Overview 280 matches · 4 in Waratek scope · 2 protected · 3 exploited · 2 CISA KEV · 55 public PoC · 9 EPSS ≥ 0.5
280matches
4in Waratek scope1.4%
2protected0.7%
3exploited1.1%
2CISA KEV0.7%
55public PoC19.6%
9EPSS ≥ 0.53.2%
Protected by Waratek
2
0.7%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
2
0.7%
Outside Waratek scope
3
1.1%
Not applicable
273
97.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
0.7%
partly blocked
0
0.0%
not blocked
278
99.3%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 42 / year
19991
Not applicable1
Low1
not blocked1
No public exploit1
20004
Not applicable4
High3
Medium1
not blocked4
Working exploit published2
No public exploit2
20012
Not applicable2
High1
Medium1
not blocked2
Working exploit published1
No public exploit1
20024
Not applicable4
High2
Medium2
not blocked4
Working exploit published1
No public exploit3
20031
Not applicable1
Medium1
not blocked1
Working exploit published1
20049
Not applicable9
High4
Medium5
not blocked9
Working exploit published7
No public exploit2
200519
Not applicable19
High12
Medium7
not blocked19
Working exploit published11
Forecast only1
No public exploit7
200628
Not applicable28
High9
Medium19
not blocked28
Working exploit published7
No public exploit21
200718
Not applicable18
High4
Medium14
not blocked18
Working exploit published3
No public exploit15
200813
Not applicable13
High8
Medium5
not blocked13
Working exploit published9
No public exploit4
200912
Not applicable12
High11
Medium1
not blocked12
Working exploit published5
No public exploit7
20105
Not applicable5
High5
not blocked5
Working exploit published2
No public exploit3
20110
20121
Not applicable1
Medium1
not blocked1
No public exploit1
20131
Not applicable1
Low1
not blocked1
No public exploit1
20143
Not applicable3
High1
Medium1
Low1
not blocked3
No public exploit3
20159
Not applicable9
High3
Medium6
not blocked9
No public exploit9
20161
Not applicable1
High1
not blocked1
No public exploit1
20178
Not applicable8
Critical1
High1
Medium6
not blocked8
No public exploit8
20188
Protected by Waratek1
Outside Waratek scope1
Not applicable6
Critical4
High2
Medium2
blocked by ARMR today1
not blocked7
Working exploit published2
No public exploit6
20199
Protected by Waratek1
Not applicable8
Critical2
High4
Medium3
blocked by ARMR today1
not blocked8
No public exploit9
20205
Outside Waratek scope1
Not applicable4
Critical2
High1
Medium2
not blocked5
No public exploit5
20214
No exploit published1
Not applicable3
Critical2
High2
not blocked4
Exploited1
No public exploit3
202222
Not applicable22
Critical2
High13
Medium4
Low3
not blocked22
Proof of concept only1
No public exploit21
202325
Not applicable25
Critical1
High7
Medium17
not blocked25
Proof of concept only2
No public exploit23
202442
Not applicable42
Critical3
High24
Medium15
not blocked42
No public exploit42
202514
No exploit published1
Not applicable13
Critical1
High5
Medium7
Low1
not blocked14
Exploited1
Working exploit published1
No public exploit12
202612
Outside Waratek scope1
Not applicable11
Critical3
High4
Medium5
not blocked12
Exploited1
No public exploit11
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2007-4655 | Medium | 2007-09-04 | Not applicable | No public exploit | Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to (1) list.cgi or (2) list2.cgi. |
| CVE-2007-4564 | Medium | 2007-08-28 | Not applicable | No public exploit | Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges. |
| CVE-2007-4563 | Medium | 2007-08-28 | Not applicable | No public exploit | Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges. |
| CVE-2007-4479 | Medium | 2007-08-22 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or HTML via the searWords parameter. |
| CVE-2007-1673 | High | 2007-05-09 | Not applicable | No public exploit | unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file. |
| CVE-2007-1301 | High | 2007-03-07 | Not applicable | Working exploit published | Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authenticated users to execute arbitrary code via a long argument to the APPEND command. NOTE: this is probably different than CVE-2006-6423. |
| CVE-2006-7078 | Medium | 2007-03-02 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in Professional Home Page Tools Login Script, as of July 2006, allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) vorname, and (3) nachname parameters in the register script. NOTE: some details have been obtained from third party sources. |
| CVE-2007-0652 | Medium | 2007-02-15 | Not applicable | No public exploit | Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag. |
