Overview 1,766 matches · 11 in Waratek scope · 1 protected · 14 exploited · 0 CISA KEV · 603 public PoC · 32 EPSS ≥ 0.5
1,766matches
11in Waratek scope0.6%
1protected0.1%
14exploited0.8%
0CISA KEV0.0%
603public PoC34.1%
32EPSS ≥ 0.51.8%
Protected by Waratek
1
0.1%
Rule in development
0
0.0%
Mitigation candidate
2
0.1%
No exploit published
8
0.5%
Outside Waratek scope
5
0.3%
Not applicable
1,750
99.1%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.1%
partly blocked
0
0.0%
not blocked
1,765
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
14
0.8%
Working exploit published
591
33.5%
Proof of concept only
0
0.0%
Forecast only
2
0.1%
No public exploit
1,159
65.6%
split by
peak 492 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000454
Mitigation candidate2
No exploit published3
Outside Waratek scope2
Not applicable447
High454
not blocked454
Exploited3
Working exploit published197
Forecast only1
No public exploit253
2001492
Protected by Waratek1
No exploit published2
Outside Waratek scope3
Not applicable486
High492
blocked by ARMR today1
not blocked491
Exploited6
Working exploit published158
No public exploit328
1989199119931995199719992001
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2001-1452 | High | 2001-08-31 | Not applicable | No public exploit | By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses. |
| CVE-2001-1069 | High | 2001-08-31 | Not applicable | No public exploit | libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior. |
| CVE-2001-1067 | High | 2001-08-31 | Not applicable | Working exploit published | Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header. |
| CVE-2001-1063 | High | 2001-08-31 | Not applicable | No public exploit | Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument. |
| CVE-2001-1062 | High | 2001-08-31 | Not applicable | No public exploit | Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code. |
| CVE-2001-1061 | High | 2001-08-31 | Not applicable | No public exploit | Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error. |
| CVE-2001-1039 | High | 2001-08-31 | Not applicable | No public exploit | The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer. |
| CVE-2001-1036 | High | 2001-08-31 | Not applicable | Working exploit published | GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory. |
| CVE-2001-1027 | High | 2001-08-31 | Not applicable | No public exploit | Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title. |
| CVE-2001-1025 | High | 2001-08-31 | Not applicable | No public exploit | PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php. |
| CVE-2001-1009 | High | 2001-08-31 | Not applicable | Working exploit published | Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request. |
| CVE-2001-1008 | High | 2001-08-31 | Outside Waratek scope | No public exploit | Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate. |
| CVE-2001-1005 | High | 2001-08-31 | Not applicable | No public exploit | Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges. |
| CVE-2001-1002 | High | 2001-08-31 | Not applicable | Working exploit published | The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands. |
| CVE-2001-0995 | High | 2001-08-31 | Not applicable | No public exploit | PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs. |
| CVE-2001-0981 | High | 2001-08-31 | Not applicable | No public exploit | HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user. |
| CVE-2001-0976 | High | 2001-08-31 | Not applicable | No public exploit | Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX Workload Manager (WLM), allows local users to gain root privileges via modified libraries or environment variables. |
| CVE-2001-0972 | High | 2001-08-31 | Not applicable | No public exploit | Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888." |
| CVE-2001-0970 | High | 2001-08-31 | Not applicable | No public exploit | Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script. |
| CVE-2001-0969 | High | 2001-08-31 | Not applicable | No public exploit | ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts. |
| CVE-2001-0968 | High | 2001-08-31 | Not applicable | No public exploit | Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges. |
| CVE-2001-0966 | High | 2001-08-31 | Not applicable | No public exploit | Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command. |
| CVE-2001-0943 | High | 2001-08-31 | Outside Waratek scope | No public exploit | dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs. |
| CVE-2000-1202 | High | 2001-08-31 | Not applicable | No public exploit | ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class. |
| CVE-2000-1195 | High | 2001-08-31 | Not applicable | No public exploit | telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option. |
| CVE-2000-1194 | High | 2001-08-31 | Not applicable | No public exploit | Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands. |
| CVE-2000-1192 | High | 2001-08-31 | Not applicable | No public exploit | Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string trap. |
| CVE-2001-1389 | High | 2001-08-29 | Not applicable | No public exploit | Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer overflows or improper NULL termination. |
| CVE-2001-1379 | High | 2001-08-29 | Not applicable | No public exploit | The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name. |
| CVE-2001-1153 | High | 2001-08-28 | Not applicable | No public exploit | lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument. |
| CVE-2001-1444 | High | 2001-08-27 | Not applicable | No public exploit | The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack. |
| CVE-2001-1455 | High | 2001-08-24 | Not applicable | No public exploit | Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters. |
