Overview 2,071 matches · 16 in Waratek scope · 1 protected · 19 exploited · 0 CISA KEV · 675 public PoC · 40 EPSS ≥ 0.5
2,071matches
16in Waratek scope0.8%
1protected0.0%
19exploited0.9%
0CISA KEV0.0%
675public PoC32.6%
40EPSS ≥ 0.51.9%
Protected by Waratek
1
0.0%
Rule in development
0
0.0%
Mitigation candidate
2
0.1%
No exploit published
13
0.6%
Outside Waratek scope
7
0.3%
Not applicable
2,048
98.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.0%
partly blocked
0
0.0%
not blocked
2,070
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
19
0.9%
Working exploit published
658
31.8%
Proof of concept only
0
0.0%
Forecast only
2
0.1%
No public exploit
1,392
67.2%
split by
peak 776 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000454
Mitigation candidate2
No exploit published3
Outside Waratek scope2
Not applicable447
High454
not blocked454
Exploited3
Working exploit published197
Forecast only1
No public exploit253
2001776
Protected by Waratek1
No exploit published6
Outside Waratek scope5
Not applicable764
High776
blocked by ARMR today1
not blocked775
Exploited11
Working exploit published219
No public exploit546
200221
No exploit published1
Not applicable20
High21
not blocked21
Working exploit published6
No public exploit15
19881990199219941996199820002002
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-0048 | High | 2002-02-27 | Not applicable | Working exploit published | Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server. |
| CVE-2002-0028 | High | 2002-02-27 | Not applicable | No public exploit | Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request. |
| CVE-2002-0004 | High | 2002-02-27 | Not applicable | Working exploit published | Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice. |
| CVE-2002-0003 | High | 2002-02-27 | Not applicable | No public exploit | Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system. |
| CVE-2002-0001 | High | 2002-02-27 | Not applicable | No public exploit | Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list. |
| CVE-2002-0013 | High | 2002-02-13 | Not applicable | Working exploit published | Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available. |
| CVE-2002-0012 | High | 2002-02-13 | Not applicable | No public exploit | Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available. |
| CVE-2001-1058 | High | 2002-02-13 | Not applicable | No public exploit | The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by the -restrict argument) and steal a license via a client request that includes the name of a host that is allowed to obtain the license. |
| CVE-2001-1371 | High | 2002-02-06 | No exploit published | No public exploit | The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager. |
| CVE-2002-0045 | High | 2002-01-31 | Not applicable | No public exploit | slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs. |
| CVE-2002-0043 | High | 2002-01-31 | Not applicable | Working exploit published | sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked. |
| CVE-2002-0010 | High | 2002-01-31 | Not applicable | No public exploit | Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in buglist.cgi, (2) invalid field names from the "boolean chart" query in buglist.cgi, (3) the mybugslink parameter in userprefs.cgi, (4) a malformed bug ID in the buglist parameter in long_list.cgi, and (5) the value parameter in editusers.cgi, which allows groupset privileges to be modified by attackers with blessgroupset privileges. |
| CVE-2002-0008 | High | 2002-01-31 | Not applicable | No public exploit | Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi. |
| CVE-2002-0007 | High | 2002-01-31 | Not applicable | No public exploit | CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server. |
| CVE-2002-0005 | High | 2002-01-31 | Not applicable | Working exploit published | Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame). |
| CVE-2002-0002 | High | 2002-01-31 | Not applicable | Working exploit published | Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code. |
| CVE-2001-0891 | High | 2002-01-31 | Not applicable | No public exploit | Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters. |
| CVE-2001-1457 | High | 2002-01-30 | Not applicable | No public exploit | Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable. |
| CVE-2002-0077 | High | 2002-01-13 | Not applicable | No public exploit | Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the "Local Executable Invocation via Object tag" vulnerability. |
| CVE-2003-0061 | High | 2002-01-11 | Not applicable | No public exploit | Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable. |
| CVE-2002-1594 | High | 2002-01-02 | Not applicable | No public exploit | Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges via a long command line argument. |
| CVE-2001-1584 | High | 2001-12-31 | Not applicable | No public exploit | CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field. |
| CVE-2001-1583 | High | 2001-12-31 | Not applicable | Working exploit published | lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220. |
| CVE-2001-1582 | High | 2001-12-31 | Not applicable | Working exploit published | Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap. |
| CVE-2001-1581 | High | 2001-12-31 | Not applicable | No public exploit | The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header. |
| CVE-2001-1577 | High | 2001-12-31 | Not applicable | No public exploit | Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused. |
