Overview 1,002 matches · 3 in Waratek scope · 0 protected · 7 exploited · 0 CISA KEV · 329 public PoC · 13 EPSS ≥ 0.5
1,002matches
3in Waratek scope0.3%
0protected0.0%
7exploited0.7%
0CISA KEV0.0%
329public PoC32.8%
13EPSS ≥ 0.51.3%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
3
0.3%
Outside Waratek scope
0
0.0%
Not applicable
999
99.7%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
1,002
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
7
0.7%
Working exploit published
323
32.2%
Proof of concept only
0
0.0%
Forecast only
1
0.1%
No public exploit
671
67.0%
split by
peak 423 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000182
Not applicable182
High182
not blocked182
Exploited2
Working exploit published87
No public exploit93
1988199019921994199619982000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0530 | High | 2000-05-31 | Not applicable | Working exploit published | The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files. |
| CVE-2000-0488 | High | 2000-05-30 | Not applicable | No public exploit | Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command. |
| CVE-2000-0454 | High | 2000-05-29 | Not applicable | Working exploit published | Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter. |
| CVE-2000-0460 | High | 2000-05-27 | Not applicable | Working exploit published | Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable. |
| CVE-2000-0491 | High | 2000-05-24 | Not applicable | Working exploit published | Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request. |
| CVE-2000-0446 | High | 2000-05-24 | Not applicable | Working exploit published | Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string. |
| CVE-2000-0443 | High | 2000-05-24 | Not applicable | Working exploit published | The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0442 | High | 2000-05-24 | Not applicable | Working exploit published | Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command. |
| CVE-2000-0398 | High | 2000-05-24 | Not applicable | No public exploit | Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long query_string parameter in the HTTP GET request. |
| CVE-2000-0551 | High | 2000-05-23 | Not applicable | No public exploit | The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files. |
| CVE-2000-0438 | High | 2000-05-22 | Not applicable | Working exploit published | Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. |
| CVE-2000-0431 | High | 2000-05-22 | Not applicable | No public exploit | Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files. |
| CVE-2000-0305 | High | 2000-05-19 | Not applicable | Working exploit published | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability. |
| CVE-2000-0450 | High | 2000-05-18 | Not applicable | No public exploit | Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands. |
| CVE-2000-0437 | High | 2000-05-18 | Not applicable | Working exploit published | Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands. |
| CVE-2000-0464 | High | 2000-05-17 | Not applicable | No public exploit | Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability. |
| CVE-1999-1008 | High | 2000-05-17 | Not applicable | Working exploit published | xsoldier program allows local users to gain root access via a long argument. |
| CVE-2000-0432 | High | 2000-05-16 | Not applicable | Working exploit published | The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0405 | High | 2000-05-16 | Not applicable | Working exploit published | Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet. |
| CVE-2000-0393 | High | 2000-05-16 | Not applicable | Working exploit published | The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute. |
| CVE-2000-0392 | High | 2000-05-16 | Not applicable | No public exploit | Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges. |
| CVE-2000-0391 | High | 2000-05-16 | Not applicable | No public exploit | Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges. |
| CVE-2000-0390 | High | 2000-05-16 | Not applicable | No public exploit | Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges. |
| CVE-2000-0389 | High | 2000-05-16 | Not applicable | Working exploit published | Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges. |
| CVE-2000-0424 | High | 2000-05-15 | Not applicable | Working exploit published | The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0435 | High | 2000-05-13 | Not applicable | No public exploit | The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages. |
| CVE-2000-0434 | High | 2000-05-13 | Not applicable | No public exploit | The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers. |
| CVE-2000-0400 | High | 2000-05-13 | Not applicable | Working exploit published | The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post. |
| CVE-2000-0407 | High | 2000-05-12 | Not applicable | Working exploit published | Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option. |
| CVE-2000-0457 | High | 2000-05-11 | Not applicable | Working exploit published | ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability. |
| CVE-2000-0421 | High | 2000-05-11 | Not applicable | No public exploit | The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0420 | High | 2000-05-11 | Not applicable | No public exploit | The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System (EFS) data. |
| CVE-2000-0419 | High | 2000-05-11 | Not applicable | No public exploit | The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability. |
| CVE-2000-0384 | High | 2000-05-08 | Not applicable | Working exploit published | NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access. |
| CVE-2000-0428 | High | 2000-05-04 | Not applicable | No public exploit | Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment. |
| CVE-2000-0422 | High | 2000-05-04 | Not applicable | No public exploit | Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter. |
| CVE-2000-0425 | High | 2000-05-03 | Not applicable | Working exploit published | Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands. |
| CVE-2000-0378 | High | 2000-05-03 | Not applicable | Working exploit published | The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in. |
| CVE-2000-0335 | High | 2000-05-03 | Not applicable | No public exploit | The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results. |
| CVE-2000-0386 | High | 2000-05-02 | Not applicable | No public exploit | FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email. |
| CVE-2000-0343 | High | 2000-05-02 | Not applicable | Working exploit published | Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header. |
| CVE-2000-0449 | High | 2000-05-01 | Not applicable | Working exploit published | Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields. |
| CVE-2000-0447 | High | 2000-05-01 | Not applicable | No public exploit | Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service. |
| CVE-2000-0401 | High | 2000-05-01 | Not applicable | No public exploit | Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string. |
| CVE-1999-0427 | High | 2000-05-01 | Not applicable | No public exploit | Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names. |
| CVE-2000-0340 | High | 2000-04-29 | Not applicable | Working exploit published | Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable. |
| CVE-2000-0342 | High | 2000-04-28 | Not applicable | Working exploit published | Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment." |