| CVE-2001-1091 | High | 2001-08-23 | Not applicable | No public exploit | The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable. |
| CVE-2001-0634 | High | 2001-08-22 | Not applicable | No public exploit | Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service. |
| CVE-2001-0632 | High | 2001-08-22 | Not applicable | No public exploit | Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges. |
| CVE-2001-0626 | High | 2001-08-22 | Not applicable | Working exploit published | O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character. |
| CVE-2001-0625 | High | 2001-08-22 | Not applicable | No public exploit | ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log . |
| CVE-2001-0617 | High | 2001-08-22 | Not applicable | No public exploit | Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled. |
| CVE-2001-0614 | High | 2001-08-22 | Not applicable | Working exploit published | Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL. |
| CVE-2001-0608 | High | 2001-08-22 | Not applicable | No public exploit | HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional privileges and gain access to databases via the AIF - AIFCHANGELOGON program. |
| CVE-2001-0605 | High | 2001-08-22 | Not applicable | No public exploit | Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins-data) file which contains long strings of random data. |
| CVE-2001-0591 | High | 2001-08-22 | Protected by Waratek | No public exploit | Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack. |
| CVE-2001-0587 | High | 2001-08-22 | Not applicable | No public exploit | deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command. |
| CVE-2001-0579 | High | 2001-08-22 | Not applicable | Working exploit published | lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command. |
| CVE-2001-0577 | High | 2001-08-22 | Not applicable | Working exploit published | recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument. |
| CVE-2001-0572 | High | 2001-08-22 | Not applicable | No public exploit | The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands. |
| CVE-2001-0556 | High | 2001-08-22 | Not applicable | No public exploit | The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or portions of a file. |
| CVE-2001-0357 | High | 2001-08-22 | Not applicable | No public exploit | FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message parameters. |
| CVE-2001-1135 | High | 2001-08-14 | Not applicable | No public exploit | ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface from inside access, allowing someone on an internal computer to reconfigure the router, if the password is known. |
| CVE-2001-0629 | High | 2001-08-14 | Not applicable | No public exploit | HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition privileges via a buffer overflow attack in the '-restore_config' command line parameter. |
| CVE-2001-0628 | High | 2001-08-14 | Not applicable | No public exploit | Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user. |
| CVE-2001-0622 | High | 2001-08-14 | Not applicable | No public exploit | The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface. |
| CVE-2001-0621 | High | 2001-08-14 | Not applicable | No public exploit | The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands. |
| CVE-2001-0611 | High | 2001-08-14 | Not applicable | No public exploit | Becky! 2.00.05 and earlier can allow a remote attacker to gain additional privileges via a buffer overflow attack on long messages without newline characters. |
| CVE-2001-0570 | High | 2001-08-14 | Not applicable | No public exploit | minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks. |
| CVE-2001-0562 | High | 2001-08-14 | Not applicable | No public exploit | a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters. |
| CVE-2001-0561 | High | 2001-08-14 | Not applicable | Working exploit published | Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in (1) a1disp2.cgi, (2) a1disp3.cgi, or (3) a1disp4.cgi. |
| CVE-2001-0559 | High | 2001-08-14 | Not applicable | Working exploit published | crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error. |
| CVE-2001-0555 | High | 2001-08-14 | Not applicable | Working exploit published | ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template parameter in SWEditServlet. |
| CVE-2001-0554 | High | 2001-08-14 | Not applicable | Exploited | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function. |
| CVE-2001-0553 | High | 2001-08-14 | Not applicable | Working exploit published | SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use "NP" in the password field. |
| CVE-2001-0538 | High | 2001-08-14 | Not applicable | Working exploit published | Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page. |
| CVE-2001-0533 | High | 2001-08-14 | Not applicable | No public exploit | Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable. |
| CVE-2001-0529 | High | 2001-08-14 | Not applicable | No public exploit | OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack. |
| CVE-2001-0528 | High | 2001-08-14 | No exploit published | No public exploit | Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges. |
| CVE-2001-0527 | High | 2001-08-14 | Not applicable | Working exploit published | DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database. |
| CVE-2001-0525 | High | 2001-08-14 | Not applicable | No public exploit | Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local users to gain privileges via a long first command line argument. |
| CVE-2001-0524 | High | 2001-08-14 | Not applicable | No public exploit | eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier. |
