WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published to 2000-01-31✕
Overview 859 matches · 3 in Waratek scope · 0 protected · 5 exploited · 0 CISA KEV · 257 public PoC · 10 EPSS ≥ 0.5
859matches 3in Waratek scope0.3% 0protected0.0% 5exploited0.6% 0CISA KEV0.0% 257public PoC29.9% 10EPSS ≥ 0.51.2%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 0.3% Outside Waratek scope 0 0.0% Not applicable 856 99.7% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 859 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 859 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 5 0.6% Working exploit published 253 29.5% Proof of concept only 0 0.0% Forecast only 1 0.1% No public exploit 600 69.8%
split by peak 423 / year
Not applicable: 856No exploit published: 3 High: 859 not blocked: 859 No public exploit: 600Forecast only: 1Working exploit published: 253Exploited: 5
19882 Not applicable2 High2 not blocked2 Working exploit published1 No public exploit1 19892 Not applicable2 High2 not blocked2 No public exploit2 19908 Not applicable8 High8 not blocked8 No public exploit8 199111 Not applicable11 High11 not blocked11 Working exploit published2 No public exploit9 199212 Not applicable12 High12 not blocked12 No public exploit12 19938 Not applicable8 High8 not blocked8 No public exploit8 199414 Not applicable14 High14 not blocked14 Working exploit published3 No public exploit11 199517 Not applicable17 High17 not blocked17 Working exploit published2 No public exploit15 199643 No exploit published1 Not applicable42 High43 not blocked43 Working exploit published12 Forecast only1 No public exploit30 1997143 Not applicable143 High143 not blocked143 Exploited2 Working exploit published51 No public exploit90 1998137 Not applicable137 High137 not blocked137 Exploited1 Working exploit published33 No public exploit103 1999423 No exploit published2 Not applicable421 High423 not blocked423 Exploited2 Working exploit published132 No public exploit289 200039 Not applicable39 High39 not blocked39 Working exploit published17 No public exploit22
1988199019921994199619982000
859 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 9 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2000-0109 High 2000-01-31 Not applicable Working exploit published The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.
CVE-2000-0117 High 2000-01-30 Not applicable No public exploit The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).
CVE-2000-0116 High 2000-01-29 Not applicable Working exploit published Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag.
CVE-2000-0111 High 2000-01-29 Not applicable No public exploit The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.
CVE-2000-1216 High 2000-01-27 Not applicable No public exploit Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.
CVE-2000-0130 High 2000-01-27 Not applicable No public exploit Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
CVE-2000-0113 High 2000-01-27 Not applicable No public exploit The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics.
CVE-2000-0096 High 2000-01-26 Not applicable Working exploit published Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.
CVE-2000-0093 High 2000-01-21 Not applicable No public exploit An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.
CVE-2000-0091 High 2000-01-21 Not applicable Working exploit published Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password.
CVE-2000-0088 High 2000-01-20 Not applicable No public exploit Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability.
CVE-2000-0099 High 2000-01-18 Not applicable No public exploit Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
CVE-2000-0079 High 2000-01-18 Not applicable No public exploit The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL.
CVE-1999-0992 High 2000-01-18 Not applicable No public exploit HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).
CVE-2000-0065 High 2000-01-17 Not applicable Working exploit published Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.
CVE-2000-0070 High 2000-01-12 Not applicable No public exploit NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."
CVE-2000-0048 High 2000-01-12 Not applicable Working exploit published get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program.
CVE-2000-0074 High 2000-01-11 Not applicable Working exploit published PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.
CVE-2000-0081 High 2000-01-10 Not applicable No public exploit Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. j&#x41;vascript.
CVE-2000-0046 High 2000-01-10 Not applicable Working exploit published Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message.
CVE-2000-1221 High 2000-01-08 Not applicable Working exploit published The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.
CVE-2000-1220 High 2000-01-08 Not applicable Working exploit published The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.
CVE-2000-0061 High 2000-01-07 Not applicable Working exploit published Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.
CVE-2000-0055 High 2000-01-06 Not applicable No public exploit Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.
CVE-2000-0044 High 2000-01-06 Not applicable No public exploit Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.
CVE-2000-0085 High 2000-01-04 Not applicable No public exploit Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.
CVE-2000-0062 High 2000-01-04 Not applicable No public exploit The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.
CVE-2000-0059 High 2000-01-04 Not applicable Working exploit published PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.
CVE-2000-0057 High 2000-01-04 Not applicable Working exploit published Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information.
CVE-2000-0053 High 2000-01-04 Not applicable No public exploit Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.
CVE-2000-0052 High 2000-01-04 Not applicable Working exploit published Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.
CVE-2000-0049 High 2000-01-04 Not applicable Working exploit published Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.
CVE-1999-0894 High 2000-01-04 Not applicable No public exploit Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.
CVE-1999-0876 High 2000-01-04 Not applicable No public exploit Buffer overflow in Internet Explorer 4.0 via EMBED tag.
CVE-1999-0744 High 2000-01-04 Not applicable Working exploit published Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.
CVE-2000-0078 High 2000-01-02 Not applicable No public exploit The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command.
CVE-2000-0077 High 2000-01-02 Not applicable Working exploit published The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.
CVE-2000-0120 High 2000-01-01 Not applicable No public exploit The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.
CVE-1999-0964 High 2000-01-01 Not applicable No public exploit Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable.
CVE-2000-0013 High 1999-12-31 Not applicable Working exploit published IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.
