Overview 1,805 matches · 17 in Waratek scope · 1 protected · 5 exploited · 0 CISA KEV · 583 public PoC · 23 EPSS ≥ 0.5
1,805matches
17in Waratek scope0.9%
1protected0.1%
5exploited0.3%
0CISA KEV0.0%
583public PoC32.3%
23EPSS ≥ 0.51.3%
Protected by Waratek
1
0.1%
Rule in development
0
0.0%
Mitigation candidate
7
0.4%
No exploit published
9
0.5%
Outside Waratek scope
9
0.5%
Not applicable
1,779
98.6%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.1%
partly blocked
0
0.0%
not blocked
1,804
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
5
0.3%
Working exploit published
582
32.2%
Proof of concept only
0
0.0%
Forecast only
2
0.1%
No public exploit
1,216
67.4%
split by
peak 706 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
2000467
Mitigation candidate4
No exploit published3
Not applicable460
Medium467
not blocked467
Exploited2
Working exploit published195
No public exploit270
2001706
Mitigation candidate2
No exploit published4
Outside Waratek scope7
Not applicable693
Medium706
not blocked706
Exploited3
Working exploit published219
Forecast only2
No public exploit482
200254
Protected by Waratek1
Mitigation candidate1
No exploit published2
Outside Waratek scope1
Not applicable49
Medium54
blocked by ARMR today1
not blocked53
Working exploit published10
No public exploit44
1990199219941996199820002002
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-0039 | Medium | 2002-03-28 | Not applicable | No public exploit | rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths. |
| CVE-2002-0162 | Medium | 2002-03-27 | Not applicable | Working exploit published | LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory. |
| CVE-2002-0143 | Medium | 2002-03-25 | Not applicable | Working exploit published | Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable. |
| CVE-2002-0136 | Medium | 2002-03-25 | Not applicable | No public exploit | Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript. |
| CVE-2002-0135 | Medium | 2002-03-25 | Not applicable | Working exploit published | Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420). |
| CVE-2002-0131 | Medium | 2002-03-25 | Not applicable | No public exploit | ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script. |
| CVE-2002-0127 | Medium | 2002-03-25 | Not applicable | No public exploit | Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote attackers to cause a denial of service (hang) via a port scan of the WAN port. |
| CVE-2002-0124 | Medium | 2002-03-25 | Not applicable | No public exploit | MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request. |
| CVE-2002-0122 | Medium | 2002-03-25 | Not applicable | No public exploit | Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containing unusual characters. |
| CVE-2002-0119 | Medium | 2002-03-25 | Not applicable | No public exploit | Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS detection. |
| CVE-2002-0116 | Medium | 2002-03-25 | Not applicable | No public exploit | Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap. |
| CVE-2002-0115 | Medium | 2002-03-25 | Not applicable | Working exploit published | Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet. |
| CVE-2002-0114 | Medium | 2002-03-25 | Not applicable | No public exploit | EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform. |
| CVE-2002-0113 | Medium | 2002-03-25 | Not applicable | No public exploit | EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges. NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform. |
| CVE-2002-0112 | Medium | 2002-03-25 | Not applicable | Working exploit published | Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL. |
| CVE-2002-0109 | Medium | 2002-03-25 | Not applicable | No public exploit | Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query. |
| CVE-2002-0107 | Medium | 2002-03-25 | Not applicable | Working exploit published | Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message. |
| CVE-2002-0106 | Medium | 2002-03-25 | Mitigation candidate | Working exploit published | BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name. |
| CVE-2002-0104 | Medium | 2002-03-25 | Not applicable | No public exploit | AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump. |
| CVE-2002-0103 | Medium | 2002-03-25 | Not applicable | No public exploit | An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml. |
| CVE-2002-0102 | Medium | 2002-03-25 | Not applicable | No public exploit | Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of "." characters. |
| CVE-2002-0101 | Medium | 2002-03-25 | Not applicable | No public exploit | Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not released. |
| CVE-2002-0099 | Medium | 2002-03-25 | Not applicable | No public exploit | Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . (dot) characters. |
| CVE-2001-1222 | Medium | 2002-03-25 | Not applicable | No public exploit | Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain. |
| CVE-2000-1210 | Medium | 2002-03-22 | Protected by Waratek | No public exploit | Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp. |
| CVE-2002-0164 | Medium | 2002-03-15 | Not applicable | No public exploit | Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges. |
| CVE-2002-0092 | Medium | 2002-03-15 | Not applicable | No public exploit | CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability. |
| CVE-2002-0085 | Medium | 2002-03-15 | Not applicable | No public exploit | cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request. |
| CVE-2002-0058 | Medium | 2002-03-15 | Outside Waratek scope | No public exploit | Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK. |
| CVE-2002-1619 | Medium | 2002-03-08 | Not applicable | No public exploit | Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump). |
| CVE-2002-0057 | Medium | 2002-03-08 | Not applicable | No public exploit | XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source. |
