WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published to 2000-01-31✕
Overview 1,675 matches · 3 in Waratek scope · 0 protected · 6 exploited · 0 CISA KEV · 466 public PoC · 18 EPSS ≥ 0.5
1,675matches 3in Waratek scope0.2% 0protected0.0% 6exploited0.4% 0CISA KEV0.0% 466public PoC27.8% 18EPSS ≥ 0.51.1%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 0.2% Outside Waratek scope 1 0.1% Not applicable 1,637 97.7% Withdrawn CVE 34 2.0%
Critical 7 0.4% High 859 51.3% Medium 601 35.9% Low 174 10.4% None 0 0.0% Unknown 34 2.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 1,675 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 6 0.4% Working exploit published 462 27.6% Proof of concept only 0 0.0% Forecast only 3 0.2% No public exploit 1,204 71.9%
split by peak 923 / year
Withdrawn CVE: 34Not applicable: 1,637Outside Waratek scope: 1No exploit published: 3 Unknown: 34Low: 174Medium: 601High: 859Critical: 7 not blocked: 1,675 No public exploit: 1,204Forecast only: 3Working exploit published: 462Exploited: 6
19882 Not applicable2 High2 not blocked2 Working exploit published1 No public exploit1 19893 Not applicable3 High2 Medium1 not blocked3 No public exploit3 199011 Not applicable11 High8 Medium2 Low1 not blocked11 Working exploit published1 No public exploit10 199115 Not applicable15 High11 Medium4 not blocked15 Working exploit published2 No public exploit13 199214 Not applicable13 Withdrawn CVE1 High12 Low1 Unknown1 not blocked14 No public exploit14 199313 Not applicable13 High8 Medium3 Low2 not blocked13 No public exploit13 199426 Not applicable25 Withdrawn CVE1 High14 Medium10 Low1 Unknown1 not blocked26 Working exploit published6 No public exploit20 199525 Not applicable25 Critical1 High17 Medium6 Low1 not blocked25 Working exploit published5 No public exploit20 199675 No exploit published1 Not applicable73 Withdrawn CVE1 Critical1 High43 Medium21 Low9 Unknown1 not blocked75 Working exploit published18 Forecast only1 No public exploit56 1997253 Not applicable252 Withdrawn CVE1 Critical1 High143 Medium89 Low19 Unknown1 not blocked253 Exploited2 Working exploit published73 Forecast only2 No public exploit176 1998247 Not applicable246 Withdrawn CVE1 Critical1 High137 Medium85 Low23 Unknown1 not blocked247 Exploited1 Working exploit published50 No public exploit196 1999923 No exploit published2 Outside Waratek scope1 Not applicable891 Withdrawn CVE29 Critical3 High423 Medium357 Low111 Unknown29 not blocked923 Exploited2 Working exploit published282 No public exploit639 200068 Not applicable68 High39 Medium23 Low6 not blocked68 Exploited1 Working exploit published24 No public exploit43
1988199019921994199619982000
1,675 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 17 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2000-0024 Medium 1999-12-21 Not applicable No public exploit IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.
CVE-2000-0023 Medium 1999-12-21 Not applicable No public exploit Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.
CVE-2000-0022 Medium 1999-12-21 Not applicable No public exploit Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.
CVE-2000-0017 High 1999-12-21 Not applicable Working exploit published Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.
CVE-1999-1497 High 1999-12-21 Not applicable Working exploit published Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
CVE-2000-0020 Medium 1999-12-20 Not applicable No public exploit DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.
CVE-1999-0997 High 1999-12-20 Not applicable Working exploit published wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
CVE-1999-1006 Medium 1999-12-19 Not applicable No public exploit Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.
CVE-1999-1005 Medium 1999-12-19 Not applicable Working exploit published Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
CVE-1999-1004 Medium 1999-12-16 Not applicable No public exploit Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.
CVE-1999-1001 Low 1999-12-16 Not applicable No public exploit Cisco Cache Engine allows a remote attacker to gain access via a null username and password.
CVE-1999-1000 Medium 1999-12-16 Not applicable No public exploit The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.
