436 | Medium | 2000-05-19 | Not applicable | Working exploit published | MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0305 | High | 2000-05-19 | Not applicable | Working exploit published | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability. |
| CVE-2000-0463 | Medium | 2000-05-18 | Not applicable | Working exploit published | BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets. |
| CVE-2000-0453 | Medium | 2000-05-18 | Not applicable | Working exploit published | XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000. |
| CVE-2000-0452 | Medium | 2000-05-18 | Not applicable | Working exploit published | Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command. |
| CVE-2000-0437 | High | 2000-05-18 | Not applicable | Working exploit published | Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands. |
| CVE-2000-0394 | Medium | 2000-05-18 | Not applicable | Working exploit published | NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Middle signature. |
| CVE-2000-0465 | Medium | 2000-05-17 | Not applicable | Working exploit published | Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability. |
| CVE-2000-0417 | Medium | 2000-05-17 | Not applicable | Working exploit published | The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password. |
| CVE-2000-0350 | Medium | 2000-05-17 | Not applicable | Working exploit published | A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events. |
| CVE-1999-1008 | High | 2000-05-17 | Not applicable | Working exploit published | xsoldier program allows local users to gain root access via a long argument. |
| CVE-2000-0432 | High | 2000-05-16 | Not applicable | Working exploit published | The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0405 | High | 2000-05-16 | Not applicable | Working exploit published | Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet. |
| CVE-2000-0395 | Medium | 2000-05-16 | Not applicable | Working exploit published | Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request. |
| CVE-2000-0393 | High | 2000-05-16 | Not applicable | Working exploit published | The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute. |
| CVE-2000-0389 | High | 2000-05-16 | Not applicable | Working exploit published | Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges. |
| CVE-2000-0379 | Low | 2000-05-16 | Not applicable | Working exploit published | The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so. |
| CVE-1999-0980 | Medium | 2000-05-16 | Not applicable | Working exploit published | Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request. |
| CVE-2000-0424 | High | 2000-05-15 | Not applicable | Working exploit published | The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0397 | Medium | 2000-05-15 | Not applicable | Working exploit published | The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account. |
| CVE-2000-0400 | High | 2000-05-13 | Not applicable | Working exploit published | The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post. |
| CVE-2000-0407 | High | 2000-05-12 | Not applicable | Working exploit published | Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option. |
| CVE-2000-0457 | High | 2000-05-11 | Not applicable | Working exploit published | ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability. |
| CVE-2000-0408 | Medium | 2000-05-11 | Not applicable | Working exploit published | IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability. |
| CVE-2000-0411 | Medium | 2000-05-10 | Not applicable | Working exploit published | Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter. |
| CVE-2000-0409 | Low | 2000-05-10 | Not applicable | Working exploit published | Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate. |
| CVE-2000-0384 | High | 2000-05-08 | Not applicable | Working exploit published | NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access. |
| CVE-2000-0413 | Medium | 2000-05-06 | Not applicable | Working exploit published | The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path. |
| CVE-2000-0426 | Medium | 2000-05-05 | Not applicable | Working exploit published | UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself. |
| CVE-2000-0423 | Medium | 2000-05-05 | Not applicable | Working exploit published | Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag. |
| CVE-2000-0381 | Medium | 2000-05-05 | Not applicable | Working exploit published | The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter. |
| CVE-2000-0427 | Medium | 2000-05-04 | Not applicable | Working exploit published | The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM. |
| CVE-2000-0430 | Medium | 2000-05-03 | Not applicable | Working exploit published | Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request. |
| CVE-2000-0425 | High | 2000-05-03 | Not applicable | Working exploit published | Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands. |
| CVE-2000-0378 | High | 2000-05-03 | Not applicable | Working exploit published | The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in. |
| CVE-2000-0332 | Medium | 2000-05-03 | Not applicable | Working exploit published | UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte. |
| CVE-2000-0347 | Medium | 2000-05-02 | Not applicable | Working exploit published | Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name. |
| CVE-2000-0343 | High | 2000-05-02 | Not applicable | Working exploit published | Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header. |
| CVE-2000-0293 | Low | 2000-05-02 | Not applicable | Working exploit published | aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory. |
| CVE-2000-0449 | High | 2000-05-01 | Not applicable | Working exploit published | Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields. |