WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product mina✕
Overview 287 matches · 17 in Waratek scope · 11 protected · 10 exploited · 1 CISA KEV · 28 public PoC · 8 EPSS ≥ 0.5
287matches 17in Waratek scope5.9% 11protected3.8% 10exploited3.5% 1CISA KEV0.3% 28public PoC9.8% 8EPSS ≥ 0.52.8%
Protected by Waratek 11 3.8% Rule in development 0 0.0% Mitigation candidate 1 0.3% No exploit published 5 1.7% Outside Waratek scope 0 0.0% Not applicable 270 94.1% Withdrawn CVE 0 0.0%
Critical 44 15.3% High 112 39.0% Medium 125 43.6% Low 6 2.1% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 11 3.8% partly blocked 0 0.0% not blocked 276 96.2% not established 0 0.0% unrecorded 0 0.0%
Exploited 10 3.5% Working exploit published 20 7.0% Proof of concept only 37 12.9% Forecast only 1 0.3% No public exploit 219 76.3%
split by peak 41 / year
Not applicable: 270No exploit published: 5Mitigation candidate: 1Protected by Waratek: 11 Low: 6Medium: 125High: 112Critical: 44 not blocked: 276blocked by ARMR today: 11 No public exploit: 219Forecast only: 1Proof of concept only: 37Working exploit published: 20Exploited: 10
19971 Not applicable1 High1 not blocked1 No public exploit1 19980 19993 Not applicable3 High2 Medium1 not blocked3 No public exploit3 20006 Not applicable6 High3 Medium2 Low1 not blocked6 Working exploit published3 No public exploit3 20011 Not applicable1 Medium1 not blocked1 Forecast only1 200216 Not applicable16 High9 Medium7 not blocked16 Working exploit published3 No public exploit13 20039 Not applicable9 High5 Medium4 not blocked9 Exploited2 Working exploit published4 No public exploit3 20041 Not applicable1 Medium1 not blocked1 No public exploit1 20058 Not applicable8 High4 Medium4 not blocked8 Working exploit published1 No public exploit7 20063 Not applicable3 High2 Medium1 not blocked3 Working exploit published1 No public exploit2 20073 Not applicable3 High3 not blocked3 No public exploit3 20083 Not applicable3 Medium3 not blocked3 No public exploit3 20091 Not applicable1 High1 not blocked1 Working exploit published1 20100 20113 Not applicable3 Medium3 not blocked3 Working exploit published2 No public exploit1 20123 Not applicable3 High1 Medium1 Low1 not blocked3 No public exploit3 20134 Not applicable4 High4 not blocked4 No public exploit4 201410 Not applicable10 High6 Medium3 Low1 not blocked10 Working exploit published1 No public exploit9 20151 Not applicable1 High1 not blocked1 No public exploit1 20160 20178 Not applicable8 High5 Medium3 not blocked8 Working exploit published1 No public exploit7 20181 Not applicable1 Medium1 not blocked1 No public exploit1 20197 Not applicable7 High4 Medium3 not blocked7 Exploited1 No public exploit6 202015 Not applicable15 Critical4 High5 Medium6 not blocked15 Working exploit published2 No public exploit13 202127 No exploit published2 Not applicable25 Critical11 High10 Medium6 not blocked27 Exploited3 Working exploit published1 No public exploit23 202228 Not applicable28 Critical5 High12 Medium11 not blocked28 Proof of concept only2 No public exploit26 202333 Mitigation candidate1 Not applicable32 Critical6 High12 Medium14 Low1 not blocked33 Exploited2 Proof of concept only5 No public exploit26 202441 Protected by Waratek1 No exploit published1 Not applicable39 Critical4 High9 Medium28 blocked by ARMR today1 not blocked40 Exploited2 Proof of concept only12 No public exploit27 202528 Not applicable28 Critical8 High4 Medium16 not blocked28 Proof of concept only10 No public exploit18 202623 Protected by Waratek10 No exploit published2 Not applicable11 Critical6 High9 Medium6 Low2 blocked by ARMR today10 not blocked13 Proof of concept only8 No public exploit15
1999200220052008201120142017202020232026
287 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2019-9567 Medium 2019-03-04 Not applicable No public exploit The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has XSS via a custom input field of a poll.
CVE-2019-6111 Medium 2019-01-31 Not applicable Exploited An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).
CVE-2018-6866 Medium 2018-02-23 Not applicable No public exploit Cross Site Scripting (XSS) exists in PHP Scripts Mall Learning and Examination Management System Script 2.3.1 via a crafted message.
CVE-2017-17516 High 2017-12-14 Not applicable No public exploit scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
CVE-2017-16792 Medium 2017-11-13 Not applicable No public exploit Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to views/gem.erb and views/index.erb.
CVE-2017-14683 High 2017-09-25 Not applicable No public exploit geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload.
CVE-2017-14506 Medium 2017-09-25 Not applicable No public exploit geminabox (aka Gem in a Box) before 0.13.6 has XSS, as demonstrated by uploading a gem file that has a crafted gem.homepage value in its .gemspec file.
