Overview 631 matches · 0 in Waratek scope · 0 protected · 6 exploited · 0 CISA KEV · 22 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
0.2%
Not applicable
628
99.5%
Withdrawn CVE
2
0.3%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
631
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
6
1.0%
Working exploit published
625
99.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 283 / year
19881
Not applicable1
High1
not blocked1
Working exploit published1
19890
19901
Not applicable1
Medium1
not blocked1
Working exploit published1
19912
Not applicable2
High2
not blocked2
Working exploit published2
19920
19930
19946
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published6
19955
Not applicable5
Critical1
High2
Medium2
not blocked5
Working exploit published5
199618
Not applicable17
Withdrawn CVE1
High12
Medium5
Unknown1
not blocked18
Working exploit published18
199775
Not applicable75
High53
Medium18
Low4
not blocked75
Exploited2
Working exploit published73
199851
Not applicable51
Critical1
High34
Medium11
Low5
not blocked51
Exploited1
Working exploit published50
1999283
Outside Waratek scope1
Not applicable281
Withdrawn CVE1
Critical2
High133
Medium119
Low28
Unknown1
not blocked283
Exploited1
Working exploit published282
2000189
Not applicable189
High89
Medium78
Low22
not blocked189
Exploited2
Working exploit published187
1988199019921994199619982000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0530 | High | 2000-05-31 | Not applicable | Working exploit published | The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files. |
| CVE-2000-0505 | Medium | 2000-05-31 | Not applicable | Working exploit published | The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters. |
| CVE-2000-0495 | Medium | 2000-05-30 | Not applicable | Working exploit published | Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability. |
| CVE-2000-0402 | Low | 2000-05-30 | Not applicable | Working exploit published | The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability. |
| CVE-2000-0454 | High | 2000-05-29 | Not applicable | Working exploit published | Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter. |
| CVE-2000-0460 | High | 2000-05-27 | Not applicable | Working exploit published | Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable. |
| CVE-2000-0491 | High | 2000-05-24 | Not applicable | Working exploit published | Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request. |
| CVE-2000-0446 | High | 2000-05-24 | Not applicable | Working exploit published | Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string. |
| CVE-2000-0444 | Medium | 2000-05-24 | Not applicable | Working exploit published | HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000. |
| CVE-2000-0443 | High | 2000-05-24 | Not applicable | Working exploit published | The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0442 | High | 2000-05-24 | Not applicable | Working exploit published | Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command. |
| CVE-2000-0396 | Medium | 2000-05-24 | Not applicable | Working exploit published | The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files. |
| CVE-2000-0418 | Medium | 2000-05-23 | Not applicable | Working exploit published | The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests. |
| CVE-2000-0438 | High | 2000-05-22 | Not applicable | Working exploit published | Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. |
| CVE-2000-0451 | Medium | 2000-05-19 | Not applicable | Working exploit published | The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets. |
| CVE-2000-0436 | Medium | 2000-05-19 | Not applicable | Working exploit published | MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0305 | High | 2000-05-19 | Not applicable | Working exploit published | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability. |
| CVE-2000-0463 | Medium | 2000-05-18 | Not applicable | Working exploit published | BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets. |
| CVE-2000-0453 | Medium | 2000-05-18 | Not applicable | Working exploit published | XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000. |
| CVE-2000-0452 | Medium | 2000-05-18 | Not applicable | Working exploit published | Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command. |
| CVE-2000-0437 | High | 2000-05-18 | Not applicable | Working exploit published | Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands. |
| CVE-2000-0394 | Medium | 2000-05-18 | Not applicable | Working exploit published | NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Middle signature. |
| CVE-2000-0465 | Medium | 2000-05-17 | Not applicable | Working exploit published | Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability. |
| CVE-2000-0417 | Medium | 2000-05-17 | Not applicable | Working exploit published | The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password. |
| CVE-2000-0350 | Medium | 2000-05-17 | Not applicable | Working exploit published | A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events. |
| CVE-1999-1008 | High | 2000-05-17 | Not applicable | Working exploit published | xsoldier program allows local users to gain root access via a long argument. |