| CVE-2007-0651 | Medium | 2007-02-15 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/. |
| CVE-2007-0565 | High | 2007-01-30 | Not applicable | No public exploit | CGI-Rescue Shopping Basket Professional 7.50 and earlier allows remote attackers to inject arbitrary operating system commands via unspecified vectors. |
| CVE-2006-6964 | Medium | 2007-01-29 | Not applicable | No public exploit | MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source. |
| CVE-2007-0514 | Medium | 2007-01-26 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary web script or HTML via (1) HTTP Expect headers or (2) image maps. |
| CVE-2006-6605 | High | 2006-12-19 | Not applicable | No public exploit | Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command. |
| CVE-2006-6484 | Medium | 2006-12-12 | Not applicable | No public exploit | The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise Edition 1.1 through 1.40 allows remote attackers to cause a denial of service (crash) via unspecified vectors that trigger a null pointer dereference, as addressed by the ME-10023 hotfix, and a different issue than CVE-2006-6423. NOTE: some details were obtained from third party information. |
| CVE-2006-6423 | High | 2006-12-12 | Not applicable | Working exploit published | Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix. |
| CVE-2006-6446 | Medium | 2006-12-10 | Not applicable | Working exploit published | SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the D parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. |
| CVE-2006-6290 | Medium | 2006-12-05 | Not applicable | No public exploit | Multiple stack-based buffer overflows in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.82 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.30 and 2.0 through 2.33 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) EXAMINE or (2) SELECT command. |
| CVE-2006-6239 | High | 2006-12-03 | Not applicable | No public exploit | webadmin in MailEnable NetWebAdmin Professional 2.32 and Enterprise 2.32 allows remote attackers to authenticate using an empty password. |
| CVE-2006-5189 | High | 2006-10-10 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in funzioni/lib/show_hlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appl[APPL] parameter. |
| CVE-2006-5177 | High | 2006-10-10 | Not applicable | Working exploit published | The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or (2) cause a denial of service via crafted base64 encoded NTLM Type 1 messages, which trigger a buffer over-read. |
| CVE-2006-5176 | High | 2006-10-10 | Not applicable | No public exploit | Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code via "the signature field of NTLM Type 1 messages". |
| CVE-2006-4616 | Medium | 2006-09-07 | Not applicable | No public exploit | SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 (20060904) allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception. |
| CVE-2006-3350 | Medium | 2006-07-28 | Not applicable | No public exploit | Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a (1) ARJ, (2) RAR, or (3) ZIP archive. |
| CVE-2006-3837 | Medium | 2006-07-25 | Not applicable | No public exploit | delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout. |
| CVE-2006-3753 | Medium | 2006-07-21 | Not applicable | No public exploit | setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a cookie, which allows attackers to conduct brute force password guessing attacks after obtaining the hash. |
| CVE-2006-3752 | High | 2006-07-21 | Not applicable | No public exploit | Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the (1) hidemail, (2) name, (3) mail, (4) ip, or (5) text parameters. |
| CVE-2006-3277 | Medium | 2006-06-28 | Not applicable | Working exploit published | The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument. |
| CVE-2006-3075 | High | 2006-06-19 | Not applicable | No public exploit | Multiple PHP remote file inclusion vulnerabilities in PictureDis Professional 1.33 Build 234 and earlier and PictureDis Photoalbum 4.82 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to files in photoalbum/ including (1) thumstbl.php, (2) wpfiles.php, and (3) wallpapr.php. |
| CVE-2006-2512 | Medium | 2006-05-22 | Not applicable | No public exploit | SQL injection vulnerability in Hitachi EUR Professional Edition, EUR Viewer, EUR Print Service, and EUR Print Service for ILF allows remote authenticated users to execute arbitrary SQL commands via unknown attack vectors. |
