Overview 203 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 56 public PoC · 2 EPSS ≥ 0.5
203matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
56public PoC27.6%
2EPSS ≥ 0.51.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
203
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
203
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
56
27.6%
Proof of concept only
0
0.0%
Forecast only
2
1.0%
No public exploit
145
71.4%
split by
peak 111 / year
19901
Not applicable1
Low1
not blocked1
No public exploit1
19910
19921
Not applicable1
Low1
not blocked1
No public exploit1
19932
Not applicable2
Low2
not blocked2
No public exploit2
19941
Not applicable1
Low1
not blocked1
Working exploit published1
19951
Not applicable1
Low1
not blocked1
No public exploit1
19969
Not applicable9
Low9
not blocked9
No public exploit9
199719
Not applicable19
Low19
not blocked19
Working exploit published4
Forecast only2
No public exploit13
199823
Not applicable23
Low23
not blocked23
Working exploit published5
No public exploit18
1999111
Not applicable111
Low111
not blocked111
Working exploit published28
No public exploit83
200035
Not applicable35
Low35
not blocked35
Working exploit published18
No public exploit17
19901991199219931994199519961997199819992000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0334 | Low | 2000-04-24 | Not applicable | No public exploit | The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule. |
| CVE-2000-0458 | Low | 2000-04-22 | Not applicable | No public exploit | The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information. |
| CVE-2000-0336 | Low | 2000-04-21 | Not applicable | Working exploit published | Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. |
| CVE-2000-0311 | Low | 2000-04-20 | Not applicable | No public exploit | The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability. |
| CVE-2000-0270 | Low | 2000-04-18 | Not applicable | No public exploit | The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack. |
| CVE-2000-0269 | Low | 2000-04-18 | Not applicable | No public exploit | Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess. |
| CVE-2000-0266 | Low | 2000-04-18 | Not applicable | No public exploit | Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL. |
| CVE-2000-0264 | Low | 2000-04-17 | Not applicable | Working exploit published | Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods. |
| CVE-2000-0286 | Low | 2000-04-16 | Not applicable | Working exploit published | X fontserver xfs allows local users to cause a denial of service via malformed input to the server. |
| CVE-2000-0263 | Low | 2000-04-16 | Not applicable | Working exploit published | The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request. |
| CVE-2000-0276 | Low | 2000-04-10 | Not applicable | Working exploit published | BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37. |
| CVE-2000-0275 | Low | 2000-04-10 | Not applicable | Working exploit published | CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN. |
| CVE-2000-0274 | Low | 2000-04-10 | Not applicable | Working exploit published | The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name. |
| CVE-2000-0280 | Low | 2000-04-03 | Not applicable | Working exploit published | Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL. |
| CVE-1999-0790 | Low | 2000-04-01 | Not applicable | No public exploit | A remote attacker can read information from a Netscape user's cache via JavaScript. |
| CVE-2000-0232 | Low | 2000-03-30 | Not applicable | Working exploit published | Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request. |
| CVE-2000-0281 | Low | 2000-03-26 | Not applicable | No public exploit | Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message. |
| CVE-2000-0227 | Low | 2000-03-23 | Not applicable | Working exploit published | The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to cause a denial of service by requesting a large number of sockets. |
| CVE-2000-0184 | Low | 2000-03-09 | Not applicable | No public exploit | Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords. |
| CVE-2000-0210 | Low | 2000-02-21 | Not applicable | Working exploit published | The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files. |
| CVE-2000-0154 | Low | 2000-02-16 | Not applicable | Working exploit published | The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack. |
| CVE-2000-0224 | Low | 2000-02-15 | Not applicable | Working exploit published | ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack. |
| CVE-2000-0167 | Low | 2000-02-15 | Not applicable | Working exploit published | IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory. |
| CVE-2000-0147 | Low | 2000-02-08 | Not applicable | No public exploit | snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration. |
| CVE-2000-0472 | Low | 2000-02-06 | Not applicable | Working exploit published | Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID. |
| CVE-2000-0129 | Low | 2000-02-04 | Not applicable | Working exploit published | Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file. |
| CVE-2000-0089 | Low | 2000-02-04 | Not applicable | No public exploit | The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability. |
| CVE-2000-0124 | Low | 2000-02-03 | Not applicable | No public exploit | surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions. |