| CVE-2001-1574 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code. |
| CVE-2001-1573 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to execute arbitrary code via a certain configuration parameter. |
| CVE-2001-1572 | High | 2001-12-31 | Not applicable | No public exploit | The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets. |
| CVE-2001-1566 | High | 2001-12-31 | Not applicable | No public exploit | Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function. |
| CVE-2001-1563 | High | 2001-12-31 | No exploit published | No public exploit | Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers. |
| CVE-2001-1562 | High | 2001-12-31 | Not applicable | No public exploit | Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename. |
| CVE-2001-1561 | High | 2001-12-31 | Not applicable | Working exploit published | Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments. |
| CVE-2001-1557 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges. |
| CVE-2001-1547 | High | 2001-12-31 | Not applicable | No public exploit | Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, does not block email attachments from forwarded messages, which could allow remote attackers to execute arbitrary code. |
| CVE-2001-1546 | High | 2001-12-31 | Not applicable | Working exploit published | Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file. |
| CVE-2001-1543 | High | 2001-12-31 | Not applicable | No public exploit | Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attackers to gain access to the camera. |
| CVE-2001-1542 | High | 2001-12-31 | Not applicable | No public exploit | NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments. |
| CVE-2001-1541 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument. |
| CVE-2001-1538 | High | 2001-12-31 | Not applicable | No public exploit | SpeedXess HA-120 DSL router has a default administrative password of "speedxess", which allows remote attackers to gain access. |
| CVE-2001-1537 | High | 2001-12-31 | Not applicable | No public exploit | The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, which could allow attackers to obtain authentication information and gain privileges. |
| CVE-2001-1536 | High | 2001-12-31 | Not applicable | No public exploit | Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack. |
| CVE-2001-1531 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a long filename. |
| CVE-2001-1529 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of details in the vendor advisory, it is not clear if this is the same issue as CVE-2001-0779. |
| CVE-2001-1515 | High | 2001-12-31 | Not applicable | No public exploit | Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may cause the directories to have less restrictive permissions than intended. |
| CVE-2001-1514 | High | 2001-12-31 | Not applicable | No public exploit | ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to (1) child processes created with <CFEXECUTE> and (2) child processes that call the CreateProcess function and are executed with <CFOBJECT> or end with the CFX extension, which allows attackers to execute programs with the permissions of the System account. |
| CVE-2001-1513 | High | 2001-12-31 | Not applicable | No public exploit | Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' (slash), as demonstrated using ctx. |
| CVE-2001-1507 | High | 2001-12-31 | Not applicable | No public exploit | OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged. |
| CVE-2001-1504 | High | 2001-12-31 | Not applicable | No public exploit | Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message. |
| CVE-2001-1502 | High | 2001-12-31 | Not applicable | Working exploit published | webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter. |
| CVE-2001-1500 | High | 2001-12-31 | Not applicable | No public exploit | ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged. |
| CVE-2001-1498 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script. |
| CVE-2001-1495 | High | 2001-12-31 | Not applicable | No public exploit | network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter. |
| CVE-2001-1484 | High | 2001-12-31 | Not applicable | No public exploit | Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication. |
| CVE-2001-1482 | High | 2001-12-31 | Not applicable | No public exploit | SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby variable. |
| CVE-2001-1480 | High | 2001-12-31 | No exploit published | No public exploit | Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard. |
| CVE-2001-1478 | High | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code. |
| CVE-2001-1211 | High | 2001-12-31 | Not applicable | No public exploit | Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain. |
| CVE-2001-1208 | High | 2001-12-31 | Not applicable | No public exploit | Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code. |
| CVE-2001-1466 | High | 2001-12-30 | Not applicable | No public exploit | Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password. |
| CVE-2001-1207 | High | 2001-12-30 | Not applicable | No public exploit | Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the control codes (1) ~#MC, (2) ~#TF, or (3) ~#RA. |
| CVE-2001-1206 | High | 2001-12-30 | Not applicable | No public exploit | Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable. |
| CVE-2001-1433 | High | 2001-12-29 | Not applicable | No public exploit | Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities. |
