Overview 4,306 matches · 28 in Waratek scope · 1 protected · 24 exploited · 0 CISA KEV · 1,363 public PoC · 66 EPSS ≥ 0.5
4,306matches
28in Waratek scope0.7%
1protected0.0%
24exploited0.6%
0CISA KEV0.0%
1,363public PoC31.7%
66EPSS ≥ 0.51.5%
Protected by Waratek
1
0.0%
Rule in development
0
0.0%
Mitigation candidate
8
0.2%
No exploit published
19
0.4%
Outside Waratek scope
17
0.4%
Not applicable
4,223
98.1%
Withdrawn CVE
38
0.9%
blocked by ARMR today
1
0.0%
partly blocked
0
0.0%
not blocked
4,305
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
24
0.6%
Working exploit published
1,345
31.2%
Proof of concept only
0
0.0%
Forecast only
6
0.1%
No public exploit
2,931
68.1%
split by
peak 1,679 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19893
Not applicable3
High2
Medium1
not blocked3
No public exploit3
199011
Not applicable11
High8
Medium2
Low1
not blocked11
Working exploit published1
No public exploit10
199115
Not applicable15
High11
Medium4
not blocked15
Working exploit published2
No public exploit13
199214
Not applicable13
Withdrawn CVE1
High12
Low1
Unknown1
not blocked14
No public exploit14
199313
Not applicable13
High8
Medium3
Low2
not blocked13
No public exploit13
199426
Not applicable25
Withdrawn CVE1
High14
Medium10
Low1
Unknown1
not blocked26
Working exploit published6
No public exploit20
199525
Not applicable25
Critical1
High17
Medium6
Low1
not blocked25
Working exploit published5
No public exploit20
199675
No exploit published1
Not applicable73
Withdrawn CVE1
Critical1
High43
Medium21
Low9
Unknown1
not blocked75
Working exploit published18
Forecast only1
No public exploit56
1997253
Not applicable252
Withdrawn CVE1
Critical1
High143
Medium89
Low19
Unknown1
not blocked253
Exploited2
Working exploit published73
Forecast only2
No public exploit176
1998247
Not applicable246
Withdrawn CVE1
Critical1
High137
Medium85
Low23
Unknown1
not blocked247
Exploited1
Working exploit published50
No public exploit196
1999923
No exploit published2
Outside Waratek scope1
Not applicable891
Withdrawn CVE29
Critical3
High423
Medium357
Low111
Unknown29
not blocked923
Exploited2
Working exploit published282
No public exploit639
20001,020
Mitigation candidate6
No exploit published6
Outside Waratek scope2
Not applicable1,005
Withdrawn CVE1
Critical2
High454
Medium467
Low96
Unknown1
not blocked1,020
Exploited5
Working exploit published427
Forecast only1
No public exploit587
20011,679
Protected by Waratek1
Mitigation candidate2
No exploit published10
Outside Waratek scope14
Not applicable1,649
Withdrawn CVE3
Critical12
High776
Medium706
Low182
Unknown3
blocked by ARMR today1
not blocked1,678
Exploited14
Working exploit published480
Forecast only2
No public exploit1,183
1989199119931995199719992001
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2001-0846 | High | 2001-12-06 | Not applicable | No public exploit | Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf). |
| CVE-2001-0845 | Medium | 2001-12-06 | Not applicable | No public exploit | Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain access to unauthorized resources. |
| CVE-2001-0844 | High | 2001-12-06 | Not applicable | No public exploit | Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter. |
| CVE-2001-0843 | Medium | 2001-12-06 | Not applicable | No public exploit | Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request. |
| CVE-2001-0842 | High | 2001-12-06 | Not applicable | No public exploit | Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie. |
| CVE-2001-0841 | High | 2001-12-06 | Not applicable | No public exploit | Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie. |
| CVE-2001-0840 | High | 2001-12-06 | Not applicable | No public exploit | Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1) SNMP and (2) DMI. |
| CVE-2001-0839 | High | 2001-12-06 | Not applicable | Working exploit published | ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing. |
| CVE-2001-0838 | High | 2001-12-06 | Not applicable | Working exploit published | Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command. |
| CVE-2001-0837 | Low | 2001-12-06 | Not applicable | No public exploit | DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to read the information in (1) temp.html, (2) the log folder, and (3) the PhoneBook folder. |
| CVE-2001-0836 | High | 2001-12-06 | Not applicable | Working exploit published | Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request. |
| CVE-2001-0835 | High | 2001-12-06 | Not applicable | No public exploit | Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup. |
| CVE-2001-0834 | Medium | 2001-12-06 | Not applicable | No public exploit | htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file. |
