WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published to 2000-03-31✕
Overview 664 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 199 public PoC · 8 EPSS ≥ 0.5
664matches 0in Waratek scope0.0% 0protected0.0% 1exploited0.2% 0CISA KEV0.0% 199public PoC30.0% 8EPSS ≥ 0.51.2%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 0.2% Not applicable 663 99.8% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 664 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 664 100.0% not established 0 0.0% unrecorded 0 0.0%
664 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 7 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2000-0302 Medium 2000-03-31 Not applicable Working exploit published Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
CVE-2000-0290 Medium 2000-03-31 Not applicable No public exploit Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.
CVE-2000-0234 Medium 2000-03-31 Not applicable Working exploit published The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.
CVE-2000-0246 Medium 2000-03-30 Not applicable Working exploit published IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
CVE-2000-0152 Medium 2000-03-30 Not applicable Working exploit published Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.
CVE-2000-0289 Medium 2000-03-27 Not applicable No public exploit IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.
CVE-2000-0243 Medium 2000-03-25 Not applicable Working exploit published AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin.
CVE-2000-0242 Medium 2000-03-25 Not applicable Working exploit published WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.
CVE-2000-0241 Medium 2000-03-21 Not applicable No public exploit vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges.
CVE-2000-0240 Medium 2000-03-21 Not applicable Working exploit published vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack.
CVE-2000-0613 Medium 2000-03-20 Not applicable Working exploit published Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate connections.
CVE-2000-0226 Medium 2000-03-20 Not applicable No public exploit IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."
CVE-2000-0238 Medium 2000-03-17 Not applicable No public exploit Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL.
CVE-2000-0236 Medium 2000-03-17 Not applicable Working exploit published Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.
CVE-2000-0228 Medium 2000-03-17 Not applicable No public exploit Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" Vulnerability.
CVE-2000-0239 Medium 2000-03-15 Not applicable Working exploit published Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request.
CVE-2000-0198 Medium 2000-03-15 Not applicable Working exploit published Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.
CVE-2000-0180 Medium 2000-03-14 Not applicable Working exploit published Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0237 Medium 2000-03-11 Not applicable No public exploit Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories.
CVE-2000-0181 Medium 2000-03-11 Not applicable No public exploit Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection.
CVE-2000-0183 Medium 2000-03-10 Not applicable Working exploit published Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.
CVE-2000-0173 Medium 2000-03-10 Not applicable No public exploit Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
CVE-2000-0174 Medium 2000-03-09 Not applicable Working exploit published StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0185 Medium 2000-03-08 Not applicable Working exploit published RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
CVE-2000-0225 Medium 2000-03-07 Not applicable No public exploit The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled.
CVE-2000-0200 Medium 2000-03-06 Not applicable Working exploit published Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" vulnerability.
CVE-2000-0206 Medium 2000-03-05 Not applicable Working exploit published The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.
CVE-2000-0192 Medium 2000-03-05 Not applicable Working exploit published The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system.
CVE-2000-0168 Medium 2000-03-04 Not applicable Working exploit published Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability.
CVE-2000-0205 Medium 2000-03-03 Not applicable No public exploit Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.
CVE-2000-0190 Medium 2000-03-02 Not applicable No public exploit AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.
CVE-2000-0201 Medium 2000-03-01 Not applicable No public exploit The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.
CVE-2000-0189 Medium 2000-03-01 Not applicable No public exploit ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
CVE-2000-0216 Medium 2000-02-29 Not applicable No public exploit Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.
CVE-2000-0208 Medium 2000-02-29 Not applicable Working exploit published The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.
CVE-2000-0176 Medium 2000-02-29 Not applicable No public exploit The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
CVE-2000-0204 Medium 2000-02-28 Not applicable Working exploit published The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%.
CVE-2000-0203 Medium 2000-02-28 Not applicable No public exploit The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.
CVE-2000-0179 Medium 2000-02-28 Not applicable Working exploit published HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.
CVE-2000-0221 Medium 2000-02-25 Not applicable Working exploit published The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.
CVE-2000-0220 Medium 2000-02-24 Not applicable No public exploit ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event.
CVE-2000-0217 Medium 2000-02-24 Not applicable No public exploit The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
CVE-2000-0214 Medium 2000-02-24 Not applicable Working exploit published FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.
CVE-2000-0212 Medium 2000-02-24 Not applicable Working exploit published InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information.
CVE-2000-0213 Medium 2000-02-23 Not applicable Working exploit published The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters.
CVE-2000-0211 Medium 2000-02-23 Not applicable Working exploit published The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.
CVE-2000-0182 Medium 2000-02-23 Not applicable No public exploit iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.
CVE-2000-0163 Medium 2000-02-21 Not applicable Working exploit published asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
CVE-2000-0162 Medium 2000-02-18 Not applicable No public exploit The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.
CVE-2000-0156 Medium 2000-02-16 Not applicable Working exploit published Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.
