Overview 601 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 164 public PoC · 6 EPSS ≥ 0.5
601matches
0in Waratek scope0.0%
0protected0.0%
1exploited0.2%
0CISA KEV0.0%
164public PoC27.3%
6EPSS ≥ 0.51.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
0.2%
Not applicable
600
99.8%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
601
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
1
0.2%
Working exploit published
164
27.3%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
436
72.5%
split by
peak 357 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
200023
Not applicable23
Medium23
not blocked23
Exploited1
Working exploit published6
No public exploit16
198919901991199219931994199519961997199819992000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0126 | Medium | 2000-01-26 | Not applicable | Working exploit published | Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack. |
| CVE-2000-0098 | Medium | 2000-01-26 | Not applicable | No public exploit | Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist. |
| CVE-2000-0097 | Medium | 2000-01-26 | Not applicable | Working exploit published | The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability. |
| CVE-2000-0095 | Medium | 2000-01-24 | Not applicable | No public exploit | The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier. |
| CVE-2000-0115 | Medium | 2000-01-21 | Not applicable | No public exploit | IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page. |
| CVE-2000-0092 | Medium | 2000-01-19 | Not applicable | No public exploit | The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. |
| CVE-2000-0086 | Medium | 2000-01-18 | Not applicable | No public exploit | Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing. |
| CVE-2000-0072 | Medium | 2000-01-17 | Not applicable | No public exploit | Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file which has an approved name and possibly gain privileges. |
| CVE-2000-0064 | Medium | 2000-01-17 | Not applicable | No public exploit | cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters. |
| CVE-2000-0063 | Medium | 2000-01-17 | Not applicable | No public exploit | cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script. |
| CVE-2000-0075 | Medium | 2000-01-13 | Not applicable | Working exploit published | Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELO, MAIL FROM, RCPT TO, and DATA commands in the same session. |
| CVE-2000-0066 | Medium | 2000-01-13 | Not applicable | No public exploit | WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request. |
| CVE-2000-0087 | Medium | 2000-01-12 | Not applicable | No public exploit | Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext. |
| CVE-1999-1002 | Medium | 2000-01-12 | Not applicable | No public exploit | Netscape Navigator uses weak encryption for storing a user's Netscape mail password. |
| CVE-2000-0071 | Medium | 2000-01-11 | Not applicable | Exploited | IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. |
| CVE-2000-0045 | Medium | 2000-01-11 | Not applicable | Working exploit published | MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege. |
| CVE-2000-0084 | Medium | 2000-01-06 | Not applicable | No public exploit | CuteFTP uses weak encryption to store password information in its tree.dat file. |
| CVE-2000-0058 | Medium | 2000-01-05 | Not applicable | No public exploit | Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files. |
| CVE-2000-0056 | Medium | 2000-01-05 | Not applicable | Working exploit published | IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi. |
| CVE-2000-0051 | Medium | 2000-01-04 | Not applicable | No public exploit | The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL. |
| CVE-2000-0050 | Medium | 2000-01-04 | Not applicable | No public exploit | The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs. |
| CVE-1999-0735 | Medium | 2000-01-04 | Not applicable | Working exploit published | KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories. |
| CVE-2000-0082 | Medium | 2000-01-02 | Not applicable | No public exploit | WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML. |
| CVE-2000-0015 | Medium | 1999-12-31 | Not applicable | Working exploit published | CascadeView TFTP server allows local users to gain privileges via a symlink attack. |
| CVE-1999-1488 | Medium | 1999-12-31 | Not applicable | Working exploit published | sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication. |
| CVE-1999-1481 | Medium | 1999-12-31 | Not applicable | Working exploit published | Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair. |
| CVE-1999-1473 | Medium | 1999-12-31 | Not applicable | No public exploit | When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the "Page Redirect Issue." |
| CVE-1999-1472 | Medium | 1999-12-31 | Not applicable | No public exploit | Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue. |
| CVE-1999-1462 | Medium | 1999-12-31 | Not applicable | No public exploit | Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files. |