CVE-2016-10369 High 2017-05-08 Not applicable No public exploit unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
CVE-2017-6356 Medium 2017-03-20 Not applicable No public exploit Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which allows attackers to obtain sensitive session information via unknown vectors.
CVE-2017-5329 High 2017-01-27 Not applicable Working exploit published Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation.
CVE-2017-5328 High 2017-01-27 Not applicable No public exploit Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors.
CVE-2015-4059 High 2015-05-29 Not applicable No public exploit Heap-based buffer overflow in the License Server (LicenseServer.exe) in Wavelink Terminal Emulation (TE) allows remote attackers to execute arbitrary code via a large HTTP header.
CVE-2013-2810 High 2014-12-08 Not applicable No public exploit Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack.
CVE-2014-8997 High 2014-11-20 Not applicable Working exploit published Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/.
CVE-2014-7359 Medium 2014-10-19 Not applicable No public exploit The MAPA DA MINA (aka com.wMAPADAMINA) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-2941 High 2014-08-15 Not applicable No public exploit Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows remote attackers to obtain access via a TBUS2 command. NOTE: the vendor reportedly states "there is no possibility to exploit another user's credentials.
CVE-2014-0328 High 2014-08-15 Not applicable No public exploit The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.
CVE-2014-2370 Medium 2014-07-24 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data.
CVE-2014-2369 Medium 2014-07-24 Not applicable No public exploit Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
CVE-2012-0273 High 2014-06-20 Not applicable No public exploit Multiple stack-based buffer overflows in MinaliC 2.0.0 allow remote attackers to execute arbitrary code via a (1) session_id cookie in a request to the get_cookie_value function in response.c, (2) directory name in a request to the add_default_file function in response.c, or (3) file name in a request to the retrieve_physical_file_name_or_brows function in response.c.
CVE-2011-2198 Low 2014-05-21 Not applicable No public exploit The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption and crash) via a crafted file, as demonstrated by a file containing the string "\033[100000000000000000@".
CVE-2013-7360 High 2014-04-10 Not applicable No public exploit Unspecified vulnerability in SAP adminadapter allows remote attackers to read or write to arbitrary files via unknown vectors.
CVE-2013-0694 High 2013-10-03 Not applicable No public exploit The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier have hardcoded credentials in a ROM, which makes it easier for remote attackers to obtain shell access to the underlying OS by leveraging knowledge of the ROM contents from a product installation elsewhere.
CVE-2013-0693 High 2013-10-03 Not applicable No public exploit The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier performs network-beacon broadcasts, which allows remote attackers to obtain potentially sensitive information about device presence by listening for broadcast traffic.
CVE-2013-0692 High 2013-10-03 Not applicable No public exploit The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary code by connecting to the debug service.
CVE-2013-0689 High 2013-10-03 Not applicable No public exploit The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors.
CVE-2012-2970 High 2012-07-09 Not applicable No public exploit The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service (device hang) via network traffic to port (1) 1641, (2) 3734, or (3) 3735.
CVE-2012-1083 Medium 2012-02-14 Not applicable No public exploit Cross-site request forgery (CSRF) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2012-1082 Low 2012-02-14 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-0189 Medium 2011-03-23 Not applicable No public exploit The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dialog, which might make it easier for man-in-the-middle attackers to spoof SSH servers by leveraging protocol vulnerabilities.
CVE-2011-0901 Medium 2011-02-07 Not applicable Working exploit published Multiple stack-based buffer overflows in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allow user-assisted remote attackers to execute arbitrary code via a .RDP file with a long (1) username, (2) password, or (3) domain argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2011-0900 Medium 2011-02-07 Not applicable Working exploit published Stack-based buffer overflow in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a .RDP file with a long hostname argument.
CVE-2009-4200 High 2009-12-04 Not applicable Working exploit published SQL injection vulnerability in the Seminar (com_seminar) component 1.28 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a View_seminar action to index.php.
CVE-2008-5372 Medium 2008-12-08 Not applicable No public exploit sdm-login in sdm-terminal 0.4.0b allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sdm.autologin.once temporary file.
CVE-2008-5143 Medium 2008-11-18 Not applicable No public exploit mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/*.debug or (2) /tmp/*.env temporary file.
CVE-2008-1293 Medium 2008-04-29 Not applicable No public exploit ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6).
CVE-2007-3770 High 2007-07-15 Not applicable No public exploit The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality.
CVE-2007-2593 High 2007-05-11 Not applicable No public exploit The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop Protocol (RDP) 6.0 client. NOTE: a third party claims that the vendor may have fixed this in approximately 2006.
CVE-2007-0808 High 2007-02-07 Not applicable No public exploit PHP remote file inclusion vulnerability in Mina Ajans Script allows remote attackers to execute arbitrary PHP code via a URL in the syf parameter to an unspecified PHP script.