CVE-1999-0998 Medium 1999-12-16 Not applicable No public exploit Cisco Cache Engine allows an attacker to replace content in the cache.
CVE-1999-0995 High 1999-12-16 Not applicable No public exploit Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."
CVE-1999-0994 Medium 1999-12-16 Not applicable No public exploit Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.
CVE-1999-0996 High 1999-12-15 Not applicable Working exploit published Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.
CVE-1999-0935 High 1999-12-15 Not applicable Working exploit published classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.
CVE-1999-0934 Medium 1999-12-15 Not applicable Working exploit published classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.
CVE-2000-0361 Low 1999-12-14 Not applicable No public exploit The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.
CVE-2000-0068 High 1999-12-14 Not applicable No public exploit daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail.
CVE-1999-1010 Low 1999-12-14 Not applicable No public exploit An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
CVE-1999-1007 High 1999-12-13 Not applicable Working exploit published Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file.
CVE-1999-1003 Medium 1999-12-13 Not applicable No public exploit War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.
CVE-1999-0993 High 1999-12-13 Not applicable No public exploit Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.
CVE-1999-1009 Low 1999-12-12 Not applicable No public exploit The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.
CVE-1999-0289 Medium 1999-12-12 Not applicable No public exploit The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
CVE-1999-0977 High 1999-12-10 Not applicable Working exploit published Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
CVE-1999-0975 Medium 1999-12-10 Not applicable Working exploit published The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
CVE-1999-0978 High 1999-12-09 Not applicable No public exploit htdig allows remote attackers to execute commands via filenames with shell metacharacters.
CVE-1999-0974 High 1999-12-09 Not applicable No public exploit Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.
CVE-1999-0972 High 1999-12-09 Not applicable Working exploit published Buffer overflow in Xshipwars xsw program.
CVE-1999-0986 Medium 1999-12-08 Not applicable Working exploit published The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.
CVE-1999-0981 Medium 1999-12-08 Not applicable Working exploit published Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."
CVE-1999-0976 Low 1999-12-07 Not applicable No public exploit Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail.
CVE-1999-0973 High 1999-12-07 Not applicable Working exploit published Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.
CVE-1999-0991 Medium 1999-12-06 Not applicable Working exploit published Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.
CVE-1999-0989 High 1999-12-06 Not applicable Working exploit published Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol.
CVE-1999-0990 Low 1999-12-05 Not applicable No public exploit Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system.
CVE-1999-0982 High 1999-12-05 Not applicable No public exploit The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file.
CVE-1999-0988 High 1999-12-04 Not applicable Working exploit published UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
CVE-2000-0358 Medium 1999-12-03 Not applicable No public exploit ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
CVE-2000-0357 High 1999-12-03 Not applicable No public exploit ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.
CVE-2000-0139 Low 1999-12-03 Not applicable Working exploit published Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
CVE-1999-0866 High 1999-12-03 Not applicable Working exploit published Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
CVE-1999-0865 Medium 1999-12-03 Not applicable No public exploit Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.
CVE-1999-0864 High 1999-12-03 Not applicable Working exploit published UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
CVE-1999-0825 Low 1999-12-03 Not applicable Working exploit published The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
CVE-2000-0366 Low 1999-12-02 Not applicable No public exploit dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.
CVE-1999-0862 Low 1999-12-02 Not applicable No public exploit Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file.
CVE-1999-0858 Medium 1999-12-02 Not applicable No public exploit Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.
CVE-1999-0852 High 1999-12-02 No exploit published No public exploit IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.
CVE-1999-0850 Low 1999-12-02 Not applicable No public exploit The default permissions for Endymion MailMan allow local users to read email or modify files.
CVE-1999-0828 Low 1999-12-02 Not applicable Working exploit published UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
CVE-2000-0021 Medium 1999-12-01 Not applicable No public exploit Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.
CVE-2000-0004 Medium 1999-12-01 Not applicable No public exploit ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (dot) into the URL.
CVE-1999-0963 High 1999-12-01 Not applicable No public exploit FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.
CVE-1999-0860 Low 1999-12-01 Not applicable Working exploit published Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
CVE-1999-0859 Low 1999-12-01 Not applicable Working exploit published Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.