| CVE-2002-0055 | Medium | 2002-03-08 | Not applicable | No public exploit | SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request. |
| CVE-2002-0052 | Medium | 2002-03-08 | Not applicable | No public exploit | Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read arbitrary files. |
| CVE-2002-0049 | Medium | 2002-03-08 | Not applicable | No public exploit | Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys. |
| CVE-2002-0025 | Medium | 2002-03-08 | Not applicable | No public exploit | Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote attackers to modify which application is used to process a document. |
| CVE-2002-0023 | Medium | 2002-03-08 | Not applicable | Working exploit published | Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks. |
| CVE-2002-0021 | Medium | 2002-03-08 | Not applicable | No public exploit | Network Product Identification (PID) Checker in Microsoft Office v. X for Mac allows remote attackers to cause a denial of service (crash) via a malformed product announcement. |
| CVE-2001-1377 | Medium | 2002-03-04 | Not applicable | No public exploit | Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2. |
| CVE-2002-1637 | Medium | 2002-02-26 | No exploit published | No public exploit | Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges. |
| CVE-2001-1465 | Medium | 2002-02-26 | Not applicable | No public exploit | SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements. |
| CVE-2002-1603 | Medium | 2002-02-13 | Not applicable | Working exploit published | GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed. |
| CVE-2002-1601 | Medium | 2002-02-09 | Not applicable | No public exploit | The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page. |
| CVE-2001-1372 | Medium | 2002-02-06 | No exploit published | No public exploit | Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP file, which leaks the pathname in an error message. |
| CVE-2002-0047 | Medium | 2002-01-31 | Not applicable | No public exploit | CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service (crash) via a short malformed packet. |
| CVE-2002-0046 | Medium | 2002-01-31 | Not applicable | No public exploit | Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet. |
| CVE-2002-0038 | Medium | 2002-01-31 | Not applicable | No public exploit | Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of service by forcing the cache to fill the disk. |
| CVE-2002-0011 | Medium | 2002-01-31 | Not applicable | No public exploit | Information leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more easily conduct attacks on the login. |
| CVE-2002-0009 | Medium | 2002-01-31 | Not applicable | No public exploit | show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu. |
| CVE-1999-1091 | Medium | 2002-01-15 | Not applicable | No public exploit | UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack. |
| CVE-1999-1081 | Medium | 2002-01-15 | Not applicable | Working exploit published | Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. |
| CVE-2002-1600 | Medium | 2002-01-09 | Not applicable | No public exploit | Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter. |
| CVE-2002-1597 | Medium | 2002-01-09 | Not applicable | No public exploit | Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (halt) via a fragmented packet to the Gigabit interface. |
| CVE-2002-1596 | Medium | 2002-01-09 | Not applicable | No public exploit | Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via an HTTP request with large headers. |
| CVE-2002-1595 | Medium | 2002-01-09 | Not applicable | No public exploit | Cisco SN 5420 Storage Router 1.1(5) and earlier allows attackers to read configuration files without authorization. |
| CVE-2001-1585 | Medium | 2001-12-31 | Not applicable | No public exploit | SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as other users by supplying a public key from that user's authorized_keys file. |
| CVE-2001-1580 | Medium | 2001-12-31 | Not applicable | Exploited | Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string. |
| CVE-2001-1579 | Medium | 2001-12-31 | Not applicable | No public exploit | The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service. |
| CVE-2001-1576 | Medium | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument. |
| CVE-2001-1575 | Medium | 2001-12-31 | Not applicable | No public exploit | Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial of service via a long password, possibly due to a buffer overflow. |
| CVE-2001-1571 | Medium | 2001-12-31 | Not applicable | No public exploit | The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing. |
| CVE-2001-1569 | Medium | 2001-12-31 | Not applicable | No public exploit | Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack. |
| CVE-2001-1568 | Medium | 2001-12-31 | Not applicable | No public exploit | CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack. |
| CVE-2001-1567 | Medium | 2001-12-31 | Not applicable | No public exploit | Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino. |
| CVE-2001-1559 | Medium | 2001-12-31 | Not applicable | Working exploit published | The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference. |
| CVE-2001-1558 | Medium | 2001-12-31 | Not applicable | No public exploit | Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash). |
| CVE-2001-1556 | Medium | 2001-12-31 | Not applicable | No public exploit | The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep. |
| CVE-2001-1555 | Medium | 2001-12-31 | Not applicable | No public exploit | pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users' terminals by modifying the ACL of a TTY. |
| CVE-2001-1554 | Medium | 2001-12-31 | Not applicable | No public exploit | IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP packets. |
