Overview 236 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 63 public PoC · 4 EPSS ≥ 0.5
236matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
63public PoC26.7%
4EPSS ≥ 0.51.7%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
236
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
236
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
63
26.7%
Proof of concept only
0
0.0%
Forecast only
2
0.8%
No public exploit
171
72.5%
split by
peak 111 / year
19901
Not applicable1
Low1
not blocked1
No public exploit1
19910
19921
Not applicable1
Low1
not blocked1
No public exploit1
19932
Not applicable2
Low2
not blocked2
No public exploit2
19941
Not applicable1
Low1
not blocked1
Working exploit published1
19951
Not applicable1
Low1
not blocked1
No public exploit1
19969
Not applicable9
Low9
not blocked9
No public exploit9
199719
Not applicable19
Low19
not blocked19
Working exploit published4
Forecast only2
No public exploit13
199823
Not applicable23
Low23
not blocked23
Working exploit published5
No public exploit18
1999111
Not applicable111
Low111
not blocked111
Working exploit published28
No public exploit83
200068
Not applicable68
Low68
not blocked68
Working exploit published25
No public exploit43
19901991199219931994199519961997199819992000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0667 | Low | 2000-07-27 | Not applicable | No public exploit | Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service. |
| CVE-2000-0615 | Low | 2000-07-19 | Not applicable | No public exploit | LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files. |
| CVE-2000-0633 | Low | 2000-07-18 | Not applicable | No public exploit | Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system. |
| CVE-2000-0649 | Low | 2000-07-13 | Not applicable | Working exploit published | IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined. |
| CVE-2000-0650 | Low | 2000-07-11 | Not applicable | No public exploit | The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse. |
| CVE-2000-0605 | Low | 2000-07-10 | Not applicable | No public exploit | Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access control allows users to access the passwords. |
| CVE-1999-0585 | Low | 2000-07-01 | Not applicable | No public exploit | A Windows NT administrator account has the default name of Administrator. |
| CVE-2000-0579 | Low | 2000-06-21 | Not applicable | No public exploit | IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited. |
| CVE-2000-0578 | Low | 2000-06-21 | Not applicable | No public exploit | SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user. |
| CVE-2000-0501 | Low | 2000-06-16 | Not applicable | Working exploit published | Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server. |
| CVE-2000-0565 | Low | 2000-06-13 | Not applicable | No public exploit | SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. (dot dot) attack. |
| CVE-2000-0502 | Low | 2000-06-08 | Not applicable | No public exploit | Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion. |
| CVE-2000-0559 | Low | 2000-06-07 | Not applicable | Working exploit published | eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords. |
| CVE-2000-0503 | Low | 2000-06-06 | Not applicable | No public exploit | The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event. |
| CVE-2000-0519 | Low | 2000-06-05 | Not applicable | No public exploit | Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities. |
| CVE-2000-0518 | Low | 2000-06-05 | Not applicable | No public exploit | Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities. |
| CVE-2000-0487 | Low | 2000-06-01 | Not applicable | No public exploit | The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability. |
| CVE-2000-0485 | Low | 2000-05-30 | Not applicable | No public exploit | Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, aka the "DTS Password" vulnerability. |
| CVE-2000-0402 | Low | 2000-05-30 | Not applicable | Working exploit published | The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability. |
| CVE-2000-0461 | Low | 2000-05-29 | Not applicable | No public exploit | The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call. |
| CVE-2000-0455 | Low | 2000-05-29 | Not applicable | No public exploit | Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option. |
| CVE-2000-0462 | Low | 2000-05-28 | Not applicable | No public exploit | ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory. |
| CVE-2000-0456 | Low | 2000-05-28 | Not applicable | No public exploit | NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka "cpu-hog". |
| CVE-2000-0553 | Low | 2000-05-26 | Not applicable | No public exploit | Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote attackers to bypass access restrictions. |
| CVE-2000-0445 | Low | 2000-05-24 | Not applicable | No public exploit | The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys. |
| CVE-2000-0379 | Low | 2000-05-16 | Not applicable | Working exploit published | The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so. |
| CVE-2000-0439 | Low | 2000-05-11 | Not applicable | No public exploit | Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability. |
| CVE-2000-0409 | Low | 2000-05-10 | Not applicable | Working exploit published | Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate. |