| CVE-2000-0121 | Low | 2000-02-01 | Not applicable | Working exploit published | The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability. |
| CVE-2000-0132 | Low | 2000-01-31 | Not applicable | Working exploit published | Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function. |
| CVE-1999-0595 | Low | 2000-01-20 | Not applicable | No public exploit | A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded. |
| CVE-2000-0090 | Low | 2000-01-17 | Not applicable | No public exploit | VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack. |
| CVE-2000-0067 | Low | 2000-01-11 | Not applicable | No public exploit | CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack. |
| CVE-2000-0080 | Low | 2000-01-10 | Not applicable | No public exploit | AIX techlibss allows local users to overwrite files via a symlink attack. |
| CVE-2000-0069 | Low | 2000-01-01 | Not applicable | No public exploit | The recover program in Solstice Backup allows local users to restore sensitive files. |
| CVE-1999-1590 | Low | 1999-12-31 | Not applicable | No public exploit | Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the image parameter, a different vulnerability than CVE-1999-0021. |
| CVE-1999-1587 | Low | 1999-12-31 | Not applicable | Working exploit published | /usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option. |
| CVE-1999-1476 | Low | 1999-12-31 | Not applicable | No public exploit | A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the "Invalid Operand with Locked CMPXCHG8B Instruction" problem. |
| CVE-1999-1452 | Low | 1999-12-31 | Not applicable | No public exploit | GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt. |
| CVE-1999-1364 | Low | 1999-12-31 | Not applicable | No public exploit | Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext. |
| CVE-1999-1363 | Low | 1999-12-31 | Not applicable | No public exploit | Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool. |
| CVE-1999-1362 | Low | 1999-12-31 | Not applicable | No public exploit | Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters. |
| CVE-1999-1360 | Low | 1999-12-31 | Not applicable | No public exploit | Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle. |
| CVE-1999-1332 | Low | 1999-12-31 | Not applicable | No public exploit | gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file. |
| CVE-1999-1331 | Low | 1999-12-31 | Not applicable | No public exploit | netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface. |
| CVE-1999-1300 | Low | 1999-12-31 | Not applicable | No public exploit | Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration. |
| CVE-1999-1294 | Low | 1999-12-31 | Not applicable | No public exploit | Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from the Shortcut Bar, which could allow local users to read folders for which they do not have permission. |
| CVE-1999-1259 | Low | 1999-12-31 | Not applicable | No public exploit | Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data from previously deleted files into the Office file, which could allow attackers to obtain sensitive information. |
| CVE-1999-1126 | Low | 1999-12-31 | Not applicable | No public exploit | Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_". |
| CVE-1999-1117 | Low | 1999-12-31 | Not applicable | Working exploit published | lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter. |
| CVE-1999-1102 | Low | 1999-12-31 | Not applicable | No public exploit | lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times. |
| CVE-1999-1042 | Low | 1999-12-31 | Not applicable | No public exploit | Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings. |
| CVE-2000-0076 | Low | 1999-12-30 | Not applicable | No public exploit | nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover. |
| CVE-2000-0008 | Low | 1999-12-26 | Not applicable | No public exploit | FTPPro allows local users to read sensitive information, which is stored in plain text. |
| CVE-2000-0006 | Low | 1999-12-25 | Not applicable | No public exploit | strace allows local users to read arbitrary files via memory mapped file names. |
| CVE-2000-0028 | Low | 1999-12-23 | Not applicable | Working exploit published | Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function. |
| CVE-1999-1001 | Low | 1999-12-16 | Not applicable | No public exploit | Cisco Cache Engine allows a remote attacker to gain access via a null username and password. |
| CVE-2000-0361 | Low | 1999-12-14 | Not applicable | No public exploit | The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information. |
| CVE-1999-1010 | Low | 1999-12-14 | Not applicable | No public exploit | An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy. |
| CVE-1999-1009 | Low | 1999-12-12 | Not applicable | No public exploit | The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system. |
| CVE-1999-0976 | Low | 1999-12-07 | Not applicable | No public exploit | Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail. |
| CVE-1999-0990 | Low | 1999-12-05 | Not applicable | No public exploit | Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system. |
| CVE-2000-0139 | Low | 1999-12-03 | Not applicable | Working exploit published | Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command. |