CVE-2000-0197 Medium 2000-02-14 Not applicable No public exploit The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
CVE-2000-0143 Medium 2000-02-11 Not applicable No public exploit The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
CVE-2000-0142 Medium 2000-02-11 Not applicable Working exploit published The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.
CVE-2000-0140 Medium 2000-02-10 Not applicable No public exploit Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
CVE-2000-0149 Medium 2000-02-08 Not applicable Working exploit published Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
CVE-2000-0146 Medium 2000-02-07 Not applicable Working exploit published The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.
CVE-2000-0122 Medium 2000-02-03 Not applicable No public exploit Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.
CVE-2000-0469 Medium 2000-02-02 Not applicable No public exploit Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0114 Medium 2000-02-02 Not applicable Working exploit published Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
CVE-2000-1205 Medium 2000-02-01 Not applicable No public exploit Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explicit charset, or (3) various messages that are generated by certain Apache modules or core code. NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as Internet Explorer, but CVE regards this as a design limitation of those browsers, not Apache. The printenv.pl/acuparam vector, discloser on 20070724, is one such variant.
CVE-2000-0151 Medium 2000-02-01 Not applicable No public exploit GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
CVE-2000-0131 Medium 2000-02-01 Not applicable Working exploit published Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
CVE-2000-0105 Medium 2000-02-01 Not applicable Working exploit published Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client.
CVE-2000-0126 Medium 2000-01-26 Not applicable Working exploit published Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
CVE-2000-0098 Medium 2000-01-26 Not applicable No public exploit Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
CVE-2000-0097 Medium 2000-01-26 Not applicable Working exploit published The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
CVE-2000-0095 Medium 2000-01-24 Not applicable No public exploit The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier.
CVE-2000-0115 Medium 2000-01-21 Not applicable No public exploit IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
CVE-2000-0092 Medium 2000-01-19 Not applicable No public exploit The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
CVE-2000-0086 Medium 2000-01-18 Not applicable No public exploit Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing.
CVE-2000-0072 Medium 2000-01-17 Not applicable No public exploit Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file which has an approved name and possibly gain privileges.
CVE-2000-0064 Medium 2000-01-17 Not applicable No public exploit cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters.
CVE-2000-0063 Medium 2000-01-17 Not applicable No public exploit cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.
CVE-2000-0075 Medium 2000-01-13 Not applicable Working exploit published Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELO, MAIL FROM, RCPT TO, and DATA commands in the same session.
CVE-2000-0066 Medium 2000-01-13 Not applicable No public exploit WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request.
CVE-2000-0087 Medium 2000-01-12 Not applicable No public exploit Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
CVE-1999-1002 Medium 2000-01-12 Not applicable No public exploit Netscape Navigator uses weak encryption for storing a user's Netscape mail password.
CVE-2000-0071 Medium 2000-01-11 Not applicable Exploited IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.
CVE-2000-0045 Medium 2000-01-11 Not applicable Working exploit published MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
CVE-2000-0084 Medium 2000-01-06 Not applicable No public exploit CuteFTP uses weak encryption to store password information in its tree.dat file.
CVE-2000-0058 Medium 2000-01-05 Not applicable No public exploit Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files.
CVE-2000-0056 Medium 2000-01-05 Not applicable Working exploit published IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.
CVE-2000-0051 Medium 2000-01-04 Not applicable No public exploit The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL.
CVE-2000-0050 Medium 2000-01-04 Not applicable No public exploit The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.
CVE-1999-0735 Medium 2000-01-04 Not applicable Working exploit published KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.
CVE-2000-0082 Medium 2000-01-02 Not applicable No public exploit WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.
CVE-2000-0015 Medium 1999-12-31 Not applicable Working exploit published CascadeView TFTP server allows local users to gain privileges via a symlink attack.
CVE-1999-1488 Medium 1999-12-31 Not applicable Working exploit published sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.
CVE-1999-1481 Medium 1999-12-31 Not applicable Working exploit published Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.
CVE-1999-1473 Medium 1999-12-31 Not applicable No public exploit When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the "Page Redirect Issue."
CVE-1999-1472 Medium 1999-12-31 Not applicable No public exploit Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.
CVE-1999-1462 Medium 1999-12-31 Not applicable No public exploit Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files.
CVE-1999-1456 Medium 1999-12-31 Not applicable No public exploit thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename.
CVE-1999-1451 Medium 1999-12-31 Not applicable No public exploit The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.
CVE-1999-1444 Medium 1999-12-31 Not applicable No public exploit genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext.
CVE-1999-1386 Medium 1999-12-31 Not applicable No public exploit Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.
CVE-1999-1379 Medium 1999-12-31 Not applicable No public exploit DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker.
CVE-1999-1358 Medium 1999-12-31 Not applicable No public exploit When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only.
CVE-1999-1339 Medium 1999-12-31 Not applicable No public exploit Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.
CVE-1999-1335 Medium 1999-12-31 Not applicable No public exploit snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information.
‹ prev page 1 of 7 next ›