WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published to 2000-06-30✕
Overview 2,126 matches · 6 in Waratek scope · 0 protected · 8 exploited · 0 CISA KEV · 676 public PoC · 25 EPSS ≥ 0.5
2,126matches 6in Waratek scope0.3% 0protected0.0% 8exploited0.4% 0CISA KEV0.0% 676public PoC31.8% 25EPSS ≥ 0.51.2%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 0.0% No exploit published 5 0.2% Outside Waratek scope 1 0.0% Not applicable 2,085 98.1% Withdrawn CVE 34 1.6%
Critical 8 0.4% High 1,048 49.3% Medium 807 38.0% Low 229 10.8% None 0 0.0% Unknown 34 1.6%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 2,126 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 8 0.4% Working exploit published 670 31.5% Proof of concept only 0 0.0% Forecast only 3 0.1% No public exploit 1,445 68.0%
split by peak 923 / year
Withdrawn CVE: 34Not applicable: 2,085Outside Waratek scope: 1No exploit published: 5Mitigation candidate: 1 Unknown: 34Low: 229Medium: 807High: 1,048Critical: 8 not blocked: 2,126 No public exploit: 1,445Forecast only: 3Working exploit published: 670Exploited: 8
19882 Not applicable2 High2 not blocked2 Working exploit published1 No public exploit1 19893 Not applicable3 High2 Medium1 not blocked3 No public exploit3 199011 Not applicable11 High8 Medium2 Low1 not blocked11 Working exploit published1 No public exploit10 199115 Not applicable15 High11 Medium4 not blocked15 Working exploit published2 No public exploit13 199214 Not applicable13 Withdrawn CVE1 High12 Low1 Unknown1 not blocked14 No public exploit14 199313 Not applicable13 High8 Medium3 Low2 not blocked13 No public exploit13 199426 Not applicable25 Withdrawn CVE1 High14 Medium10 Low1 Unknown1 not blocked26 Working exploit published6 No public exploit20 199525 Not applicable25 Critical1 High17 Medium6 Low1 not blocked25 Working exploit published5 No public exploit20 199675 No exploit published1 Not applicable73 Withdrawn CVE1 Critical1 High43 Medium21 Low9 Unknown1 not blocked75 Working exploit published18 Forecast only1 No public exploit56 1997253 Not applicable252 Withdrawn CVE1 Critical1 High143 Medium89 Low19 Unknown1 not blocked253 Exploited2 Working exploit published73 Forecast only2 No public exploit176 1998247 Not applicable246 Withdrawn CVE1 Critical1 High137 Medium85 Low23 Unknown1 not blocked247 Exploited1 Working exploit published50 No public exploit196 1999923 No exploit published2 Outside Waratek scope1 Not applicable891 Withdrawn CVE29 Critical3 High423 Medium357 Low111 Unknown29 not blocked923 Exploited2 Working exploit published282 No public exploit639 2000519 Mitigation candidate1 No exploit published2 Not applicable516 Critical1 High228 Medium229 Low61 not blocked519 Exploited3 Working exploit published232 No public exploit284
1988199019921994199619982000
2,126 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 22 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2000-0423 Medium 2000-05-05 Not applicable Working exploit published Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.
CVE-2000-0381 Medium 2000-05-05 Not applicable Working exploit published The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter.
CVE-2000-0428 High 2000-05-04 Not applicable No public exploit Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment.
CVE-2000-0427 Medium 2000-05-04 Not applicable Working exploit published The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM.
CVE-2000-0422 High 2000-05-04 Not applicable No public exploit Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter.
CVE-2000-0414 Medium 2000-05-04 Not applicable No public exploit Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.
CVE-2000-0430 Medium 2000-05-03 Not applicable Working exploit published Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.
CVE-2000-0425 High 2000-05-03 Not applicable Working exploit published Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands.
CVE-2000-0378 High 2000-05-03 Not applicable Working exploit published The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
CVE-2000-0345 Low 2000-05-03 Not applicable No public exploit The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command.