| CVE-2001-1432 | High | 2001-12-29 | Not applicable | No public exploit | Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. |
| CVE-2001-1202 | High | 2001-12-28 | Not applicable | Working exploit published | Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on other clients via a URL that generates an error. |
| CVE-2001-1352 | High | 2001-12-27 | Not applicable | No public exploit | Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter. |
| CVE-2001-1203 | High | 2001-12-27 | Not applicable | No public exploit | Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges. |
| CVE-2001-1223 | High | 2001-12-26 | Not applicable | No public exploit | The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server. |
| CVE-2001-1351 | High | 2001-12-25 | Not applicable | No public exploit | Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers. |
| CVE-2001-1224 | High | 2001-12-23 | Not applicable | No public exploit | get_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack. |
| CVE-2001-1440 | High | 2001-12-21 | Not applicable | No public exploit | Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system. |
| CVE-2001-1220 | High | 2001-12-21 | Not applicable | No public exploit | D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base (MIB), which allows remote attackers to gain administrative privileges. |
| CVE-2001-1216 | High | 2001-12-21 | Outside Waratek scope | No public exploit | Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page. |
| CVE-2001-0873 | High | 2001-12-21 | Not applicable | Working exploit published | uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option. |
| CVE-2001-0872 | High | 2001-12-21 | Not applicable | No public exploit | OpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment variables such as LD_PRELOAD, which allows local users to gain root privileges. |
| CVE-2001-0871 | High | 2001-12-21 | Not applicable | No public exploit | Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10. |
| CVE-2001-0869 | High | 2001-12-21 | Not applicable | No public exploit | Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands. |
| CVE-2001-1215 | High | 2001-12-20 | Not applicable | No public exploit | Format string vulnerability in PFinger 0.7.5 through 0.7.7 allows remote attackers to execute arbitrary code via format string specifiers in a .plan file. |
| CVE-2001-0876 | High | 2001-12-20 | Not applicable | Exploited | Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL. |
| CVE-2001-0542 | High | 2001-12-20 | Not applicable | No public exploit | Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879. |
| CVE-2001-0889 | High | 2001-12-19 | Not applicable | No public exploit | Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2001-1201 | High | 2001-12-17 | Not applicable | No public exploit | Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file. |
| CVE-2001-1200 | High | 2001-12-17 | Not applicable | No public exploit | Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys. |
| CVE-2001-1199 | High | 2001-12-17 | Not applicable | Working exploit published | Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter. |
| CVE-2001-1196 | High | 2001-12-17 | Not applicable | Working exploit published | Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument. |
| CVE-2001-1214 | High | 2001-12-15 | Not applicable | No public exploit | manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters. |
| CVE-2001-1198 | High | 2001-12-15 | Not applicable | No public exploit | RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option. |
| CVE-2001-1195 | High | 2001-12-15 | Not applicable | Working exploit published | Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges. |
| CVE-2001-0727 | High | 2001-12-14 | Not applicable | No public exploit | Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer to believe that the file is safe to open without prompting the user, aka the "File Execution Vulnerability." |
| CVE-2001-1192 | High | 2001-12-13 | Not applicable | No public exploit | Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client. |
| CVE-2001-0797 | High | 2001-12-12 | Not applicable | Exploited | Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin. |
| CVE-2001-1188 | High | 2001-12-11 | Not applicable | Working exploit published | mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields. |
| CVE-2001-1187 | High | 2001-12-11 | Not applicable | No public exploit | csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter. |
| CVE-2001-0953 | High | 2001-12-08 | Not applicable | No public exploit | Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root. |
| CVE-2001-0867 | High | 2001-12-06 | Not applicable | No public exploit | Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls. |
| CVE-2001-0866 | High | 2001-12-06 | Not applicable | No public exploit | Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls. |
| CVE-2001-0865 | High | 2001-12-06 | Not applicable | No public exploit | Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access. |
| CVE-2001-0864 | High | 2001-12-06 | Not applicable | No public exploit | Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions. |
| CVE-2001-0862 | High | 2001-12-06 | Not applicable | No public exploit | Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL. |
| CVE-2001-0860 | High | 2001-12-06 | Not applicable | No public exploit | Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation (NAT). |