WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published to 2000-05-31✕
Overview 2,007 matches · 3 in Waratek scope · 0 protected · 8 exploited · 0 CISA KEV · 631 public PoC · 25 EPSS ≥ 0.5
2,007matches 3in Waratek scope0.1% 0protected0.0% 8exploited0.4% 0CISA KEV0.0% 631public PoC31.4% 25EPSS ≥ 0.51.2%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 0.1% Outside Waratek scope 1 0.0% Not applicable 1,969 98.1% Withdrawn CVE 34 1.7%
Critical 8 0.4% High 1,002 49.9% Medium 744 37.1% Low 219 10.9% None 0 0.0% Unknown 34 1.7%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 2,007 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 8 0.4% Working exploit published 625 31.1% Proof of concept only 0 0.0% Forecast only 3 0.1% No public exploit 1,371 68.3%
split by peak 923 / year
Withdrawn CVE: 34Not applicable: 1,969Outside Waratek scope: 1No exploit published: 3 Unknown: 34Low: 219Medium: 744High: 1,002Critical: 8 not blocked: 2,007 No public exploit: 1,371Forecast only: 3Working exploit published: 625Exploited: 8
19882 Not applicable2 High2 not blocked2 Working exploit published1 No public exploit1 19893 Not applicable3 High2 Medium1 not blocked3 No public exploit3 199011 Not applicable11 High8 Medium2 Low1 not blocked11 Working exploit published1 No public exploit10 199115 Not applicable15 High11 Medium4 not blocked15 Working exploit published2 No public exploit13 199214 Not applicable13 Withdrawn CVE1 High12 Low1 Unknown1 not blocked14 No public exploit14 199313 Not applicable13 High8 Medium3 Low2 not blocked13 No public exploit13 199426 Not applicable25 Withdrawn CVE1 High14 Medium10 Low1 Unknown1 not blocked26 Working exploit published6 No public exploit20 199525 Not applicable25 Critical1 High17 Medium6 Low1 not blocked25 Working exploit published5 No public exploit20 199675 No exploit published1 Not applicable73 Withdrawn CVE1 Critical1 High43 Medium21 Low9 Unknown1 not blocked75 Working exploit published18 Forecast only1 No public exploit56 1997253 Not applicable252 Withdrawn CVE1 Critical1 High143 Medium89 Low19 Unknown1 not blocked253 Exploited2 Working exploit published73 Forecast only2 No public exploit176 1998247 Not applicable246 Withdrawn CVE1 Critical1 High137 Medium85 Low23 Unknown1 not blocked247 Exploited1 Working exploit published50 No public exploit196 1999923 No exploit published2 Outside Waratek scope1 Not applicable891 Withdrawn CVE29 Critical3 High423 Medium357 Low111 Unknown29 not blocked923 Exploited2 Working exploit published282 No public exploit639 2000400 Not applicable400 Critical1 High182 Medium166 Low51 not blocked400 Exploited3 Working exploit published187 No public exploit210
1988199019921994199619982000
2,007 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 21 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2000-0293 Low 2000-05-02 Not applicable Working exploit published aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory.
CVE-2000-0138 Medium 2000-05-02 Not applicable No public exploit A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft.
CVE-2000-0449 High 2000-05-01 Not applicable Working exploit published Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.
CVE-2000-0448 Medium 2000-05-01 Not applicable No public exploit The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GET_CONFIG command.
CVE-2000-0447 High 2000-05-01 Not applicable No public exploit Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service.
CVE-2000-0440 Medium 2000-05-01 Not applicable Working exploit published NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option.
CVE-2000-0401 High 2000-05-01 Not applicable No public exploit Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.
CVE-2000-0344 Medium 2000-05-01 Not applicable No public exploit The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.
CVE-2000-0341 Medium 2000-05-01 Not applicable Working exploit published ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
CVE-1999-0427 High 2000-05-01 Not applicable No public exploit Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.