CVE-2000-0335 High 2000-05-03 Not applicable No public exploit The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
CVE-2000-0332 Medium 2000-05-03 Not applicable Working exploit published UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte.
CVE-2000-0303 Medium 2000-05-03 Not applicable No public exploit Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
CVE-2000-0433 Medium 2000-05-02 Not applicable No public exploit The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles.
CVE-2000-0386 High 2000-05-02 Not applicable No public exploit FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.
CVE-2000-0385 Medium 2000-05-02 Not applicable No public exploit FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities.
CVE-2000-0347 Medium 2000-05-02 Not applicable Working exploit published Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
CVE-2000-0346 Medium 2000-05-02 Not applicable No public exploit AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server.
CVE-2000-0343 High 2000-05-02 Not applicable Working exploit published Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header.
CVE-2000-0293 Low 2000-05-02 Not applicable Working exploit published aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory.
CVE-2000-0138 Medium 2000-05-02 Not applicable No public exploit A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft.
CVE-2000-0449 High 2000-05-01 Not applicable Working exploit published Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.
CVE-2000-0448 Medium 2000-05-01 Not applicable No public exploit The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GET_CONFIG command.
CVE-2000-0447 High 2000-05-01 Not applicable No public exploit Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service.
CVE-2000-0440 Medium 2000-05-01 Not applicable Working exploit published NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option.
CVE-2000-0401 High 2000-05-01 Not applicable No public exploit Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.
CVE-2000-0344 Medium 2000-05-01 Not applicable No public exploit The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.
CVE-2000-0341 Medium 2000-05-01 Not applicable Working exploit published ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
CVE-1999-0427 High 2000-05-01 Not applicable No public exploit Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.
CVE-2000-0340 High 2000-04-29 Not applicable Working exploit published Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.
CVE-2000-0342 High 2000-04-28 Not applicable Working exploit published Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."
CVE-2000-0429 High 2000-04-27 Not applicable Working exploit published A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.
CVE-1999-0706 High 2000-04-27 Not applicable No public exploit Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
CVE-2000-0380 High 2000-04-26 Not applicable Working exploit published The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
CVE-2000-0249 High 2000-04-26 Not applicable No public exploit The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.
CVE-2000-0326 Medium 2000-04-25 Not applicable No public exploit Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.
CVE-2000-0324 Medium 2000-04-25 Not applicable Working exploit published pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
CVE-2000-0339 High 2000-04-24 Not applicable Working exploit published ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.
CVE-2000-0337 High 2000-04-24 Not applicable Working exploit published Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
CVE-2000-0334 Low 2000-04-24 Not applicable No public exploit The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.
CVE-2000-0322 High 2000-04-24 Not applicable Exploited The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
CVE-2000-0321 Medium 2000-04-24 Not applicable No public exploit Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.
CVE-2000-0317 High 2000-04-24 Not applicable Working exploit published Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
CVE-2000-0316 High 2000-04-24 Not applicable Working exploit published Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
CVE-2000-0248 High 2000-04-24 Not applicable Exploited The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
CVE-2000-0338 Medium 2000-04-23 Not applicable Working exploit published Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.
CVE-2000-0319 Medium 2000-04-23 Not applicable No public exploit mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.
CVE-2000-0459 Medium 2000-04-22 Not applicable No public exploit IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request.
CVE-2000-0458 Low 2000-04-22 Not applicable No public exploit The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information.
CVE-2000-0336 Low 2000-04-21 Not applicable Working exploit published Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
CVE-2000-0320 Medium 2000-04-21 Not applicable No public exploit Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
CVE-2000-0318 High 2000-04-21 Not applicable No public exploit Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
CVE-2000-0295 High 2000-04-21 Not applicable Working exploit published Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.
CVE-2000-0331 Medium 2000-04-20 Not applicable No public exploit Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
CVE-2000-0311 Low 2000-04-20 Not applicable No public exploit The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability.
CVE-2000-0272 High 2000-04-20 Not applicable Working exploit published RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.