| CVE-2000-0432 | High | 2000-05-16 | Not applicable | Working exploit published | The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0405 | High | 2000-05-16 | Not applicable | Working exploit published | Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet. |
| CVE-2000-0395 | Medium | 2000-05-16 | Not applicable | Working exploit published | Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request. |
| CVE-2000-0393 | High | 2000-05-16 | Not applicable | Working exploit published | The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute. |
| CVE-2000-0389 | High | 2000-05-16 | Not applicable | Working exploit published | Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges. |
| CVE-2000-0379 | Low | 2000-05-16 | Not applicable | Working exploit published | The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so. |
| CVE-1999-0980 | Medium | 2000-05-16 | Not applicable | Working exploit published | Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request. |
| CVE-2000-0424 | High | 2000-05-15 | Not applicable | Working exploit published | The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0397 | Medium | 2000-05-15 | Not applicable | Working exploit published | The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account. |
| CVE-2000-0400 | High | 2000-05-13 | Not applicable | Working exploit published | The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post. |
| CVE-2000-0407 | High | 2000-05-12 | Not applicable | Working exploit published | Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option. |
| CVE-2000-0457 | High | 2000-05-11 | Not applicable | Working exploit published | ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability. |
| CVE-2000-0408 | Medium | 2000-05-11 | Not applicable | Working exploit published | IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability. |
| CVE-2000-0411 | Medium | 2000-05-10 | Not applicable | Working exploit published | Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter. |
| CVE-2000-0409 | Low | 2000-05-10 | Not applicable | Working exploit published | Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate. |
| CVE-2000-0384 | High | 2000-05-08 | Not applicable | Working exploit published | NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access. |
| CVE-2000-0413 | Medium | 2000-05-06 | Not applicable | Working exploit published | The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path. |
| CVE-2000-0426 | Medium | 2000-05-05 | Not applicable | Working exploit published | UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself. |
| CVE-2000-0423 | Medium | 2000-05-05 | Not applicable | Working exploit published | Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag. |
| CVE-2000-0381 | Medium | 2000-05-05 | Not applicable | Working exploit published | The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter. |
| CVE-2000-0427 | Medium | 2000-05-04 | Not applicable | Working exploit published | The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM. |
| CVE-2000-0430 | Medium | 2000-05-03 | Not applicable | Working exploit published | Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request. |
| CVE-2000-0425 | High | 2000-05-03 | Not applicable | Working exploit published | Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands. |
| CVE-2000-0378 | High | 2000-05-03 | Not applicable | Working exploit published | The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in. |
| CVE-2000-0332 | Medium | 2000-05-03 | Not applicable | Working exploit published | UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte. |
| CVE-2000-0347 | Medium | 2000-05-02 | Not applicable | Working exploit published | Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name. |
| CVE-2000-0343 | High | 2000-05-02 | Not applicable | Working exploit published | Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header. |
| CVE-2000-0293 | Low | 2000-05-02 | Not applicable | Working exploit published | aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory. |
| CVE-2000-0449 | High | 2000-05-01 | Not applicable | Working exploit published | Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields. |
| CVE-2000-0440 | Medium | 2000-05-01 | Not applicable | Working exploit published | NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. |
| CVE-2000-0341 | Medium | 2000-05-01 | Not applicable | Working exploit published | ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name. |
| CVE-2000-0340 | High | 2000-04-29 | Not applicable | Working exploit published | Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable. |
| CVE-2000-0342 | High | 2000-04-28 | Not applicable | Working exploit published | Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment." |
| CVE-2000-0429 | High | 2000-04-27 | Not applicable | Working exploit published | A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands. |
| CVE-2000-0380 | High | 2000-04-26 | Not applicable | Working exploit published | The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string. |
| CVE-2000-0324 | Medium | 2000-04-25 | Not applicable | Working exploit published | pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap. |
| CVE-2000-0339 | High | 2000-04-24 | Not applicable | Working exploit published | ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules. |