CVE-2000-0011 High 1999-12-31 Not applicable Working exploit published Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.
CVE-1999-1592 High 1999-12-31 Not applicable No public exploit Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might overlap CVE-1999-0129.
CVE-1999-1591 High 1999-12-31 Not applicable No public exploit Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.
CVE-1999-1589 High 1999-12-31 Not applicable No public exploit Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.
CVE-1999-1586 High 1999-12-31 Not applicable No public exploit loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.
CVE-1999-1585 High 1999-12-31 Not applicable No public exploit The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges.
CVE-1999-1584 High 1999-12-31 Not applicable No public exploit Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586.
CVE-1999-1512 High 1999-12-31 Not applicable No public exploit The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field.
CVE-1999-1474 High 1999-12-31 Not applicable No public exploit PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer.
CVE-1999-1465 High 1999-12-31 Not applicable No public exploit Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk43862.
CVE-1999-1464 High 1999-12-31 Not applicable No public exploit Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled, as described by Cisco bug CSCdk35564.
CVE-1999-1455 High 1999-12-31 Not applicable No public exploit RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host.
CVE-1999-1382 High 1999-12-31 Not applicable No public exploit NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program.
CVE-1999-1359 High 1999-12-31 Not applicable No public exploit When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies.
CVE-1999-1355 High 1999-12-31 Not applicable No public exploit BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges.
CVE-1999-1334 High 1999-12-31 Not applicable No public exploit Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) via a long -f (filterfile) command line argument.
CVE-1999-1333 High 1999-12-31 Not applicable No public exploit automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded.
CVE-1999-1329 High 1999-12-31 Not applicable No public exploit Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges.
CVE-1999-1328 High 1999-12-31 Not applicable No public exploit linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack.
CVE-1999-1327 High 1999-12-31 Not applicable No public exploit Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable.
CVE-1999-1325 High 1999-12-31 Not applicable No public exploit SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges.
CVE-1999-1316 High 1999-12-31 Not applicable No public exploit Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess.
CVE-1999-1307 High 1999-12-31 Not applicable No public exploit Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.
CVE-1999-1293 High 1999-12-31 Not applicable No public exploit mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core.
CVE-1999-1246 High 1999-12-31 Not applicable No public exploit Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges.
CVE-1999-1233 High 1999-12-31 Not applicable No public exploit IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability.
CVE-1999-1206 High 1999-12-31 Not applicable No public exploit SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX controls that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via a malicious web page that references (1) the Launch control, or (2) the RegObj control.
CVE-1999-1175 High 1999-12-31 Not applicable No public exploit Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048.
CVE-1999-1127 High 1999-12-31 Not applicable No public exploit Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.
CVE-1999-1124 High 1999-12-31 Not applicable No public exploit HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.
CVE-1999-1100 High 1999-12-31 Not applicable No public exploit Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack.
CVE-1999-1094 High 1999-12-31 Not applicable No public exploit Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue."
CVE-1999-1087 High 1999-12-31 Not applicable No public exploit Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that contain the dotless IP address for their server.
CVE-1999-1074 High 1999-12-31 Not applicable No public exploit Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.
CVE-1999-1055 High 1999-12-31 Not applicable No public exploit Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."
CVE-1999-0808 High 1999-12-31 Not applicable No public exploit Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options.
CVE-2000-0043 High 1999-12-30 Not applicable Working exploit published Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.
CVE-2000-0003 High 1999-12-30 Not applicable No public exploit Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.
CVE-2000-0100 High 1999-12-29 Not applicable Working exploit published The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.
CVE-2000-0042 High 1999-12-29 Not applicable No public exploit Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.
CVE-2000-0009 High 1999-12-29 Not applicable Working exploit published The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands.
CVE-1999-1573 High 1999-12-28 Not applicable No public exploit Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files.
CVE-2000-0012 High 1999-12-27 Not applicable Working exploit published Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.
CVE-2000-0010 High 1999-12-26 Not applicable Working exploit published WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.
CVE-1999-0477 High 1999-12-25 Not applicable Working exploit published The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
CVE-1999-0455 High 1999-12-25 Not applicable Working exploit published The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
CVE-2000-0040 High 1999-12-23 Not applicable No public exploit glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.
CVE-2000-0038 High 1999-12-23 Not applicable Working exploit published glFtpD includes a default glftpd user account with a default password and a UID of 0.
CVE-2000-0119 High 1999-12-22 Not applicable Working exploit published The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection.
CVE-2000-0032 High 1999-12-22 Not applicable Working exploit published Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
CVE-2000-0018 High 1999-12-22 Not applicable Working exploit published wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.
CVE-2000-0002 High 1999-12-22 Not applicable Working exploit published Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.
CVE-2000-0026 High 1999-12-21 Not applicable Working exploit published Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.
CVE-2000-0017 High 1999-12-21 Not applicable Working exploit published Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.
CVE-1999-1497 High 1999-12-21 Not applicable Working exploit published Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
CVE-1999-0997 High 1999-12-20 Not applicable Working exploit published wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
CVE-1999-0995 High 1999-12-16 Not applicable No public exploit Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."
CVE-1999-0996 High 1999-12-15 Not applicable Working exploit published Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.
CVE-1999-0935 High 1999-12-15 Not applicable Working exploit published classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.
CVE-2000-0068 High 1999-12-14 Not applicable No public exploit daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail.
‹ prev page 1 of 9 next ›