| CVE-2006-2357 | Medium | 2006-05-15 | Not applicable | No public exploit | Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain source code for scripts via a trailing dot in a request to NmConsole/Login.asp. |
| CVE-2006-2356 | Medium | 2006-05-15 | Not applicable | No public exploit | NmConsole/utility/RenderMap.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain sensitive information about network nodes via a modified nDeviceGroupID parameter. |
| CVE-2006-2355 | Medium | 2006-05-15 | Not applicable | No public exploit | Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. |
| CVE-2006-2354 | Medium | 2006-05-15 | Not applicable | No public exploit | NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium generates different error messages in a way that allows remote attackers to enumerate valid usernames. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. |
| CVE-2006-2353 | Medium | 2006-05-15 | Not applicable | No public exploit | NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters. |
| CVE-2006-2352 | Medium | 2006-05-15 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via unknown vectors in (1) NmConsole/Tools.asp and (2) NmConsole/DeviceSelection.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. |
| CVE-2006-2351 | Medium | 2006-05-15 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp. |
| CVE-2006-1792 | High | 2006-04-15 | Not applicable | No public exploit | Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probably a different vulnerability than CVE-2006-1337. |
| CVE-2006-1338 | Medium | 2006-03-21 | Not applicable | No public exploit | Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors involving "incorrectly encoded quoted-printable emails". |
| CVE-2006-0503 | Medium | 2006-02-01 | Not applicable | No public exploit | IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service (service crash) via unspecified vectors involving the EXAMINE command. |
| CVE-2006-0073 | Medium | 2006-01-04 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a URL, which is not properly sanitized from the resulting error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. |
| CVE-2005-4456 | High | 2005-12-21 | Not applicable | Working exploit published | Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) LIST, (2) LSUB, and (3) UID FETCH commands. NOTE: it is possible that these are alternate vectors for the issue described in CVE-2005-4402. |
| CVE-2005-4402 | Medium | 2005-12-20 | Not applicable | Working exploit published | Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated users to execute arbitrary code via a long IMAP EXAMINE command. |
| CVE-2005-4177 | Medium | 2005-12-12 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrary web script or HTML via the StartRow parameter. |
| CVE-2005-4152 | High | 2005-12-11 | Not applicable | No public exploit | Soti Pocket Controller-Professional 5.0 allows remote attackers to turn off, reboot, or hard reset a PDA via a series of initialization, command, and reset packets sent to port 5492. |
| CVE-2005-4034 | High | 2005-12-06 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) pg, and (3) sortb parameters to (a) index.php; (4) cid parameter to (b) gift.php and (c) fq.php; and (5) cat parameter to (d) articles.php. |
| CVE-2005-3993 | High | 2005-12-05 | Not applicable | No public exploit | Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service (crash) via invalid IMAP commands. |
| CVE-2005-3813 | Medium | 2005-11-26 | Not applicable | Working exploit published | IMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service (application crash) by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690. |
| CVE-2005-3690 | High | 2005-11-19 | Not applicable | No public exploit | Stack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the (1) select, (2) create, (3) delete, (4) rename, (5) subscribe, or (6) unsubscribe commands. |
| CVE-2005-3155 | High | 2005-10-05 | Not applicable | Working exploit published | Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code. |
| CVE-2005-2605 | Medium | 2005-08-17 | Not applicable | No public exploit | Unknown vulnerability in Lasso Professional Server8.0.4 and 8.0.5 allows attackers to bypass authentication, related to [Auth] tags. |
| CVE-2005-2278 | High | 2005-07-18 | Not applicable | Working exploit published | Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name. |
| CVE-2005-2223 | Medium | 2005-07-12 | Not applicable | Forecast only | Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service (crash) during authentication. |