| CVE-2000-0429 | High | 2000-04-27 | Not applicable | Working exploit published | A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands. |
| CVE-1999-0706 | High | 2000-04-27 | Not applicable | No public exploit | Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables. |
| CVE-2000-0380 | High | 2000-04-26 | Not applicable | Working exploit published | The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string. |
| CVE-2000-0249 | High | 2000-04-26 | Not applicable | No public exploit | The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program. |
| CVE-2000-0339 | High | 2000-04-24 | Not applicable | Working exploit published | ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules. |
| CVE-2000-0337 | High | 2000-04-24 | Not applicable | Working exploit published | Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter. |
| CVE-2000-0322 | High | 2000-04-24 | Not applicable | Exploited | The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0317 | High | 2000-04-24 | Not applicable | Working exploit published | Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option. |
| CVE-2000-0316 | High | 2000-04-24 | Not applicable | Working exploit published | Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option. |
| CVE-2000-0248 | High | 2000-04-24 | Not applicable | Exploited | The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands. |
| CVE-2000-0318 | High | 2000-04-21 | Not applicable | No public exploit | Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack. |
| CVE-2000-0295 | High | 2000-04-21 | Not applicable | Working exploit published | Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command. |
| CVE-2000-0272 | High | 2000-04-20 | Not applicable | Working exploit published | RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070. |
| CVE-2000-0257 | High | 2000-04-19 | Not applicable | Working exploit published | Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL. |
| CVE-2000-0256 | High | 2000-04-19 | Not applicable | Working exploit published | Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability. |
| CVE-2000-0285 | High | 2000-04-16 | Not applicable | No public exploit | Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter. |
| CVE-2000-0284 | High | 2000-04-16 | Not applicable | Working exploit published | Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands. |
| CVE-2000-0260 | High | 2000-04-14 | Not applicable | Working exploit published | Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability. |
| CVE-2000-0250 | High | 2000-04-14 | Not applicable | Working exploit published | The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords. |
| CVE-2000-0287 | High | 2000-04-12 | Not applicable | Working exploit published | The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter. |
| CVE-2000-0259 | High | 2000-04-12 | Not applicable | No public exploit | The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users. |
| CVE-2000-0258 | High | 2000-04-12 | Not applicable | No public exploit | IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability. |
| CVE-2000-0253 | High | 2000-04-11 | Not applicable | No public exploit | The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields. |
| CVE-1999-0979 | High | 2000-04-11 | Not applicable | Working exploit published | The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed. |
| CVE-1999-0701 | High | 2000-04-11 | Not applicable | No public exploit | After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password. |
| CVE-1999-0699 | High | 2000-04-11 | Not applicable | No public exploit | The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs. |
| CVE-2000-0294 | High | 2000-04-10 | Not applicable | No public exploit | Buffer overflow in healthd for FreeBSD allows local users to gain root privileges. |
| CVE-2000-0298 | High | 2000-04-07 | Not applicable | No public exploit | The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories. |
| CVE-2000-0300 | High | 2000-04-06 | Not applicable | Working exploit published | The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. |
| CVE-2000-0277 | High | 2000-04-03 | Not applicable | No public exploit | Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability. |
| CVE-2000-0296 | High | 2000-03-31 | Not applicable | No public exploit | fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck. |
| CVE-2000-0244 | High | 2000-03-29 | Not applicable | Working exploit published | The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication. |
| CVE-2000-0245 | High | 2000-03-27 | Not applicable | Working exploit published | Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts. |
| CVE-2000-0235 | High | 2000-03-27 | Not applicable | No public exploit | Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges. |
| CVE-2000-0247 | High | 2000-03-22 | Not applicable | No public exploit | Unknown vulnerability in Generic-NQS (GNQS) allows local users to gain root privileges. |
| CVE-2000-0229 | High | 2000-03-22 | Not applicable | Working exploit published | gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root. |
| CVE-2000-0231 | High | 2000-03-16 | Not applicable | Working exploit published | Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges. |
| CVE-2000-0233 | High | 2000-03-15 | Not applicable | No public exploit | SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges. |
| CVE-2000-0169 | High | 2000-03-15 | Not applicable | Working exploit published | Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'. |
| CVE-2000-0199 | High | 2000-03-14 | Not applicable | No public exploit | When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password. |
| CVE-2000-0230 | High | 2000-03-13 | Not applicable | Working exploit published | Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable. |
| CVE-2000-0171 | High | 2000-03-11 | Not applicable | Working exploit published | atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges. |
| CVE-2000-0223 | High | 2000-03-10 | Not applicable | Working exploit published | Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter. |
| CVE-2000-0175 | High | 2000-03-09 | Not applicable | No public exploit | Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command. |
| CVE-2000-0202 | High | 2000-03-08 | Not applicable | No public exploit | Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query. |
| CVE-2000-0172 | High | 2000-03-03 | Not applicable | Working exploit published | The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges. |
| CVE-2000-0193 | High | 2000-03-02 | Not applicable | Working exploit published | The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges. |
| CVE-2000-0177 | High | 2000-03-02 | Not applicable | Working exploit published | DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-1999-0693 | High | 2000-03-02 | Not applicable | Working exploit published | Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges. |
| CVE-2000-0207 | High | 2000-03-01 | Not applicable | Working exploit published | SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters. |
| CVE-2000-0191 | High | 2000-02-29 | Not applicable | Working exploit published | Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack. |
| CVE-2000-0196 | High | 2000-02-28 | Not applicable | No public exploit | Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message. |
| CVE-2000-0186 | High | 2000-02-28 | Not applicable | No public exploit | Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument. |