WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published to 2000-04-30✕
Overview 695 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 207 public PoC · 8 EPSS ≥ 0.5
695matches 0in Waratek scope0.0% 0protected0.0% 1exploited0.1% 0CISA KEV0.0% 207public PoC29.8% 8EPSS ≥ 0.51.2%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 0.1% Not applicable 694 99.9% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 695 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 695 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 0.1% Working exploit published 207 29.8% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 487 70.1%
split by peak 357 / year
Not applicable: 694Outside Waratek scope: 1 Medium: 695 not blocked: 695 No public exploit: 487Working exploit published: 207Exploited: 1
19891 Not applicable1 Medium1 not blocked1 No public exploit1 19902 Not applicable2 Medium2 not blocked2 Working exploit published1 No public exploit1 19914 Not applicable4 Medium4 not blocked4 No public exploit4 19920 19933 Not applicable3 Medium3 not blocked3 No public exploit3 199410 Not applicable10 Medium10 not blocked10 Working exploit published2 No public exploit8 19956 Not applicable6 Medium6 not blocked6 Working exploit published2 No public exploit4 199621 Not applicable21 Medium21 not blocked21 Working exploit published5 No public exploit16 199789 Not applicable89 Medium89 not blocked89 Working exploit published18 No public exploit71 199885 Not applicable85 Medium85 not blocked85 Working exploit published11 No public exploit74 1999357 Outside Waratek scope1 Not applicable356 Medium357 not blocked357 Working exploit published119 No public exploit238 2000117 Not applicable117 Medium117 not blocked117 Exploited1 Working exploit published49 No public exploit67
198919901991199219931994199519961997199819992000
695 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 7 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2000-0326 Medium 2000-04-25 Not applicable No public exploit Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.
CVE-2000-0324 Medium 2000-04-25 Not applicable Working exploit published pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
CVE-2000-0321 Medium 2000-04-24 Not applicable No public exploit Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.
CVE-2000-0338 Medium 2000-04-23 Not applicable Working exploit published Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.
CVE-2000-0319 Medium 2000-04-23 Not applicable No public exploit mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.
CVE-2000-0459 Medium 2000-04-22 Not applicable No public exploit IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request.
CVE-2000-0320 Medium 2000-04-21 Not applicable No public exploit Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
CVE-2000-0331 Medium 2000-04-20 Not applicable No public exploit Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
CVE-2000-0268 Medium 2000-04-20 Not applicable No public exploit Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot.
CVE-2000-0267 Medium 2000-04-20 Not applicable No public exploit Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.
CVE-2000-0292 Medium 2000-04-19 Not applicable No public exploit The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to crash.
CVE-2000-0271 Medium 2000-04-18 Not applicable No public exploit read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords.
CVE-2000-0083 Medium 2000-04-18 Not applicable No public exploit HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges.
CVE-2000-0265 Medium 2000-04-17 Not applicable No public exploit Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.
CVE-2000-0291 Medium 2000-04-16 Not applicable No public exploit Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.
CVE-2000-0254 Medium 2000-04-14 Not applicable Working exploit published The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.
CVE-2000-0288 Medium 2000-04-12 Not applicable No public exploit Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable.
CVE-2000-0283 Medium 2000-04-12 Not applicable No public exploit The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.
CVE-2000-0282 Medium 2000-04-12 Not applicable Working exploit published TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.
CVE-2000-0262 Medium 2000-04-12 Not applicable Working exploit published The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.
CVE-2000-0261 Medium 2000-04-12 Not applicable No public exploit The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0252 Medium 2000-04-11 Not applicable No public exploit The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
CVE-1999-0695 Medium 2000-04-11 Not applicable No public exploit The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.
CVE-2000-0273 Medium 2000-04-09 Not applicable No public exploit PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt.
CVE-2000-0279 Medium 2000-04-07 Not applicable Working exploit published BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers.
CVE-2000-0301 Medium 2000-04-06 Not applicable No public exploit Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.
CVE-2000-0251 Medium 2000-04-06 Not applicable No public exploit HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.
CVE-2000-0255 Medium 2000-04-05 Not applicable No public exploit The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program.
CVE-2000-0299 Medium 2000-04-04 Not applicable Working exploit published Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept.
CVE-2000-0634 Medium 2000-04-03 Not applicable Working exploit published The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0297 Medium 2000-04-03 Not applicable No public exploit Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables.
CVE-2000-0302 Medium 2000-03-31 Not applicable Working exploit published Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
CVE-2000-0290 Medium 2000-03-31 Not applicable No public exploit Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.
CVE-2000-0234 Medium 2000-03-31 Not applicable Working exploit published The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.
CVE-2000-0246 Medium 2000-03-30 Not applicable Working exploit published IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
CVE-2000-0152 Medium 2000-03-30 Not applicable Working exploit published Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.
CVE-2000-0289 Medium 2000-03-27 Not applicable No public exploit IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.
CVE-2000-0243 Medium 2000-03-25 Not applicable Working exploit published AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin.
CVE-2000-0242 Medium 2000-03-25 Not applicable Working exploit published WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.
CVE-2000-0241 Medium 2000-03-21 Not applicable No public exploit vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges.
CVE-2000-0240 Medium 2000-03-21 Not applicable Working exploit published vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack.
CVE-2000-0613 Medium 2000-03-20 Not applicable Working exploit published Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate connections.