| CVE-2000-0337 | High | 2000-04-24 | Not applicable | Working exploit published | Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter. |
| CVE-2000-0322 | High | 2000-04-24 | Not applicable | Exploited | The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0317 | High | 2000-04-24 | Not applicable | Working exploit published | Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option. |
| CVE-2000-0316 | High | 2000-04-24 | Not applicable | Working exploit published | Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option. |
| CVE-2000-0248 | High | 2000-04-24 | Not applicable | Exploited | The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands. |
| CVE-2000-0338 | Medium | 2000-04-23 | Not applicable | Working exploit published | Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user. |
| CVE-2000-0336 | Low | 2000-04-21 | Not applicable | Working exploit published | Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. |
| CVE-2000-0295 | High | 2000-04-21 | Not applicable | Working exploit published | Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command. |
| CVE-2000-0272 | High | 2000-04-20 | Not applicable | Working exploit published | RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070. |
| CVE-2000-0257 | High | 2000-04-19 | Not applicable | Working exploit published | Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL. |
| CVE-2000-0256 | High | 2000-04-19 | Not applicable | Working exploit published | Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability. |
| CVE-2000-0264 | Low | 2000-04-17 | Not applicable | Working exploit published | Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods. |
| CVE-2000-0286 | Low | 2000-04-16 | Not applicable | Working exploit published | X fontserver xfs allows local users to cause a denial of service via malformed input to the server. |
| CVE-2000-0284 | High | 2000-04-16 | Not applicable | Working exploit published | Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands. |
| CVE-2000-0263 | Low | 2000-04-16 | Not applicable | Working exploit published | The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request. |
| CVE-2000-0260 | High | 2000-04-14 | Not applicable | Working exploit published | Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability. |
| CVE-2000-0254 | Medium | 2000-04-14 | Not applicable | Working exploit published | The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables. |
| CVE-2000-0250 | High | 2000-04-14 | Not applicable | Working exploit published | The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords. |
| CVE-2000-0287 | High | 2000-04-12 | Not applicable | Working exploit published | The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter. |
| CVE-2000-0282 | Medium | 2000-04-12 | Not applicable | Working exploit published | TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program. |
| CVE-2000-0262 | Medium | 2000-04-12 | Not applicable | Working exploit published | The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request. |
| CVE-1999-0979 | High | 2000-04-11 | Not applicable | Working exploit published | The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed. |
| CVE-2000-0276 | Low | 2000-04-10 | Not applicable | Working exploit published | BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37. |
| CVE-2000-0275 | Low | 2000-04-10 | Not applicable | Working exploit published | CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN. |
| CVE-2000-0274 | Low | 2000-04-10 | Not applicable | Working exploit published | The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name. |
| CVE-2000-0279 | Medium | 2000-04-07 | Not applicable | Working exploit published | BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers. |
| CVE-2000-0300 | High | 2000-04-06 | Not applicable | Working exploit published | The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. |
| CVE-2000-0299 | Medium | 2000-04-04 | Not applicable | Working exploit published | Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept. |
| CVE-2000-0634 | Medium | 2000-04-03 | Not applicable | Working exploit published | The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0280 | Low | 2000-04-03 | Not applicable | Working exploit published | Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL. |
| CVE-2000-0302 | Medium | 2000-03-31 | Not applicable | Working exploit published | Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL. |
| CVE-2000-0234 | Medium | 2000-03-31 | Not applicable | Working exploit published | The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file. |
| CVE-2000-0246 | Medium | 2000-03-30 | Not applicable | Working exploit published | IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability. |
| CVE-2000-0232 | Low | 2000-03-30 | Not applicable | Working exploit published | Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request. |
| CVE-2000-0152 | Medium | 2000-03-30 | Not applicable | Working exploit published | Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000. |
| CVE-2000-0244 | High | 2000-03-29 | Not applicable | Working exploit published | The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication. |
| CVE-2000-0245 | High | 2000-03-27 | Not applicable | Working exploit published | Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts. |