Overview 2,050 matches · 15 in Waratek scope · 1 protected · 19 exploited · 0 CISA KEV · 669 public PoC · 39 EPSS ≥ 0.5
2,050matches
15in Waratek scope0.7%
1protected0.0%
19exploited0.9%
0CISA KEV0.0%
669public PoC32.6%
39EPSS ≥ 0.51.9%
Protected by Waratek
1
0.0%
Rule in development
0
0.0%
Mitigation candidate
2
0.1%
No exploit published
12
0.6%
Outside Waratek scope
7
0.3%
Not applicable
2,028
98.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.0%
partly blocked
0
0.0%
not blocked
2,049
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
19
0.9%
Working exploit published
652
31.8%
Proof of concept only
0
0.0%
Forecast only
2
0.1%
No public exploit
1,377
67.2%
split by
peak 776 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000454
Mitigation candidate2
No exploit published3
Outside Waratek scope2
Not applicable447
High454
not blocked454
Exploited3
Working exploit published197
Forecast only1
No public exploit253
2001776
Protected by Waratek1
No exploit published6
Outside Waratek scope5
Not applicable764
High776
blocked by ARMR today1
not blocked775
Exploited11
Working exploit published219
No public exploit546
1989199119931995199719992001
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2001-1584 | High | 2001-12-31 | Not applicable | No public exploit | CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field. |
| CVE-2001-1583 | High | 2001-12-31 | Not applicable | Working exploit published | lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220. |
| CVE-2001-1582 | High | 2001-12-31 | Not applicable | Working exploit published | Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap. |
| CVE-2001-1581 | High | 2001-12-31 | Not applicable | No public exploit | The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header. |
| CVE-2001-1577 | High | 2001-12-31 | Not applicable | No public exploit | Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused. |
| CVE-2001-1574 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code. |
| CVE-2001-1573 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to execute arbitrary code via a certain configuration parameter. |
| CVE-2001-1572 | High | 2001-12-31 | Not applicable | No public exploit | The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets. |
| CVE-2001-1566 | High | 2001-12-31 | Not applicable | No public exploit | Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function. |
| CVE-2001-1563 | High | 2001-12-31 | No exploit published | No public exploit | Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers. |
| CVE-2001-1562 | High | 2001-12-31 | Not applicable | No public exploit | Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename. |
| CVE-2001-1561 | High | 2001-12-31 | Not applicable | Working exploit published | Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments. |
| CVE-2001-1557 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges. |
| CVE-2001-1547 | High | 2001-12-31 | Not applicable | No public exploit | Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, does not block email attachments from forwarded messages, which could allow remote attackers to execute arbitrary code. |
| CVE-2001-1546 | High | 2001-12-31 | Not applicable | Working exploit published | Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file. |
| CVE-2001-1543 | High | 2001-12-31 | Not applicable | No public exploit | Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attackers to gain access to the camera. |
| CVE-2001-1542 | High | 2001-12-31 | Not applicable | No public exploit | NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments. |
| CVE-2001-1541 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument. |
| CVE-2001-1538 | High | 2001-12-31 | Not applicable | No public exploit | SpeedXess HA-120 DSL router has a default administrative password of "speedxess", which allows remote attackers to gain access. |
| CVE-2001-1537 | High | 2001-12-31 | Not applicable | No public exploit | The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, which could allow attackers to obtain authentication information and gain privileges. |
| CVE-2001-1536 | High | 2001-12-31 | Not applicable | No public exploit | Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack. |
| CVE-2001-1531 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a long filename. |
| CVE-2001-1529 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of details in the vendor advisory, it is not clear if this is the same issue as CVE-2001-0779. |
| CVE-2001-1515 | High | 2001-12-31 | Not applicable | No public exploit | Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may cause the directories to have less restrictive permissions than intended. |
| CVE-2001-1514 | High | 2001-12-31 | Not applicable | No public exploit | ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to (1) child processes created with <CFEXECUTE> and (2) child processes that call the CreateProcess function and are executed with <CFOBJECT> or end with the CFX extension, which allows attackers to execute programs with the permissions of the System account. |
| CVE-2001-1513 | High | 2001-12-31 | Not applicable | No public exploit | Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' (slash), as demonstrated using ctx. |
| CVE-2001-1507 | High | 2001-12-31 | Not applicable | No public exploit | OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged. |