| CVE-1999-1456 | Medium | 1999-12-31 | Not applicable | No public exploit | thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename. |
| CVE-1999-1451 | Medium | 1999-12-31 | Not applicable | No public exploit | The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files. |
| CVE-1999-1444 | Medium | 1999-12-31 | Not applicable | No public exploit | genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext. |
| CVE-1999-1386 | Medium | 1999-12-31 | Not applicable | No public exploit | Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file. |
| CVE-1999-1379 | Medium | 1999-12-31 | Not applicable | No public exploit | DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker. |
| CVE-1999-1358 | Medium | 1999-12-31 | Not applicable | No public exploit | When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only. |
| CVE-1999-1339 | Medium | 1999-12-31 | Not applicable | No public exploit | Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command. |
| CVE-1999-1335 | Medium | 1999-12-31 | Not applicable | No public exploit | snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information. |
| CVE-1999-1330 | Medium | 1999-12-31 | Not applicable | No public exploit | The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf. |
| CVE-1999-1320 | Medium | 1999-12-31 | Not applicable | No public exploit | Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing. |
| CVE-1999-1317 | Medium | 1999-12-31 | Not applicable | No public exploit | Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device. |
| CVE-1999-1315 | Medium | 1999-12-31 | Not applicable | No public exploit | Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service. |
| CVE-1999-1290 | Medium | 1999-12-31 | Not applicable | No public exploit | Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string. |
| CVE-1999-1287 | Medium | 1999-12-31 | Not applicable | No public exploit | Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface. |
| CVE-1999-1279 | Medium | 1999-12-31 | Not applicable | No public exploit | An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU. |
| CVE-1999-1223 | Medium | 1999-12-31 | Not applicable | No public exploit | IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters. |
| CVE-1999-1222 | Medium | 1999-12-31 | Not applicable | No public exploit | Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup. |
| CVE-1999-1177 | Medium | 1999-12-31 | Not applicable | No public exploit | Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation. |
| CVE-1999-1167 | Medium | 1999-12-31 | Not applicable | No public exploit | Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation. |
| CVE-1999-1157 | Medium | 1999-12-31 | Not applicable | No public exploit | Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface. |
| CVE-1999-1148 | Medium | 1999-12-31 | Not applicable | No public exploit | FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same time. |
| CVE-1999-1132 | Medium | 1999-12-31 | Not applicable | No public exploit | Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information Field (RIF) field with a hop count greater than 7, or (2) a list containing duplicate Token Ring IDs. |
| CVE-1999-1105 | Medium | 1999-12-31 | Not applicable | No public exploit | Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive. |
| CVE-1999-1104 | Medium | 1999-12-31 | Not applicable | No public exploit | Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords. |
| CVE-1999-1093 | Medium | 1999-12-31 | Not applicable | No public exploit | Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page. |
| CVE-1999-1084 | Medium | 1999-12-31 | Not applicable | Working exploit published | The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash. |
| CVE-1999-1043 | Medium | 1999-12-31 | Not applicable | No public exploit | Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error). |
| CVE-1999-1035 | Medium | 1999-12-31 | Not applicable | No public exploit | IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" vulnerability. |
| CVE-1999-0815 | Medium | 1999-12-31 | Not applicable | No public exploit | Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries. |
| CVE-1999-0154 | Medium | 1999-12-31 | Not applicable | Working exploit published | IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL. |
| CVE-1999-0001 | Medium | 1999-12-30 | Not applicable | No public exploit | ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. |
| CVE-2000-0039 | Medium | 1999-12-29 | Not applicable | Working exploit published | AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program. |
| CVE-2000-0007 | Medium | 1999-12-29 | Not applicable | No public exploit | Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service. |
| CVE-2000-0041 | Medium | 1999-12-28 | Not applicable | No public exploit | Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack. |
| CVE-2000-0037 | Medium | 1999-12-28 | Not applicable | Working exploit published | Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file. |
| CVE-2000-0035 | Medium | 1999-12-28 | Not applicable | Working exploit published | resend command in Majordomo allows local users to gain privileges via shell metacharacters. |