| CVE-2001-0833 | High | 2001-12-06 | Outside Waratek scope | Working exploit published | Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the "Oracle Trace Collection Security Vulnerability." |
| CVE-2001-0832 | Low | 2001-12-06 | Outside Waratek scope | No public exploit | Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability." |
| CVE-2001-0831 | Medium | 2001-12-06 | Outside Waratek scope | No public exploit | Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Predicate is being used, allows local users to gain additional access. |
| CVE-2001-0830 | High | 2001-12-06 | Not applicable | Working exploit published | 6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers to cause a denial of service (resource exhaustion) by repeatedly connecting to and disconnecting from the server. |
| CVE-2001-0829 | Medium | 2001-12-06 | Outside Waratek scope | No public exploit | A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message. |
| CVE-2001-0828 | Medium | 2001-12-06 | Not applicable | No public exploit | A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, which causes an error message that does not properly quote the Javascript. |
| CVE-2001-0827 | High | 2001-12-06 | Not applicable | No public exploit | Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of "PASV" requests. |
| CVE-2001-0826 | High | 2001-12-06 | Not applicable | No public exploit | Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS, (4) PORT, (5) DELE, (6) REST, (7) RMD, or (8) MKD. |
| CVE-2001-0825 | High | 2001-12-06 | Not applicable | No public exploit | Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check. |
| CVE-2001-0824 | High | 2001-12-06 | No exploit published | No public exploit | Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page. |
| CVE-2001-0823 | High | 2001-12-06 | Not applicable | Working exploit published | The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR). |
| CVE-2001-0822 | Medium | 2001-12-06 | Not applicable | No public exploit | FPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets. |
| CVE-2001-0821 | Medium | 2001-12-06 | Not applicable | Working exploit published | The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt. |
| CVE-2001-0820 | High | 2001-12-06 | Not applicable | Working exploit published | Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, or (2) serveconnection in protocol.c. |
| CVE-2001-0819 | High | 2001-12-06 | Not applicable | No public exploit | A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header. |
| CVE-2001-0818 | High | 2001-12-06 | Not applicable | Working exploit published | A buffer overflow the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending the command a large amount of data. |
| CVE-2001-0817 | High | 2001-12-06 | Not applicable | No public exploit | Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print request. |
| CVE-2001-0816 | High | 2001-12-06 | Not applicable | No public exploit | OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorized_keys2 command= restrictions using sftp commands. |
| CVE-2001-0815 | High | 2001-12-06 | Not applicable | Working exploit published | Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension. |
| CVE-2001-0809 | Low | 2001-12-06 | Not applicable | No public exploit | Vulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users to overwrite arbitrary files by modifying certain resources. |
| CVE-2001-0808 | High | 2001-12-06 | Not applicable | No public exploit | gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter. |
| CVE-2001-0807 | Low | 2001-12-06 | Not applicable | No public exploit | Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text files from a client's hard drive via a SCRIPT tag with a SRC value that points to the text file. |
| CVE-2001-0806 | Low | 2001-12-06 | Not applicable | No public exploit | Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages. |
| CVE-2001-0805 | Medium | 2001-12-06 | Not applicable | Working exploit published | Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the pg parameter. |
| CVE-2001-0804 | Medium | 2001-12-06 | Not applicable | Working exploit published | Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. (dot dot) attack on the "next" parameter. |
| CVE-2001-0803 | High | 2001-12-06 | Not applicable | Working exploit published | Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands. |
| CVE-2001-0801 | High | 2001-12-06 | Not applicable | No public exploit | lpstat in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library. |
| CVE-2001-0800 | High | 2001-12-06 | Not applicable | Working exploit published | lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2001-0799 | High | 2001-12-06 | Not applicable | No public exploit | Buffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute arbitrary commands via a long argument. |