| CVE-2001-1553 | Medium | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary code via long command line options (1) socks_server, (2) socks_user, and (3) socks_passwd. NOTE: since the default configuration of setiathome is not setuid, perhaps this issue should not be included in CVE. |
| CVE-2001-1552 | Medium | 2001-12-31 | Not applicable | No public exploit | ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol (SSDP) message. NOTE: multiple replies to the original post state that the problem could not be reproduced. |
| CVE-2001-1545 | Medium | 2001-12-31 | Not applicable | No public exploit | Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing. |
| CVE-2001-1544 | Medium | 2001-12-31 | Not applicable | No public exploit | Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request. |
| CVE-2001-1540 | Medium | 2001-12-31 | Not applicable | No public exploit | IPRoute 0.973, 0.974 and 1.18 allows remote attackers to cause a denial of service via fragmented IP packets that split the TCP header. |
| CVE-2001-1539 | Medium | 2001-12-31 | Not applicable | No public exploit | Stack consumption vulnerability in Internet Explorer The JavaScript settimeout function in Internet Explorer allows remote attackers to cause a denial of service (crash) via the JavaScript settimeout function. NOTE: the vendor could not reproduce the problem. |
| CVE-2001-1535 | Medium | 2001-12-31 | Not applicable | No public exploit | Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized access via a brute force attack. |
| CVE-2001-1533 | Medium | 2001-12-31 | Not applicable | No public exploit | Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability. Therefore this "laws of physics" issue might not be included in CVE |
| CVE-2001-1532 | Medium | 2001-12-31 | Not applicable | No public exploit | WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions. |
| CVE-2001-1530 | Medium | 2001-12-31 | Not applicable | No public exploit | run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands. |
| CVE-2001-1528 | Medium | 2001-12-31 | Not applicable | Working exploit published | AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack. |
| CVE-2001-1526 | Medium | 2001-12-31 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the zeit parameter. |
| CVE-2001-1525 | Medium | 2001-12-31 | Not applicable | Working exploit published | Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify news.dat, template.dat and possibly other files via a ".." in the cid parameter. |
| CVE-2001-1524 | Medium | 2001-12-31 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) uname parameter in user.php, (2) ttitle, letter and file parameters in modules.php, (3) subject, story and storyext parameters in submit.php, (4) upload parameter in admin.php and (5) fname parameter in friend.php. |
| CVE-2001-1523 | Medium | 2001-12-31 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the DMOZGateway module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the topic parameter. |
| CVE-2001-1522 | Medium | 2001-12-31 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via a message. |
| CVE-2001-1516 | Medium | 2001-12-31 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews. |
| CVE-2001-1512 | Medium | 2001-12-31 | Not applicable | No public exploit | Unknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF and META-INF directories and execute arbitrary JavaServer Pages (JSP), a variant of CVE-2000-1050. |
| CVE-2001-1511 | Medium | 2001-12-31 | Not applicable | No public exploit | JRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read arbitrary JavaServer Pages (JSP) source code via a request URL containing the source filename ending in (1) "jsp%00" or (2) "js%2570". |
| CVE-2001-1510 | Medium | 2001-12-31 | Not applicable | No public exploit | Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to the requested URL. |
| CVE-2001-1509 | Medium | 2001-12-31 | Not applicable | No public exploit | geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effective user id, which could allow local users to gain privileges. |
| CVE-2001-1508 | Medium | 2001-12-31 | Not applicable | No public exploit | Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument. |
| CVE-2001-1506 | Medium | 2001-12-31 | Not applicable | No public exploit | Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in the file system protection rules, which allows local users to conduct unauthorized operations on restricted files. |
| CVE-2001-1505 | Medium | 2001-12-31 | Not applicable | No public exploit | tinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing and replaying packets. |
| CVE-2001-1501 | Medium | 2001-12-31 | Not applicable | Working exploit published | The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple (1) "*/..", (2) "*/.*", or (3) ".*./*?/" sequences in the argument. |
| CVE-2001-1499 | Medium | 2001-12-31 | Not applicable | No public exploit | Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks. |
| CVE-2001-1494 | Medium | 2001-12-31 | Not applicable | No public exploit | script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command. |
| CVE-2001-1491 | Medium | 2001-12-31 | Not applicable | Working exploit published | Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images. |
| CVE-2001-1490 | Medium | 2001-12-31 | Not applicable | Working exploit published | Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images. |
| CVE-2001-1489 | Medium | 2001-12-31 | Not applicable | Working exploit published | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images. |
| CVE-2001-1488 | Medium | 2001-12-31 | Not applicable | No public exploit | Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attackers to spoof any valid hostname on the Internet. NOTE: a followup post suggests that this is not an issue in the daemon. |
| CVE-2001-1487 | Medium | 2001-12-31 | Not applicable | Working exploit published | popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option. |