CVE-2000-0340 High 2000-04-29 Not applicable Working exploit published Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.
CVE-2000-0342 High 2000-04-28 Not applicable Working exploit published Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."
CVE-2000-0429 High 2000-04-27 Not applicable Working exploit published A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.
CVE-1999-0706 High 2000-04-27 Not applicable No public exploit Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
CVE-2000-0380 High 2000-04-26 Not applicable Working exploit published The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
CVE-2000-0249 High 2000-04-26 Not applicable No public exploit The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.
CVE-2000-0326 Medium 2000-04-25 Not applicable No public exploit Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.
CVE-2000-0324 Medium 2000-04-25 Not applicable Working exploit published pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
CVE-2000-0339 High 2000-04-24 Not applicable Working exploit published ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.
CVE-2000-0337 High 2000-04-24 Not applicable Working exploit published Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
CVE-2000-0334 Low 2000-04-24 Not applicable No public exploit The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.
CVE-2000-0322 High 2000-04-24 Not applicable Exploited The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
CVE-2000-0321 Medium 2000-04-24 Not applicable No public exploit Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.
CVE-2000-0317 High 2000-04-24 Not applicable Working exploit published Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
CVE-2000-0316 High 2000-04-24 Not applicable Working exploit published Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
CVE-2000-0248 High 2000-04-24 Not applicable Exploited The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
CVE-2000-0338 Medium 2000-04-23 Not applicable Working exploit published Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.
CVE-2000-0319 Medium 2000-04-23 Not applicable No public exploit mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.
CVE-2000-0459 Medium 2000-04-22 Not applicable No public exploit IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request.
CVE-2000-0458 Low 2000-04-22 Not applicable No public exploit The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information.
CVE-2000-0336 Low 2000-04-21 Not applicable Working exploit published Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
CVE-2000-0320 Medium 2000-04-21 Not applicable No public exploit Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
CVE-2000-0318 High 2000-04-21 Not applicable No public exploit Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
CVE-2000-0295 High 2000-04-21 Not applicable Working exploit published Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.
CVE-2000-0331 Medium 2000-04-20 Not applicable No public exploit Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
CVE-2000-0311 Low 2000-04-20 Not applicable No public exploit The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability.
CVE-2000-0272 High 2000-04-20 Not applicable Working exploit published RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.
CVE-2000-0268 Medium 2000-04-20 Not applicable No public exploit Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot.
CVE-2000-0267 Medium 2000-04-20 Not applicable No public exploit Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.
CVE-2000-0292 Medium 2000-04-19 Not applicable No public exploit The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to crash.
CVE-2000-0257 High 2000-04-19 Not applicable Working exploit published Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL.
CVE-2000-0256 High 2000-04-19 Not applicable Working exploit published Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability.
CVE-2000-0271 Medium 2000-04-18 Not applicable No public exploit read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords.
CVE-2000-0270 Low 2000-04-18 Not applicable No public exploit The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack.
CVE-2000-0269 Low 2000-04-18 Not applicable No public exploit Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess.
CVE-2000-0266 Low 2000-04-18 Not applicable No public exploit Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL.
CVE-2000-0083 Medium 2000-04-18 Not applicable No public exploit HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges.
CVE-2000-0265 Medium 2000-04-17 Not applicable No public exploit Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.
CVE-2000-0264 Low 2000-04-17 Not applicable Working exploit published Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods.
CVE-2000-0291 Medium 2000-04-16 Not applicable No public exploit Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.
CVE-2000-0286 Low 2000-04-16 Not applicable Working exploit published X fontserver xfs allows local users to cause a denial of service via malformed input to the server.
CVE-2000-0285 High 2000-04-16 Not applicable No public exploit Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.
CVE-2000-0284 High 2000-04-16 Not applicable Working exploit published Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.
CVE-2000-0263 Low 2000-04-16 Not applicable Working exploit published The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.
CVE-2000-1218 Critical 2000-04-14 Not applicable No public exploit The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.
CVE-2000-0260 High 2000-04-14 Not applicable Working exploit published Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability.
