Overview 1,075 matches · 5 in Waratek scope · 0 protected · 7 exploited · 0 CISA KEV · 361 public PoC · 14 EPSS ≥ 0.5
1,075matches
5in Waratek scope0.5%
0protected0.0%
7exploited0.7%
0CISA KEV0.0%
361public PoC33.6%
14EPSS ≥ 0.51.3%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
5
0.5%
Outside Waratek scope
0
0.0%
Not applicable
1,070
99.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
1,075
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
7
0.7%
Working exploit published
355
33.0%
Proof of concept only
0
0.0%
Forecast only
1
0.1%
No public exploit
712
66.2%
split by
peak 423 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000255
No exploit published2
Not applicable253
High255
not blocked255
Exploited2
Working exploit published119
No public exploit134
1988199019921994199619982000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-1207 | High | 2000-09-30 | Not applicable | No public exploit | userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LC_ALL environment variables (CVE-2000-0844). |
| CVE-1999-0761 | High | 2000-09-16 | Not applicable | No public exploit | Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. |
| CVE-2000-1079 | High | 2000-08-29 | Not applicable | No public exploit | Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram. |
| CVE-2000-0624 | High | 2000-07-20 | Not applicable | Working exploit published | Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist. |
| CVE-2000-0621 | High | 2000-07-20 | Not applicable | No public exploit | Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability. |
| CVE-2000-0622 | High | 2000-07-19 | Not applicable | Working exploit published | Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter. |
| CVE-2000-0627 | High | 2000-07-18 | Not applicable | No public exploit | BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl. |
| CVE-2000-0632 | High | 2000-07-17 | Not applicable | No public exploit | Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string. |
| CVE-2000-0623 | High | 2000-07-17 | Not applicable | No public exploit | Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header. |
| CVE-2000-0666 | High | 2000-07-16 | Not applicable | Working exploit published | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges. |
| CVE-2000-0675 | High | 2000-07-13 | Not applicable | Working exploit published | Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string. |
| CVE-2000-0670 | High | 2000-07-12 | Not applicable | Working exploit published | The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0629 | High | 2000-07-12 | Not applicable | No public exploit | The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet. |
| CVE-2000-0372 | High | 2000-07-12 | Not applicable | No public exploit | Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges. |
| CVE-1999-0812 | High | 2000-07-12 | Not applicable | No public exploit | Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations. |
| CVE-2000-0638 | High | 2000-07-11 | Not applicable | Working exploit published | bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter. |
| CVE-2000-0628 | High | 2000-07-11 | Not applicable | No public exploit | The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files. |
| CVE-2000-0635 | High | 2000-07-10 | Not applicable | No public exploit | The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0614 | High | 2000-07-10 | Not applicable | No public exploit | Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachments which specify absolute path names for the decompressed output. |
| CVE-2000-0641 | High | 2000-07-08 | Not applicable | Working exploit published | Savant web server allows remote attackers to execute arbitrary commands via a long GET request. |
| CVE-2000-0640 | High | 2000-07-08 | Not applicable | Working exploit published | Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not. |
| CVE-2000-0651 | High | 2000-07-07 | Not applicable | No public exploit | The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine. |
| CVE-2000-0573 | High | 2000-07-07 | Not applicable | Working exploit published | The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command. |
| CVE-2000-0575 | High | 2000-07-05 | Not applicable | No public exploit | SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS. |
| CVE-2000-0590 | High | 2000-07-04 | Not applicable | Working exploit published | Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter. |
| CVE-2000-0566 | High | 2000-07-03 | Not applicable | No public exploit | makewhatis in Linux man package allows local users to overwrite files via a symlink attack. |
| CVE-2000-0584 | High | 2000-07-02 | Not applicable | Working exploit published | Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name. |
| CVE-2000-0599 | High | 2000-06-29 | Not applicable | No public exploit | Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port. |
| CVE-2000-0586 | High | 2000-06-29 | Not applicable | Working exploit published | Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary commands via the SUMMON command. |