| CVE-2000-0406 | Low | 2000-05-10 | Not applicable | No public exploit | Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability. |
| CVE-2000-0387 | Low | 2000-05-09 | Not applicable | No public exploit | The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files. |
| CVE-2000-0382 | Low | 2000-05-08 | Not applicable | No public exploit | ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site. |
| CVE-2000-0345 | Low | 2000-05-03 | Not applicable | No public exploit | The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command. |
| CVE-2000-0293 | Low | 2000-05-02 | Not applicable | Working exploit published | aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory. |
| CVE-2000-0334 | Low | 2000-04-24 | Not applicable | No public exploit | The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule. |
| CVE-2000-0458 | Low | 2000-04-22 | Not applicable | No public exploit | The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information. |
| CVE-2000-0336 | Low | 2000-04-21 | Not applicable | Working exploit published | Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. |
| CVE-2000-0311 | Low | 2000-04-20 | Not applicable | No public exploit | The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability. |
| CVE-2000-0270 | Low | 2000-04-18 | Not applicable | No public exploit | The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack. |
| CVE-2000-0269 | Low | 2000-04-18 | Not applicable | No public exploit | Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess. |
| CVE-2000-0266 | Low | 2000-04-18 | Not applicable | No public exploit | Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL. |
| CVE-2000-0264 | Low | 2000-04-17 | Not applicable | Working exploit published | Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods. |
| CVE-2000-0286 | Low | 2000-04-16 | Not applicable | Working exploit published | X fontserver xfs allows local users to cause a denial of service via malformed input to the server. |
| CVE-2000-0263 | Low | 2000-04-16 | Not applicable | Working exploit published | The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request. |
| CVE-2000-0276 | Low | 2000-04-10 | Not applicable | Working exploit published | BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37. |
| CVE-2000-0275 | Low | 2000-04-10 | Not applicable | Working exploit published | CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN. |
| CVE-2000-0274 | Low | 2000-04-10 | Not applicable | Working exploit published | The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name. |
| CVE-2000-0280 | Low | 2000-04-03 | Not applicable | Working exploit published | Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL. |
| CVE-1999-0790 | Low | 2000-04-01 | Not applicable | No public exploit | A remote attacker can read information from a Netscape user's cache via JavaScript. |
| CVE-2000-0232 | Low | 2000-03-30 | Not applicable | Working exploit published | Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request. |
| CVE-2000-0281 | Low | 2000-03-26 | Not applicable | No public exploit | Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message. |
| CVE-2000-0227 | Low | 2000-03-23 | Not applicable | Working exploit published | The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to cause a denial of service by requesting a large number of sockets. |
| CVE-2000-0184 | Low | 2000-03-09 | Not applicable | No public exploit | Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords. |
| CVE-2000-0210 | Low | 2000-02-21 | Not applicable | Working exploit published | The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files. |
| CVE-2000-0154 | Low | 2000-02-16 | Not applicable | Working exploit published | The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack. |
| CVE-2000-0224 | Low | 2000-02-15 | Not applicable | Working exploit published | ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack. |
| CVE-2000-0167 | Low | 2000-02-15 | Not applicable | Working exploit published | IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory. |
| CVE-2000-0147 | Low | 2000-02-08 | Not applicable | No public exploit | snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration. |
| CVE-2000-0472 | Low | 2000-02-06 | Not applicable | Working exploit published | Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID. |
| CVE-2000-0129 | Low | 2000-02-04 | Not applicable | Working exploit published | Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file. |
| CVE-2000-0089 | Low | 2000-02-04 | Not applicable | No public exploit | The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability. |
| CVE-2000-0124 | Low | 2000-02-03 | Not applicable | No public exploit | surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions. |
| CVE-2000-0121 | Low | 2000-02-01 | Not applicable | Working exploit published | The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability. |
| CVE-2000-0132 | Low | 2000-01-31 | Not applicable | Working exploit published | Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function. |
| CVE-1999-0595 | Low | 2000-01-20 | Not applicable | No public exploit | A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded. |
| CVE-2000-0090 | Low | 2000-01-17 | Not applicable | No public exploit | VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack. |