| CVE-2000-0014 | Medium | 1999-12-28 | Not applicable | Working exploit published | Denial of service in Savant web server via a null character in the requested URL. |
| CVE-2000-0060 | Medium | 1999-12-27 | Not applicable | No public exploit | Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name. |
| CVE-2000-0033 | Medium | 1999-12-27 | Not applicable | No public exploit | InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments. |
| CVE-2000-0029 | Medium | 1999-12-27 | Not applicable | No public exploit | UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack. |
| CVE-2000-0027 | Medium | 1999-12-27 | Not applicable | Working exploit published | IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack. |
| CVE-1999-0892 | Medium | 1999-12-24 | Not applicable | No public exploit | Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font. |
| CVE-2000-0001 | Medium | 1999-12-23 | Not applicable | Working exploit published | RealMedia server allows remote attackers to cause a denial of service via a long ramgen request. |
| CVE-2000-0036 | Medium | 1999-12-22 | Not applicable | No public exploit | Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability. |
| CVE-2000-0034 | Medium | 1999-12-22 | Not applicable | No public exploit | Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords." |
| CVE-2000-0030 | Medium | 1999-12-22 | Not applicable | No public exploit | Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database. |
| CVE-1999-1109 | Medium | 1999-12-22 | Not applicable | Working exploit published | Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated. |
| CVE-1999-1066 | Medium | 1999-12-22 | Not applicable | No public exploit | Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request. |
| CVE-2000-0025 | Medium | 1999-12-21 | Not applicable | No public exploit | IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability. |
| CVE-2000-0024 | Medium | 1999-12-21 | Not applicable | No public exploit | IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability. |
| CVE-2000-0023 | Medium | 1999-12-21 | Not applicable | No public exploit | Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL. |
| CVE-2000-0022 | Medium | 1999-12-21 | Not applicable | No public exploit | Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory. |
| CVE-2000-0020 | Medium | 1999-12-20 | Not applicable | No public exploit | DNS PRO allows remote attackers to conduct a denial of service via a large number of connections. |
| CVE-1999-1006 | Medium | 1999-12-19 | Not applicable | No public exploit | Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter. |
| CVE-1999-1005 | Medium | 1999-12-19 | Not applicable | Working exploit published | Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter. |
| CVE-1999-1004 | Medium | 1999-12-16 | Not applicable | No public exploit | Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command. |
| CVE-1999-1000 | Medium | 1999-12-16 | Not applicable | No public exploit | The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics. |
| CVE-1999-0998 | Medium | 1999-12-16 | Not applicable | No public exploit | Cisco Cache Engine allows an attacker to replace content in the cache. |
| CVE-1999-0994 | Medium | 1999-12-16 | Not applicable | No public exploit | Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords. |
| CVE-1999-0934 | Medium | 1999-12-15 | Not applicable | Working exploit published | classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters. |
| CVE-1999-1003 | Medium | 1999-12-13 | Not applicable | No public exploit | War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections. |
| CVE-1999-0289 | Medium | 1999-12-12 | Not applicable | No public exploit | The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL. |
| CVE-1999-0975 | Medium | 1999-12-10 | Not applicable | Working exploit published | The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed. |
| CVE-1999-0986 | Medium | 1999-12-08 | Not applicable | Working exploit published | The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option. |
| CVE-1999-0981 | Medium | 1999-12-08 | Not applicable | Working exploit published | Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect." |
| CVE-1999-0991 | Medium | 1999-12-06 | Not applicable | Working exploit published | Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name. |
| CVE-2000-0358 | Medium | 1999-12-03 | Not applicable | No public exploit | ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program. |
| CVE-1999-0865 | Medium | 1999-12-03 | Not applicable | No public exploit | Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port. |
| CVE-1999-0858 | Medium | 1999-12-02 | Not applicable | No public exploit | Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server. |
| CVE-2000-0021 | Medium | 1999-12-01 | Not applicable | No public exploit | Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin. |
| CVE-2000-0004 | Medium | 1999-12-01 | Not applicable | No public exploit | ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (dot) into the URL. |