| CVE-2001-1504 | High | 2001-12-31 | Not applicable | No public exploit | Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message. |
| CVE-2001-1502 | High | 2001-12-31 | Not applicable | Working exploit published | webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter. |
| CVE-2001-1500 | High | 2001-12-31 | Not applicable | No public exploit | ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged. |
| CVE-2001-1498 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script. |
| CVE-2001-1495 | High | 2001-12-31 | Not applicable | No public exploit | network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter. |
| CVE-2001-1484 | High | 2001-12-31 | Not applicable | No public exploit | Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication. |
| CVE-2001-1482 | High | 2001-12-31 | Not applicable | No public exploit | SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby variable. |
| CVE-2001-1480 | High | 2001-12-31 | No exploit published | No public exploit | Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard. |
| CVE-2001-1478 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code. |
| CVE-2001-1211 | High | 2001-12-31 | Not applicable | No public exploit | Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain. |
| CVE-2001-1208 | High | 2001-12-31 | Not applicable | No public exploit | Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code. |
| CVE-2001-1466 | High | 2001-12-30 | Not applicable | No public exploit | Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password. |
| CVE-2001-1207 | High | 2001-12-30 | Not applicable | No public exploit | Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the control codes (1) ~#MC, (2) ~#TF, or (3) ~#RA. |
| CVE-2001-1206 | High | 2001-12-30 | Not applicable | No public exploit | Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable. |
| CVE-2001-1433 | High | 2001-12-29 | Not applicable | No public exploit | Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities. |
| CVE-2001-1432 | High | 2001-12-29 | Not applicable | No public exploit | Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. |
| CVE-2001-1202 | High | 2001-12-28 | Not applicable | Working exploit published | Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on other clients via a URL that generates an error. |
| CVE-2001-1352 | High | 2001-12-27 | Not applicable | No public exploit | Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter. |
| CVE-2001-1203 | High | 2001-12-27 | Not applicable | No public exploit | Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges. |
| CVE-2001-1223 | High | 2001-12-26 | Not applicable | No public exploit | The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server. |
| CVE-2001-1351 | High | 2001-12-25 | Not applicable | No public exploit | Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers. |
| CVE-2001-1224 | High | 2001-12-23 | Not applicable | No public exploit | get_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack. |
| CVE-2001-1440 | High | 2001-12-21 | Not applicable | No public exploit | Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system. |
| CVE-2001-1220 | High | 2001-12-21 | Not applicable | No public exploit | D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base (MIB), which allows remote attackers to gain administrative privileges. |
| CVE-2001-1216 | High | 2001-12-21 | Outside Waratek scope | No public exploit | Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page. |
| CVE-2001-0873 | High | 2001-12-21 | Not applicable | Working exploit published | uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option. |
| CVE-2001-0872 | High | 2001-12-21 | Not applicable | No public exploit | OpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment variables such as LD_PRELOAD, which allows local users to gain root privileges. |
| CVE-2001-0871 | High | 2001-12-21 | Not applicable | No public exploit | Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10. |
| CVE-2001-0869 | High | 2001-12-21 | Not applicable | No public exploit | Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands. |
| CVE-2001-1215 | High | 2001-12-20 | Not applicable | No public exploit | Format string vulnerability in PFinger 0.7.5 through 0.7.7 allows remote attackers to execute arbitrary code via format string specifiers in a .plan file. |
| CVE-2001-0876 | High | 2001-12-20 | Not applicable | Exploited | Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL. |
| CVE-2001-0542 | High | 2001-12-20 | Not applicable | No public exploit | Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879. |
| CVE-2001-0889 | High | 2001-12-19 | Not applicable | No public exploit | Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2001-1201 | High | 2001-12-17 | Not applicable | No public exploit | Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file. |
| CVE-2001-1200 | High | 2001-12-17 | Not applicable | No public exploit | Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys. |
| CVE-2001-1199 | High | 2001-12-17 | Not applicable | Working exploit published | Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter. |
| CVE-2001-1196 | High | 2001-12-17 | Not applicable | Working exploit published | Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument. |
| CVE-2001-1214 | High | 2001-12-15 | Not applicable | No public exploit | manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters. |