CVE-2000-0226 Medium 2000-03-20 Not applicable No public exploit IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."
CVE-2000-0238 Medium 2000-03-17 Not applicable No public exploit Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL.
CVE-2000-0236 Medium 2000-03-17 Not applicable Working exploit published Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.
CVE-2000-0228 Medium 2000-03-17 Not applicable No public exploit Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" Vulnerability.
CVE-2000-0239 Medium 2000-03-15 Not applicable Working exploit published Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request.
CVE-2000-0198 Medium 2000-03-15 Not applicable Working exploit published Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.
CVE-2000-0180 Medium 2000-03-14 Not applicable Working exploit published Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0237 Medium 2000-03-11 Not applicable No public exploit Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories.
CVE-2000-0181 Medium 2000-03-11 Not applicable No public exploit Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection.
CVE-2000-0183 Medium 2000-03-10 Not applicable Working exploit published Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.
CVE-2000-0173 Medium 2000-03-10 Not applicable No public exploit Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
CVE-2000-0174 Medium 2000-03-09 Not applicable Working exploit published StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0185 Medium 2000-03-08 Not applicable Working exploit published RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
CVE-2000-0225 Medium 2000-03-07 Not applicable No public exploit The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled.
CVE-2000-0200 Medium 2000-03-06 Not applicable Working exploit published Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" vulnerability.
CVE-2000-0206 Medium 2000-03-05 Not applicable Working exploit published The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.
CVE-2000-0192 Medium 2000-03-05 Not applicable Working exploit published The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system.
CVE-2000-0168 Medium 2000-03-04 Not applicable Working exploit published Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability.
CVE-2000-0205 Medium 2000-03-03 Not applicable No public exploit Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.
CVE-2000-0190 Medium 2000-03-02 Not applicable No public exploit AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.
CVE-2000-0201 Medium 2000-03-01 Not applicable No public exploit The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.
CVE-2000-0189 Medium 2000-03-01 Not applicable No public exploit ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
CVE-2000-0216 Medium 2000-02-29 Not applicable No public exploit Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.
CVE-2000-0208 Medium 2000-02-29 Not applicable Working exploit published The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.
CVE-2000-0176 Medium 2000-02-29 Not applicable No public exploit The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
CVE-2000-0204 Medium 2000-02-28 Not applicable Working exploit published The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%.
CVE-2000-0203 Medium 2000-02-28 Not applicable No public exploit The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.
CVE-2000-0179 Medium 2000-02-28 Not applicable Working exploit published HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.
CVE-2000-0221 Medium 2000-02-25 Not applicable Working exploit published The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.
CVE-2000-0220 Medium 2000-02-24 Not applicable No public exploit ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event.
CVE-2000-0217 Medium 2000-02-24 Not applicable No public exploit The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
CVE-2000-0214 Medium 2000-02-24 Not applicable Working exploit published FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.
CVE-2000-0212 Medium 2000-02-24 Not applicable Working exploit published InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information.
CVE-2000-0213 Medium 2000-02-23 Not applicable Working exploit published The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters.
CVE-2000-0211 Medium 2000-02-23 Not applicable Working exploit published The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.
CVE-2000-0182 Medium 2000-02-23 Not applicable No public exploit iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.
CVE-2000-0163 Medium 2000-02-21 Not applicable Working exploit published asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
CVE-2000-0162 Medium 2000-02-18 Not applicable No public exploit The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.
CVE-2000-0156 Medium 2000-02-16 Not applicable Working exploit published Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.
CVE-2000-0197 Medium 2000-02-14 Not applicable No public exploit The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
CVE-2000-0143 Medium 2000-02-11 Not applicable No public exploit The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
CVE-2000-0142 Medium 2000-02-11 Not applicable Working exploit published The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.
CVE-2000-0140 Medium 2000-02-10 Not applicable No public exploit Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
CVE-2000-0149 Medium 2000-02-08 Not applicable Working exploit published Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
CVE-2000-0146 Medium 2000-02-07 Not applicable Working exploit published The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.
CVE-2000-0122 Medium 2000-02-03 Not applicable No public exploit Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.
CVE-2000-0469 Medium 2000-02-02 Not applicable No public exploit Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0114 Medium 2000-02-02 Not applicable Working exploit published Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
CVE-2000-1205 Medium 2000-02-01 Not applicable No public exploit Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explicit charset, or (3) various messages that are generated by certain Apache modules or core code. NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as Internet Explorer, but CVE regards this as a design limitation of those browsers, not Apache. The printenv.pl/acuparam vector, discloser on 20070724, is one such variant.
CVE-2000-0151 Medium 2000-02-01 Not applicable No public exploit GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
CVE-2000-0131 Medium 2000-02-01 Not applicable Working exploit published Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
CVE-2000-0105 Medium 2000-02-01 Not applicable Working exploit published Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client.
CVE-2000-0126 Medium 2000-01-26 Not applicable Working exploit published Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
CVE-2000-0098 Medium 2000-01-26 Not applicable No public exploit Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
CVE-2000-0097 Medium 2000-01-26 Not applicable Working exploit published The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
CVE-2000-0095 Medium 2000-01-24 Not applicable No public exploit The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier.
CVE-2000-0115 Medium 2000-01-21 Not applicable No public exploit IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
CVE-2000-0092 Medium 2000-01-19 Not applicable No public exploit The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
‹ prev page 1 of 7 next ›