| CVE-1999-0825 | Low | 1999-12-03 | Not applicable | Working exploit published | The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail. |
| CVE-2000-0366 | Low | 1999-12-02 | Not applicable | No public exploit | dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files. |
| CVE-1999-0862 | Low | 1999-12-02 | Not applicable | No public exploit | Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file. |
| CVE-1999-0850 | Low | 1999-12-02 | Not applicable | No public exploit | The default permissions for Endymion MailMan allow local users to read email or modify files. |
| CVE-1999-0828 | Low | 1999-12-02 | Not applicable | Working exploit published | UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission. |
| CVE-1999-0860 | Low | 1999-12-01 | Not applicable | Working exploit published | Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack. |
| CVE-1999-0859 | Low | 1999-12-01 | Not applicable | Working exploit published | Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly. |
| CVE-1999-0857 | Low | 1999-12-01 | Not applicable | Working exploit published | FreeBSD gdc program allows local users to modify files via a symlink attack. |
| CVE-2000-0531 | Low | 1999-11-23 | Not applicable | Working exploit published | Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. |
| CVE-1999-0793 | Low | 1999-11-17 | Not applicable | Working exploit published | Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet. |
| CVE-1999-0851 | Low | 1999-11-10 | Not applicable | No public exploit | Denial of service in BIND named via naptr. |
| CVE-1999-1530 | Low | 1999-11-08 | Not applicable | No public exploit | cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system. |
| CVE-1999-0885 | Low | 1999-11-03 | Not applicable | Working exploit published | Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL. |
| CVE-1999-0827 | Low | 1999-11-01 | Not applicable | No public exploit | By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing. |
| CVE-1999-1226 | Low | 1999-10-28 | Not applicable | No public exploit | Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key. |
| CVE-1999-0893 | Low | 1999-10-11 | Not applicable | Working exploit published | userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack. |
| CVE-1999-1540 | Low | 1999-10-04 | Not applicable | No public exploit | shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code. |
| CVE-1999-0912 | Low | 1999-09-22 | Not applicable | Working exploit published | FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files. |
| CVE-1999-0787 | Low | 1999-09-17 | Not applicable | Working exploit published | The SSH authentication agent follows symlinks via a UNIX domain socket. |
| CVE-1999-0907 | Low | 1999-09-16 | Not applicable | No public exploit | sccw allows local users to read arbitrary files. |
| CVE-2000-0489 | Low | 1999-09-05 | Not applicable | Working exploit published | FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers. |
| CVE-1999-1564 | Low | 1999-09-02 | Not applicable | No public exploit | FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes. |
| CVE-1999-0743 | Low | 1999-08-20 | Not applicable | No public exploit | Trn allows local users to overwrite other users' files via symlinks. |
| CVE-1999-0732 | Low | 1999-08-19 | Not applicable | No public exploit | The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links. |
| CVE-1999-0747 | Low | 1999-08-18 | Not applicable | No public exploit | Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load. |
| CVE-1999-0749 | Low | 1999-08-16 | Not applicable | Working exploit published | Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument. |
| CVE-1999-0861 | Low | 1999-08-11 | Not applicable | No public exploit | Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext. |
| CVE-1999-0694 | Low | 1999-08-11 | Not applicable | No public exploit | Denial of service in AIX ptrace system call allows local users to crash the system. |
| CVE-1999-0703 | Low | 1999-08-03 | Not applicable | No public exploit | OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices. |
| CVE-1999-0770 | Low | 1999-07-29 | Not applicable | Working exploit published | Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems. |
| CVE-1999-1545 | Low | 1999-07-14 | Not applicable | No public exploit | Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users. |
| CVE-1999-1394 | Low | 1999-07-02 | Not applicable | Working exploit published | BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device. |
| CVE-1999-1348 | Low | 1999-06-30 | Not applicable | No public exploit | Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service. |
| CVE-1999-0916 | Low | 1999-06-29 | Not applicable | No public exploit | WebTrends software stores account names and passwords in a file which does not have restricted access permissions. |
| CVE-1999-1496 | Low | 1999-06-08 | Not applicable | No public exploit | Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist. |
| CVE-1999-1400 | Low | 1999-06-03 | Not applicable | No public exploit | The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the screen saver and read files by running Internet Explorer while the screen is still locked. |
| CVE-1999-0803 | Low | 1999-05-25 | Not applicable | Working exploit published | The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack. |