CVE-2000-0254 Medium 2000-04-14 Not applicable Working exploit published The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.
CVE-2000-0250 High 2000-04-14 Not applicable Working exploit published The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.
CVE-2000-0288 Medium 2000-04-12 Not applicable No public exploit Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable.
CVE-2000-0287 High 2000-04-12 Not applicable Working exploit published The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter.
CVE-2000-0283 Medium 2000-04-12 Not applicable No public exploit The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.
CVE-2000-0282 Medium 2000-04-12 Not applicable Working exploit published TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.
CVE-2000-0262 Medium 2000-04-12 Not applicable Working exploit published The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.
CVE-2000-0261 Medium 2000-04-12 Not applicable No public exploit The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0259 High 2000-04-12 Not applicable No public exploit The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users.
CVE-2000-0258 High 2000-04-12 Not applicable No public exploit IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability.
CVE-2000-0253 High 2000-04-11 Not applicable No public exploit The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.
CVE-2000-0252 Medium 2000-04-11 Not applicable No public exploit The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
CVE-1999-0979 High 2000-04-11 Not applicable Working exploit published The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.
CVE-1999-0701 High 2000-04-11 Not applicable No public exploit After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password.
CVE-1999-0699 High 2000-04-11 Not applicable No public exploit The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
CVE-1999-0695 Medium 2000-04-11 Not applicable No public exploit The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.
CVE-2000-0294 High 2000-04-10 Not applicable No public exploit Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.
CVE-2000-0276 Low 2000-04-10 Not applicable Working exploit published BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.
CVE-2000-0275 Low 2000-04-10 Not applicable Working exploit published CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.
CVE-2000-0274 Low 2000-04-10 Not applicable Working exploit published The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.
CVE-2000-0273 Medium 2000-04-09 Not applicable No public exploit PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt.
CVE-2000-0298 High 2000-04-07 Not applicable No public exploit The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories.
CVE-2000-0279 Medium 2000-04-07 Not applicable Working exploit published BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers.
CVE-2000-0301 Medium 2000-04-06 Not applicable No public exploit Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.
CVE-2000-0300 High 2000-04-06 Not applicable Working exploit published The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.
CVE-2000-0251 Medium 2000-04-06 Not applicable No public exploit HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.
CVE-2000-0255 Medium 2000-04-05 Not applicable No public exploit The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program.
CVE-2000-0299 Medium 2000-04-04 Not applicable Working exploit published Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept.
CVE-2000-0634 Medium 2000-04-03 Not applicable Working exploit published The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0297 Medium 2000-04-03 Not applicable No public exploit Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables.
CVE-2000-0280 Low 2000-04-03 Not applicable Working exploit published Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL.
CVE-2000-0277 High 2000-04-03 Not applicable No public exploit Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability.
CVE-1999-0790 Low 2000-04-01 Not applicable No public exploit A remote attacker can read information from a Netscape user's cache via JavaScript.
CVE-2000-0302 Medium 2000-03-31 Not applicable Working exploit published Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
CVE-2000-0296 High 2000-03-31 Not applicable No public exploit fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck.
CVE-2000-0290 Medium 2000-03-31 Not applicable No public exploit Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.
CVE-2000-0234 Medium 2000-03-31 Not applicable Working exploit published The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.
CVE-2000-0246 Medium 2000-03-30 Not applicable Working exploit published IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
CVE-2000-0232 Low 2000-03-30 Not applicable Working exploit published Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request.
CVE-2000-0152 Medium 2000-03-30 Not applicable Working exploit published Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.
CVE-2000-0244 High 2000-03-29 Not applicable Working exploit published The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.
CVE-2000-0289 Medium 2000-03-27 Not applicable No public exploit IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.
CVE-2000-0245 High 2000-03-27 Not applicable Working exploit published Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.
CVE-2000-0235 High 2000-03-27 Not applicable No public exploit Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.
‹ prev page 2 of 21 next ›