| CVE-2000-0597 | High | 2000-06-27 | Not applicable | No public exploit | Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability. |
| CVE-2000-0596 | High | 2000-06-27 | Not applicable | No public exploit | Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document, which could allow remote attackers to execute arbitrary commands, aka the "IE Script" vulnerability. |
| CVE-2000-0592 | High | 2000-06-27 | Not applicable | Working exploit published | Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE commands. |
| CVE-2000-0600 | High | 2000-06-26 | Not applicable | No public exploit | Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL. |
| CVE-2000-0589 | High | 2000-06-26 | Not applicable | Working exploit published | SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration. |
| CVE-2000-0587 | High | 2000-06-26 | Not applicable | No public exploit | The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability. |
| CVE-2000-0585 | High | 2000-06-24 | Not applicable | No public exploit | ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0562 | High | 2000-06-22 | Not applicable | No public exploit | BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lower. |
| CVE-2000-0607 | High | 2000-06-21 | Not applicable | Working exploit published | Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings. |
| CVE-2000-0606 | High | 2000-06-21 | Not applicable | No public exploit | Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter. |
| CVE-2000-0577 | High | 2000-06-21 | Not applicable | Working exploit published | Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0533 | High | 2000-06-20 | Not applicable | No public exploit | Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files. |
| CVE-2000-0466 | High | 2000-06-20 | Not applicable | No public exploit | AIX cdmount allows local users to gain root privileges via shell metacharacters. |
| CVE-2000-0561 | High | 2000-06-19 | Not applicable | No public exploit | Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request. |
| CVE-2000-0541 | High | 2000-06-17 | Not applicable | No public exploit | The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command. |
| CVE-2000-0494 | High | 2000-06-16 | Not applicable | Working exploit published | Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script. |
| CVE-2000-0483 | High | 2000-06-15 | Not applicable | No public exploit | The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization. |
| CVE-2000-0473 | High | 2000-06-15 | Not applicable | Working exploit published | Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin directory. |
| CVE-2000-0514 | High | 2000-06-14 | Not applicable | No public exploit | GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges. |
| CVE-2000-0471 | High | 2000-06-14 | Not applicable | Working exploit published | Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname. |
| CVE-2000-0639 | High | 2000-06-11 | Not applicable | Working exploit published | The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary commands by using bbd to upload a file whose extension will cause it to be executed as a CGI script by the web server. |
| CVE-2000-0527 | High | 2000-06-09 | Not applicable | Working exploit published | userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0506 | High | 2000-06-09 | Not applicable | Working exploit published | The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability." |
| CVE-2000-0525 | High | 2000-06-08 | Not applicable | No public exploit | OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon. |
| CVE-2000-0499 | High | 2000-06-08 | No exploit published | No public exploit | The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. |
| CVE-2000-0498 | High | 2000-06-08 | Not applicable | No public exploit | Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. |
| CVE-2000-0497 | High | 2000-06-08 | No exploit published | No public exploit | IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. |
| CVE-2000-0532 | High | 2000-06-07 | Not applicable | No public exploit | A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 722 even if port 22 is otherwise filtered. |
| CVE-2000-0520 | High | 2000-06-07 | Not applicable | Working exploit published | Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name. |
| CVE-2000-0515 | High | 2000-06-07 | Not applicable | Working exploit published | The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges. |
| CVE-2000-0376 | High | 2000-06-07 | Not applicable | No public exploit | Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request. |
| CVE-2000-0558 | High | 2000-06-06 | Not applicable | No public exploit | Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345. |
| CVE-2000-0523 | High | 2000-06-06 | Not applicable | Working exploit published | Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command. |
| CVE-2000-0516 | High | 2000-06-06 | Not applicable | Working exploit published | When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server. |
| CVE-2000-0557 | High | 2000-06-05 | Not applicable | No public exploit | Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request. |