| CVE-2001-0796 | Medium | 2001-12-06 | Not applicable | No public exploit | SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a malformed IGMP multicast packet with a small response delay. |
| CVE-2001-0726 | High | 2001-12-06 | Not applicable | No public exploit | Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message. |
| CVE-2001-0722 | Medium | 2001-12-06 | Not applicable | Working exploit published | Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling Vulnerability." |
| CVE-2001-0721 | Medium | 2001-12-06 | Not applicable | No public exploit | Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or crash) via a malformed UPnP request. |
| CVE-2001-0720 | High | 2001-12-06 | Not applicable | No public exploit | Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled. |
| CVE-2001-0719 | High | 2001-12-06 | Not applicable | No public exploit | Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file. |
| CVE-2001-0716 | Medium | 2001-12-06 | Not applicable | No public exploit | Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service (crash) via a large number of incomplete connections to the server. |
| CVE-2001-0671 | High | 2001-12-06 | Not applicable | No public exploit | Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges. |
| CVE-2001-0663 | Medium | 2001-12-06 | Not applicable | Working exploit published | Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets. |
| CVE-2001-0950 | High | 2001-12-04 | Not applicable | No public exploit | ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool is low, which could make it easier for local or remote attackers to steal tokens or certificates via brute force guessing. |
| CVE-2001-0949 | High | 2001-12-04 | Not applicable | No public exploit | Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length. |
| CVE-2001-0948 | High | 2001-12-04 | Not applicable | No public exploit | Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed. |
| CVE-2001-0947 | High | 2001-12-04 | Not applicable | No public exploit | Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path. |
| CVE-2001-0946 | Low | 2001-12-04 | Not applicable | No public exploit | apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins. |
| CVE-2001-0945 | Medium | 2001-12-03 | Not applicable | No public exploit | Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line. |
| CVE-2001-0944 | High | 2001-12-02 | Not applicable | No public exploit | DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process. |
| CVE-2001-1437 | High | 2001-12-01 | Not applicable | No public exploit | easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request with a non-integer news message id field, which leaks the path in a PHP error message when the script times out. |
| CVE-2001-0941 | Medium | 2001-11-30 | Outside Waratek scope | Working exploit published | Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable. |
| CVE-2001-0939 | Medium | 2001-11-30 | Not applicable | No public exploit | Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443. |
| CVE-2001-0938 | Medium | 2001-11-30 | Not applicable | No public exploit | Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp. |
| CVE-2001-0937 | High | 2001-11-30 | Not applicable | No public exploit | PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters. |
| CVE-2001-0936 | High | 2001-11-30 | Not applicable | No public exploit | Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request. |
| CVE-2001-0912 | High | 2001-11-30 | Not applicable | No public exploit | Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges. |
| CVE-2001-0896 | Medium | 2001-11-30 | Not applicable | No public exploit | Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO. |
| CVE-2001-0550 | High | 2001-11-30 | Not applicable | Exploited | wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob). |
| CVE-2001-0942 | Medium | 2001-11-29 | Outside Waratek scope | No public exploit | dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLE_HOME to an alternate directory that contains a malicious version of dbsnmp. |
| CVE-2001-1449 | High | 2001-11-28 | Not applicable | No public exploit | The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories. |
| CVE-2001-0935 | High | 2001-11-28 | Not applicable | No public exploit | Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550. |
| CVE-2001-0934 | High | 2001-11-28 | Not applicable | No public exploit | Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname. |
| CVE-2001-0933 | High | 2001-11-28 | Not applicable | No public exploit | Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:". |