| CVE-2001-0523 | High | 2001-08-14 | Not applicable | No public exploit | eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted variables and perform directory traversal attacks on vulnerable programs that would otherwise be protected. |
| CVE-2001-0522 | High | 2001-08-14 | Not applicable | Working exploit published | Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file. |
| CVE-2001-0521 | High | 2001-08-14 | Not applicable | Working exploit published | Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNICODE encoding of SCRIPT tags within the HTML document. |
| CVE-2001-0520 | High | 2001-08-14 | Not applicable | Working exploit published | Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including (1) onload in the BODY tag, (2) href in the A tag, (3) the BUTTON tag, (4) the INPUT tag, or (5) any other tag in which scripts can be defined. |
| CVE-2001-0519 | High | 2001-08-14 | Not applicable | Working exploit published | Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which includes SCRIPT tags embedded within other SCRIPT tags. |
| CVE-2001-0504 | High | 2001-08-14 | Not applicable | No public exploit | Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying. |
| CVE-2001-1292 | High | 2001-08-13 | Not applicable | No public exploit | Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long password. |
| CVE-2001-1114 | High | 2001-08-13 | Not applicable | No public exploit | book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter. |
| CVE-2001-1113 | High | 2001-08-13 | Not applicable | No public exploit | Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R (recursive) command. |
| CVE-2001-1157 | High | 2001-08-12 | Not applicable | No public exploit | Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to bypass the filtering via (1) an extra leading < and one or more characters before the SCRIPT tag, or (2) tags using Unicode. |
| CVE-2001-1262 | High | 2001-08-07 | Not applicable | No public exploit | Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length community string. |
| CVE-2001-1260 | High | 2001-08-07 | Not applicable | No public exploit | Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot. |
| CVE-2001-1356 | High | 2001-08-04 | Not applicable | No public exploit | NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021. |
| CVE-2001-1130 | High | 2001-08-02 | Not applicable | Working exploit published | Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file to be searched using a .. in the HTTP referer (from the HTTP_REFERER variable) to point to the directory that contains the keylist.txt file. |
| CVE-2001-1118 | High | 2001-08-02 | Not applicable | No public exploit | A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL. |
| CVE-2001-0619 | High | 2001-08-02 | Not applicable | No public exploit | The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to. The 'Network Name' or SSID, which is used as a shared secret to join the network, is transmitted in the clear. |
| CVE-2001-0618 | High | 2001-08-02 | Not applicable | No public exploit | Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (WEP) encryption key. Since the SSID occurs in the clear during communications, a remote attacker could determine the WEP key and decrypt RG-1000 traffic. |
| CVE-2001-0597 | High | 2001-08-02 | Not applicable | Working exploit published | Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack. This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly reduces the password 'search space'. |
| CVE-2001-0596 | High | 2001-08-02 | Not applicable | Working exploit published | Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript. |
| CVE-2001-1471 | High | 2001-07-31 | Not applicable | Working exploit published | prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $l_privnotify in auth.php from being properly initialized, which can be modified by the user and later used in an eval statement. |
| CVE-2001-1060 | High | 2001-07-31 | Not applicable | No public exploit | phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php. |
| CVE-2001-1056 | High | 2001-07-30 | Not applicable | No public exploit | IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid request and allow the connection to the port specified in the DCC SEND request. |
| CVE-2001-1024 | High | 2001-07-27 | Not applicable | No public exploit | login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alternate -classpath argument. |
| CVE-2001-1173 | High | 2001-07-26 | Not applicable | No public exploit | Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases. |
| CVE-2001-1108 | High | 2001-07-26 | Not applicable | Working exploit published | Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the requested URL. |
| CVE-2001-1022 | High | 2001-07-26 | Not applicable | Working exploit published | Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command. |
| CVE-2001-1021 | High | 2001-07-26 | Not applicable | Working exploit published | Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD. |
| CVE-2001-1106 | High | 2001-07-25 | Not applicable | Working exploit published | The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure. |
| CVE-2001-1104 | High | 2001-07-25 | Not applicable | Working exploit published | SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions. |
| CVE-2001-1011 | High | 2001-07-25 | Not applicable | No public exploit | index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters. |
| CVE-2001-0991 | High | 2001-07-24 | Not applicable | Working exploit published | Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious script, which is printed back in an error message. |
| CVE-2001-0989 | High | 2001-07-23 | Not applicable | Working exploit published | Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign. |