CVE-2000-0268 Medium 2000-04-20 Not applicable No public exploit Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot.
CVE-2000-0267 Medium 2000-04-20 Not applicable No public exploit Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.
CVE-2000-0292 Medium 2000-04-19 Not applicable No public exploit The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to crash.
CVE-2000-0257 High 2000-04-19 Not applicable Working exploit published Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL.
CVE-2000-0256 High 2000-04-19 Not applicable Working exploit published Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability.
CVE-2000-0271 Medium 2000-04-18 Not applicable No public exploit read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords.
CVE-2000-0270 Low 2000-04-18 Not applicable No public exploit The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack.
CVE-2000-0269 Low 2000-04-18 Not applicable No public exploit Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess.
CVE-2000-0266 Low 2000-04-18 Not applicable No public exploit Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL.
CVE-2000-0083 Medium 2000-04-18 Not applicable No public exploit HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges.
CVE-2000-0265 Medium 2000-04-17 Not applicable No public exploit Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.
CVE-2000-0264 Low 2000-04-17 Not applicable Working exploit published Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods.
CVE-2000-0291 Medium 2000-04-16 Not applicable No public exploit Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.
CVE-2000-0286 Low 2000-04-16 Not applicable Working exploit published X fontserver xfs allows local users to cause a denial of service via malformed input to the server.
CVE-2000-0285 High 2000-04-16 Not applicable No public exploit Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.
CVE-2000-0284 High 2000-04-16 Not applicable Working exploit published Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.
CVE-2000-0263 Low 2000-04-16 Not applicable Working exploit published The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.
CVE-2000-1218 Critical 2000-04-14 Not applicable No public exploit The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.
CVE-2000-0260 High 2000-04-14 Not applicable Working exploit published Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability.
CVE-2000-0254 Medium 2000-04-14 Not applicable Working exploit published The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.
CVE-2000-0250 High 2000-04-14 Not applicable Working exploit published The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.
CVE-2000-0288 Medium 2000-04-12 Not applicable No public exploit Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable.
CVE-2000-0287 High 2000-04-12 Not applicable Working exploit published The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter.
CVE-2000-0283 Medium 2000-04-12 Not applicable No public exploit The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.
CVE-2000-0282 Medium 2000-04-12 Not applicable Working exploit published TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.
CVE-2000-0262 Medium 2000-04-12 Not applicable Working exploit published The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.
CVE-2000-0261 Medium 2000-04-12 Not applicable No public exploit The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0259 High 2000-04-12 Not applicable No public exploit The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users.
CVE-2000-0258 High 2000-04-12 Not applicable No public exploit IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability.
CVE-2000-0253 High 2000-04-11 Not applicable No public exploit The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.
CVE-2000-0252 Medium 2000-04-11 Not applicable No public exploit The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
CVE-1999-0979 High 2000-04-11 Not applicable Working exploit published The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.
CVE-1999-0701 High 2000-04-11 Not applicable No public exploit After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password.
CVE-1999-0699 High 2000-04-11 Not applicable No public exploit The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
CVE-1999-0695 Medium 2000-04-11 Not applicable No public exploit The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.
CVE-2000-0294 High 2000-04-10 Not applicable No public exploit Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.
CVE-2000-0276 Low 2000-04-10 Not applicable Working exploit published BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.
CVE-2000-0275 Low 2000-04-10 Not applicable Working exploit published CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.
CVE-2000-0274 Low 2000-04-10 Not applicable Working exploit published The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.
CVE-2000-0273 Medium 2000-04-09 Not applicable No public exploit PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt.
CVE-2000-0298 High 2000-04-07 Not applicable No public exploit The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories.
CVE-2000-0279 Medium 2000-04-07 Not applicable Working exploit published BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers.
CVE-2000-0301 Medium 2000-04-06 Not applicable No public exploit Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.
CVE-2000-0300 High 2000-04-06 Not applicable Working exploit published The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.
‹ prev page 3 of 22 next ›