| CVE-2001-0932 | High | 2001-11-28 | Not applicable | Working exploit published | Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command. |
| CVE-2001-0931 | High | 2001-11-28 | Not applicable | No public exploit | Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET. |
| CVE-2001-0930 | High | 2001-11-28 | Not applicable | No public exploit | Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters. |
| CVE-2001-0929 | High | 2001-11-28 | Not applicable | No public exploit | Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists. |
| CVE-2001-0928 | High | 2001-11-28 | Not applicable | No public exploit | Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authentication data. |
| CVE-2001-0926 | Medium | 2001-11-28 | Not applicable | No public exploit | SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an #include statement. |
| CVE-2001-0868 | Medium | 2001-11-28 | Not applicable | No public exploit | Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stronghold-info or (2) stronghold-status. |
| CVE-1999-1514 | High | 2001-11-28 | Not applicable | No public exploit | Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command. |
| CVE-1999-1024 | High | 2001-11-28 | Not applicable | Working exploit published | ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet. |
| CVE-2001-0927 | High | 2001-11-27 | Not applicable | No public exploit | Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format specifiers that are passed into the (1) syslog_message and (2) syslog_io_message functions. |
| CVE-2001-0922 | High | 2001-11-26 | Not applicable | No public exploit | ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in. |
| CVE-2001-0920 | Medium | 2001-11-26 | Not applicable | No public exploit | Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrary code via a process name containing a format string. |
| CVE-2001-0919 | Medium | 2001-11-26 | Not applicable | No public exploit | Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user when a cookie is set using Javascript. |
| CVE-2001-0875 | High | 2001-11-26 | Not applicable | Working exploit published | Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download. |
| CVE-2001-1350 | High | 2001-11-25 | Not applicable | No public exploit | Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter. |
| CVE-2001-0924 | Medium | 2001-11-22 | Not applicable | Working exploit published | Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter. |
| CVE-2001-0918 | Medium | 2001-11-22 | Not applicable | No public exploit | Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute arbitrary commands by not opening files securely. |
| CVE-2001-0917 | Medium | 2001-11-22 | No exploit published | No public exploit | Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension. |
| CVE-2001-0913 | High | 2001-11-22 | Not applicable | No public exploit | Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request that contains format specifiers. |
| CVE-2001-0921 | Low | 2001-11-21 | Not applicable | No public exploit | Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been typed, which is printed in cleartext. |
| CVE-2001-0916 | High | 2001-11-21 | Not applicable | Working exploit published | Buffer overflow in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via a long check argument of a shell definition. |
| CVE-2001-0915 | High | 2001-11-21 | Not applicable | Working exploit published | Format string vulnerability in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via format specifiers in the check argument of a shell definition. |
| CVE-2001-0914 | Low | 2001-11-21 | Not applicable | No public exploit | Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core vmlinux kernel, possibly related to poor error checking during ELF loading. |
| CVE-2001-0911 | High | 2001-11-21 | Not applicable | No public exploit | PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it. |
| CVE-2001-0910 | High | 2001-11-21 | Not applicable | No public exploit | Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP address and connecting to Networker from an IP address whose hostname can not be determined by a DNS reverse lookup. |
| CVE-2001-0909 | High | 2001-11-21 | Not applicable | Working exploit published | Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long hcp: URL. |
| CVE-2001-0908 | High | 2001-11-21 | Not applicable | No public exploit | CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation (NAT). |
| CVE-2001-0904 | Medium | 2001-11-20 | Not applicable | No public exploit | Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more easily identify and exploit vulnerable clients. |