CVE-1999-0857 Low 1999-12-01 Not applicable Working exploit published FreeBSD gdc program allows local users to modify files via a symlink attack.
CVE-1999-0856 Medium 1999-12-01 Not applicable No public exploit login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
CVE-1999-0855 High 1999-12-01 Not applicable Working exploit published Buffer overflow in FreeBSD gdc program.
CVE-1999-0853 High 1999-12-01 Not applicable No public exploit Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
CVE-1999-0846 Medium 1999-12-01 Not applicable No public exploit Denial of service in MDaemon 2.7 via a large number of connection attempts.
CVE-1999-0838 Medium 1999-12-01 Not applicable Working exploit published Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
CVE-1999-0834 High 1999-12-01 Not applicable Working exploit published Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library.
CVE-1999-0826 Medium 1999-12-01 Not applicable Working exploit published Buffer overflow in FreeBSD angband allows local users to gain privileges.
CVE-1999-0823 Medium 1999-12-01 Not applicable Working exploit published Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.
CVE-1999-0820 Medium 1999-12-01 Not applicable Working exploit published FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.
CVE-1999-0819 Medium 1999-12-01 Not applicable Working exploit published NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
CVE-1999-0841 High 1999-11-30 Not applicable Working exploit published Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.
CVE-1999-0840 High 1999-11-30 Not applicable No public exploit Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.
CVE-1999-0824 Medium 1999-11-30 Not applicable No public exploit A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users.
CVE-1999-0822 High 1999-11-30 Not applicable Working exploit published Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.
CVE-1999-0847 Medium 1999-11-29 Not applicable No public exploit Buffer overflow in free internet chess server (FICS) program, xboard.
CVE-1999-0842 Medium 1999-11-29 Not applicable Working exploit published Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.
CVE-1999-0839 High 1999-11-29 Not applicable No public exploit Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled.
CVE-1999-0387 High 1999-11-29 Not applicable No public exploit A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
CVE-1999-1547 High 1999-11-25 Not applicable No public exploit Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.
CVE-1999-0845 High 1999-11-25 Not applicable Working exploit published Buffer overflow in SCO su program allows local users to gain root access via a long username.
CVE-1999-0317 High 1999-11-25 Not applicable No public exploit Buffer overflow in Linux su command gives root access to local users.
CVE-1999-1548 Medium 1999-11-24 Not applicable No public exploit Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit.
CVE-1999-1189 High 1999-11-24 Not applicable No public exploit Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file.
CVE-1999-1163 High 1999-11-24 Not applicable No public exploit Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Teststation.
CVE-1999-0844 Medium 1999-11-24 Not applicable Working exploit published Denial of service in MDaemon WorldClient and WebConfig services via a long URL.
CVE-2000-0531 Low 1999-11-23 Not applicable Working exploit published Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.
CVE-1999-1527 High 1999-11-23 Not applicable No public exploit Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server.
CVE-1999-1058 High 1999-11-22 Not applicable Exploited Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands.
CVE-1999-0818 High 1999-11-20 Not applicable Working exploit published Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.
CVE-1999-1475 Medium 1999-11-19 Not applicable No public exploit ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.
CVE-1999-0999 Medium 1999-11-19 Not applicable Working exploit published Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
CVE-1999-0831 Medium 1999-11-19 Not applicable No public exploit Denial of service in Linux syslogd via a large number of connections.
CVE-2000-0352 High 1999-11-18 Not applicable No public exploit Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.
CVE-1999-0987 High 1999-11-18 Not applicable No public exploit Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name.
CVE-2000-0073 Medium 1999-11-17 Not applicable Working exploit published Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word.
CVE-1999-1519 Medium 1999-11-17 Not applicable Working exploit published Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.
CVE-1999-1092 Medium 1999-11-17 Not applicable No public exploit tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.
CVE-1999-0793 Low 1999-11-17 Not applicable Working exploit published Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.
CVE-1999-1549 High 1999-11-16 Not applicable No public exploit Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.
CVE-1999-1508 High 1999-11-16 Not applicable Working exploit published Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html.
CVE-1999-1457 High 1999-11-16 Not applicable No public exploit Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.
‹ prev page 3 of 17 next ›