| CVE-2000-0067 | Low | 2000-01-11 | Not applicable | No public exploit | CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack. |
| CVE-2000-0080 | Low | 2000-01-10 | Not applicable | No public exploit | AIX techlibss allows local users to overwrite files via a symlink attack. |
| CVE-2000-0069 | Low | 2000-01-01 | Not applicable | No public exploit | The recover program in Solstice Backup allows local users to restore sensitive files. |
| CVE-1999-1590 | Low | 1999-12-31 | Not applicable | No public exploit | Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the image parameter, a different vulnerability than CVE-1999-0021. |
| CVE-1999-1587 | Low | 1999-12-31 | Not applicable | Working exploit published | /usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option. |
| CVE-1999-1476 | Low | 1999-12-31 | Not applicable | No public exploit | A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the "Invalid Operand with Locked CMPXCHG8B Instruction" problem. |
| CVE-1999-1452 | Low | 1999-12-31 | Not applicable | No public exploit | GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt. |
| CVE-1999-1364 | Low | 1999-12-31 | Not applicable | No public exploit | Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext. |
| CVE-1999-1363 | Low | 1999-12-31 | Not applicable | No public exploit | Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool. |
| CVE-1999-1362 | Low | 1999-12-31 | Not applicable | No public exploit | Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters. |
| CVE-1999-1360 | Low | 1999-12-31 | Not applicable | No public exploit | Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle. |
| CVE-1999-1332 | Low | 1999-12-31 | Not applicable | No public exploit | gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file. |
| CVE-1999-1331 | Low | 1999-12-31 | Not applicable | No public exploit | netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface. |
| CVE-1999-1300 | Low | 1999-12-31 | Not applicable | No public exploit | Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration. |
| CVE-1999-1294 | Low | 1999-12-31 | Not applicable | No public exploit | Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from the Shortcut Bar, which could allow local users to read folders for which they do not have permission. |
| CVE-1999-1259 | Low | 1999-12-31 | Not applicable | No public exploit | Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data from previously deleted files into the Office file, which could allow attackers to obtain sensitive information. |
| CVE-1999-1126 | Low | 1999-12-31 | Not applicable | No public exploit | Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_". |
| CVE-1999-1117 | Low | 1999-12-31 | Not applicable | Working exploit published | lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter. |
| CVE-1999-1102 | Low | 1999-12-31 | Not applicable | No public exploit | lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times. |
| CVE-1999-1042 | Low | 1999-12-31 | Not applicable | No public exploit | Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings. |
| CVE-2000-0076 | Low | 1999-12-30 | Not applicable | No public exploit | nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover. |
| CVE-2000-0008 | Low | 1999-12-26 | Not applicable | No public exploit | FTPPro allows local users to read sensitive information, which is stored in plain text. |
| CVE-2000-0006 | Low | 1999-12-25 | Not applicable | No public exploit | strace allows local users to read arbitrary files via memory mapped file names. |
| CVE-2000-0028 | Low | 1999-12-23 | Not applicable | Working exploit published | Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function. |
| CVE-1999-1001 | Low | 1999-12-16 | Not applicable | No public exploit | Cisco Cache Engine allows a remote attacker to gain access via a null username and password. |
| CVE-2000-0361 | Low | 1999-12-14 | Not applicable | No public exploit | The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information. |
| CVE-1999-1010 | Low | 1999-12-14 | Not applicable | No public exploit | An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy. |
| CVE-1999-1009 | Low | 1999-12-12 | Not applicable | No public exploit | The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system. |
| CVE-1999-0976 | Low | 1999-12-07 | Not applicable | No public exploit | Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail. |
| CVE-1999-0990 | Low | 1999-12-05 | Not applicable | No public exploit | Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system. |
| CVE-2000-0139 | Low | 1999-12-03 | Not applicable | Working exploit published | Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command. |
| CVE-1999-0825 | Low | 1999-12-03 | Not applicable | Working exploit published | The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail. |
| CVE-2000-0366 | Low | 1999-12-02 | Not applicable | No public exploit | dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files. |
| CVE-1999-0862 | Low | 1999-12-02 | Not applicable | No public exploit | Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file. |
| CVE-1999-0850 | Low | 1999-12-02 | Not applicable | No public exploit | The default permissions for Endymion MailMan allow local users to read email or modify files. |