| CVE-2001-1198 | High | 2001-12-15 | Not applicable | No public exploit | RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option. |
| CVE-2001-1195 | High | 2001-12-15 | Not applicable | Working exploit published | Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges. |
| CVE-2001-0727 | High | 2001-12-14 | Not applicable | No public exploit | Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer to believe that the file is safe to open without prompting the user, aka the "File Execution Vulnerability." |
| CVE-2001-1192 | High | 2001-12-13 | Not applicable | No public exploit | Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client. |
| CVE-2001-0797 | High | 2001-12-12 | Not applicable | Exploited | Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin. |
| CVE-2001-1188 | High | 2001-12-11 | Not applicable | Working exploit published | mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields. |
| CVE-2001-1187 | High | 2001-12-11 | Not applicable | No public exploit | csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter. |
| CVE-2001-0953 | High | 2001-12-08 | Not applicable | No public exploit | Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root. |
| CVE-2001-0867 | High | 2001-12-06 | Not applicable | No public exploit | Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls. |
| CVE-2001-0866 | High | 2001-12-06 | Not applicable | No public exploit | Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls. |
| CVE-2001-0865 | High | 2001-12-06 | Not applicable | No public exploit | Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access. |
| CVE-2001-0864 | High | 2001-12-06 | Not applicable | No public exploit | Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions. |
| CVE-2001-0862 | High | 2001-12-06 | Not applicable | No public exploit | Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL. |
| CVE-2001-0860 | High | 2001-12-06 | Not applicable | No public exploit | Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation (NAT). |
| CVE-2001-0857 | High | 2001-12-06 | Not applicable | Working exploit published | Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter. |
| CVE-2001-0855 | High | 2001-12-06 | Not applicable | Working exploit published | Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable. |
| CVE-2001-0850 | High | 2001-12-06 | Not applicable | No public exploit | A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow. |
| CVE-2001-0849 | High | 2001-12-06 | Not applicable | No public exploit | viralator CGI script in Viralator 0.9pre1 and earlier allows remote attackers to execute arbitrary code via a URL for a file being downloaded, which is insecurely passed to a call to wget. |
| CVE-2001-0847 | High | 2001-12-06 | Not applicable | No public exploit | Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via (1) URL encoding the request, or (2) directly requesting the ReplicaID. |
| CVE-2001-0846 | High | 2001-12-06 | Not applicable | No public exploit | Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf). |
| CVE-2001-0844 | High | 2001-12-06 | Not applicable | No public exploit | Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter. |
| CVE-2001-0842 | High | 2001-12-06 | Not applicable | No public exploit | Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie. |
| CVE-2001-0841 | High | 2001-12-06 | Not applicable | No public exploit | Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie. |
| CVE-2001-0840 | High | 2001-12-06 | Not applicable | No public exploit | Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1) SNMP and (2) DMI. |
| CVE-2001-0839 | High | 2001-12-06 | Not applicable | Working exploit published | ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing. |
| CVE-2001-0838 | High | 2001-12-06 | Not applicable | Working exploit published | Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command. |
| CVE-2001-0836 | High | 2001-12-06 | Not applicable | Working exploit published | Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request. |
| CVE-2001-0835 | High | 2001-12-06 | Not applicable | No public exploit | Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup. |
| CVE-2001-0833 | High | 2001-12-06 | Outside Waratek scope | Working exploit published | Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the "Oracle Trace Collection Security Vulnerability." |
| CVE-2001-0830 | High | 2001-12-06 | Not applicable | Working exploit published | 6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers to cause a denial of service (resource exhaustion) by repeatedly connecting to and disconnecting from the server. |
| CVE-2001-0827 | High | 2001-12-06 | Not applicable | No public exploit | Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of "PASV" requests. |
| CVE-2001-0826 | High | 2001-12-06 | Not applicable | No public exploit | Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS, (4) PORT, (5) DELE, (6) REST, (7) RMD, or (8) MKD. |
| CVE-2001-0825 | High | 2001-12-06 | Not applicable | No public exploit | Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check. |
| CVE-2001-0824 | High | 2001-12-06 | No exploit published | No public exploit | Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page. |
| CVE-2001-0823 | High | 2001-12-06 | Not applicable | Working exploit published | The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR). |