CVE-2006-4465 High 2006-08-31 Not applicable No public exploit Microsoft Terminal Server, when running an application session with the "Start program at logon" and "Override settings from user profile and Client Connection Manager wizard" options, allows local users to execute arbitrary code by forcing an Explorer error. NOTE: a third-party researcher has stated that the options are "a convenience to users" and were not intended to restrict execution of arbitrary code
CVE-2006-4309 High 2006-08-23 Not applicable No public exploit VNC server on the AK-Systems Windows Terminal 1.2.5 ExVLP is not password protected, which allows remote attackers to login and view RDP or Citrix sessions.
CVE-2006-4158 Medium 2006-08-16 Not applicable Working exploit published PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
CVE-2005-3589 High 2005-11-16 Not applicable Working exploit published Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command.
CVE-2005-1214 Medium 2005-06-14 Not applicable No public exploit Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page.
CVE-2005-1212 High 2005-06-14 Not applicable No public exploit Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.
CVE-2005-1794 High 2005-06-01 Not applicable No public exploit Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.
CVE-2005-1775 Medium 2005-05-31 Not applicable No public exploit Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a large nickname.
CVE-2005-1772 Medium 2005-05-31 Not applicable No public exploit Buffer overflow in the client cd-key hash in Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a long client cd-key hash value, a different vulnerability than CVE-2005-1556.
CVE-2005-1342 High 2005-05-04 Not applicable No public exploit The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.
CVE-2005-1341 Medium 2005-05-04 Not applicable No public exploit Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences.
CVE-2004-1853 Medium 2004-03-19 Not applicable No public exploit Buffer overflow in Terminator 3: War of the Machines 1.0 allows remote attackers to cause a denial of service via a long ServerInfo variable.
CVE-2003-0496 High 2003-08-18 Not applicable Working exploit published Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
CVE-2003-0112 Medium 2003-05-12 Not applicable No public exploit Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed to a debugger.
CVE-2003-0111 High 2003-05-05 Not applicable Exploited The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise."
CVE-2002-1561 Medium 2003-04-02 Not applicable Working exploit published The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference.
CVE-2003-0109 High 2003-03-31 Not applicable Exploited Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
CVE-2003-0010 High 2003-03-24 Not applicable No public exploit Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.
CVE-2003-0070 Medium 2003-03-03 Not applicable No public exploit VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
CVE-2003-0003 High 2003-02-07 Not applicable Working exploit published Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.
CVE-2003-0001 Medium 2003-01-17 Not applicable Working exploit published Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
CVE-2002-2148 Medium 2002-12-31 Not applicable No public exploit Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response.
CVE-2002-1933 High 2002-12-31 Not applicable No public exploit The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window.
CVE-2002-1898 High 2002-12-31 Not applicable Working exploit published Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window.
CVE-2002-1325 Medium 2002-12-23 Not applicable No public exploit Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."
CVE-2002-1260 High 2002-12-23 Not applicable No public exploit The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.
CVE-2002-1258 Medium 2002-12-23 Not applicable No public exploit Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files via a Java applet with a spoofed location in the CODEBASE parameter in the APPLET tag, possibly due to a parsing error.
CVE-2002-1257 High 2002-12-23 Not applicable No public exploit Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail.
CVE-2002-1256 Medium 2002-12-23 Not applicable No public exploit The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller.
CVE-2002-1230 Medium 2002-11-04 Not applicable Working exploit published NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, aka "Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation."
CVE-2002-1214 High 2002-10-28 Not applicable No public exploit Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.
CVE-2002-0864 Medium 2002-10-11 Not applicable No public exploit The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote Desktop is enabled via a PDU Confirm Active data packet that does not set the Pattern BLT command, aka "Denial of Service in Remote Desktop."
CVE-2002-0863 Medium 2002-10-11 Not applicable No public exploit Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."
CVE-2002-0694 High 2002-10-10 Not applicable No public exploit The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to execute arbitrary code via HTML mail that references or inserts a malicious .chm file containing shortcuts that can be executed, aka "Code Execution via Compiled HTML Help File."
CVE-2002-0693 High 2002-10-10 Not applicable Working exploit published Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.
CVE-2002-0720 High 2002-09-05 Not applicable No public exploit A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code.
CVE-2002-0444 High 2002-07-26 Not applicable No public exploit Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies.
CVE-2001-0540 Medium 2001-10-30 Not applicable Forecast only Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.
CVE-2000-0991 High 2000-12-19 Not applicable Working exploit published Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability.
CVE-2000-0404 Medium 2000-05-25 Not applicable No public exploit The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability.
CVE-2000-0305 High 2000-05-19 Not applicable Working exploit published Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability.
CVE-2000-0331 Medium 2000-04-20 Not applicable No public exploit Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
CVE-2000-0259 High 2000-04-12 Not applicable No public exploit The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users.
CVE-2000-0232 Low 2000-03-30 Not applicable Working exploit published Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request.
CVE-1999-0909 High 1999-09-20 Not applicable No public exploit Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.
CVE-1999-0680 Medium 1999-08-09 Not applicable No public exploit Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.
CVE-1999-0391 High 1999-01-05 Not applicable No public exploit The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
CVE-1999-1257 High 1997-11-26 Not applicable No public exploit Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering (1) a CTRL-Z character, or (2) a ? (question mark).
‹ prev page 3 of 3 next ›