| CVE-2005-2222 | High | 2005-07-12 | Not applicable | No public exploit | Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors. |
| CVE-2005-1781 | Medium | 2005-05-31 | Not applicable | No public exploit | Unknown vulnerability in SMTP authentication for MailEnable allows remote attackers to cause a denial of service (crash). |
| CVE-2005-1412 | High | 2005-05-03 | Not applicable | Working exploit published | SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter. |
| CVE-2005-1348 | High | 2005-05-02 | Not applicable | Working exploit published | Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header. |
| CVE-2005-1014 | High | 2005-05-02 | Not applicable | No public exploit | Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbitrary code via a long AUTHENTICATE command. |
| CVE-2005-1013 | Medium | 2005-05-02 | Not applicable | Working exploit published | The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash) via an EHLO command with a Unicode string. |
| CVE-2005-0185 | High | 2005-05-02 | Not applicable | Working exploit published | Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a LinkDown-Trap packet that contains a long OCTET-STRING in the Trap variable-bindings field. |
| CVE-2004-2501 | High | 2004-12-31 | Not applicable | Working exploit published | Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via (1) a long command string or (2) a long string to the MEIMAP service and then terminating the connection. |
| CVE-2004-2194 | Medium | 2004-12-31 | Not applicable | No public exploit | MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial of service (crash) via malformed (1) SMTP or (2) IMAP commands. |
| CVE-2004-2129 | Medium | 2004-12-31 | Not applicable | Working exploit published | SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffer overflow. |
| CVE-2004-1955 | High | 2004-12-31 | Not applicable | Working exploit published | SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter. |
| CVE-2004-1953 | Medium | 2004-12-31 | Not applicable | Working exploit published | phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message. |
| CVE-2004-0326 | High | 2004-11-23 | Not applicable | Working exploit published | Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request. |
| CVE-2004-1661 | High | 2004-09-02 | Not applicable | Working exploit published | MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1." |
| CVE-2004-1954 | Medium | 2004-04-21 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter. |
| CVE-2004-2084 | Medium | 2004-02-07 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arbitrary web script or HTML via the xSearch parameter. |
| CVE-2003-1469 | Medium | 2003-12-31 | Not applicable | Working exploit published | The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message. |
| CVE-2002-1994 | Medium | 2002-12-31 | Not applicable | No public exploit | advserver.exe in Advanced Web Server (AdvServer) Professional 1.030000 allows remote attackers to cause a denial of service via multiple HTTP requests containing a single carriage return/line feed (CRLF) sequence. |
| CVE-2002-1992 | Medium | 2002-12-31 | Not applicable | No public exploit | Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header. |
| CVE-2002-1753 | High | 2002-12-31 | Not applicable | No public exploit | csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function. |
| CVE-2002-0495 | High | 2002-08-12 | Not applicable | Working exploit published | csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi. |
| CVE-2001-1139 | Medium | 2001-08-22 | Not applicable | No public exploit | Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request. |
| CVE-2001-0626 | High | 2001-08-22 | Not applicable | Working exploit published | O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character. |
| CVE-2000-0622 | High | 2000-07-19 | Not applicable | Working exploit published | Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter. |
| CVE-2000-0623 | High | 2000-07-17 | Not applicable | No public exploit | Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header. |
| CVE-2000-0577 | High | 2000-06-21 | Not applicable | Working exploit published | Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0066 | Medium | 2000-01-13 | Not applicable | No public exploit | WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request. |
| CVE-1999-0916 | Low | 1999-06-29 | Not applicable | No public exploit | WebTrends software stores account names and passwords in a file which does not have restricted access permissions. |