| CVE-2000-0537 | High | 2000-06-05 | Not applicable | Working exploit published | BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG environmental variable. |
| CVE-2000-0536 | High | 2000-06-04 | Not applicable | No public exploit | xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry. |
| CVE-2000-0509 | High | 2000-06-01 | Not applicable | No public exploit | Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname. |
| CVE-2000-0493 | High | 2000-06-01 | Not applicable | Working exploit published | Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string. |
| CVE-2000-0490 | High | 2000-06-01 | Not applicable | Working exploit published | Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request. |
| CVE-2000-0474 | High | 2000-06-01 | Not applicable | Working exploit published | Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory. |
| CVE-2000-0470 | High | 2000-06-01 | Not applicable | Working exploit published | Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request. |
| CVE-2000-0467 | High | 2000-06-01 | Not applicable | Working exploit published | Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function. |
| CVE-1999-0590 | High | 2000-06-01 | Not applicable | No public exploit | A system does not present an appropriate legal message or warning to a user who is accessing it. |
| CVE-2000-0530 | High | 2000-05-31 | Not applicable | Working exploit published | The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files. |
| CVE-2000-0488 | High | 2000-05-30 | Not applicable | No public exploit | Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command. |
| CVE-2000-0454 | High | 2000-05-29 | Not applicable | Working exploit published | Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter. |
| CVE-2000-0460 | High | 2000-05-27 | Not applicable | Working exploit published | Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable. |
| CVE-2000-0491 | High | 2000-05-24 | Not applicable | Working exploit published | Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request. |
| CVE-2000-0446 | High | 2000-05-24 | Not applicable | Working exploit published | Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string. |
| CVE-2000-0443 | High | 2000-05-24 | Not applicable | Working exploit published | The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0442 | High | 2000-05-24 | Not applicable | Working exploit published | Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command. |
| CVE-2000-0398 | High | 2000-05-24 | Not applicable | No public exploit | Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long query_string parameter in the HTTP GET request. |
| CVE-2000-0551 | High | 2000-05-23 | Not applicable | No public exploit | The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files. |
| CVE-2000-0438 | High | 2000-05-22 | Not applicable | Working exploit published | Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. |
| CVE-2000-0431 | High | 2000-05-22 | Not applicable | No public exploit | Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files. |
| CVE-2000-0305 | High | 2000-05-19 | Not applicable | Working exploit published | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability. |
| CVE-2000-0450 | High | 2000-05-18 | Not applicable | No public exploit | Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands. |
| CVE-2000-0437 | High | 2000-05-18 | Not applicable | Working exploit published | Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands. |
| CVE-2000-0464 | High | 2000-05-17 | Not applicable | No public exploit | Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability. |
| CVE-1999-1008 | High | 2000-05-17 | Not applicable | Working exploit published | xsoldier program allows local users to gain root access via a long argument. |
| CVE-2000-0432 | High | 2000-05-16 | Not applicable | Working exploit published | The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0405 | High | 2000-05-16 | Not applicable | Working exploit published | Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet. |
| CVE-2000-0393 | High | 2000-05-16 | Not applicable | Working exploit published | The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute. |
| CVE-2000-0392 | High | 2000-05-16 | Not applicable | No public exploit | Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges. |
| CVE-2000-0391 | High | 2000-05-16 | Not applicable | No public exploit | Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges. |
| CVE-2000-0390 | High | 2000-05-16 | Not applicable | No public exploit | Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges. |
| CVE-2000-0389 | High | 2000-05-16 | Not applicable | Working exploit published | Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges. |
| CVE-2000-0424 | High | 2000-05-15 | Not applicable | Working exploit published | The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0435 | High | 2000-05-13 | Not applicable | No public exploit | The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages. |
| CVE-2000-0434 | High | 2000-05-13 | Not applicable | No public exploit | The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers. |