Overview 34 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 13 public PoC · 1 EPSS ≥ 0.5
34matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
13public PoC38.2%
1EPSS ≥ 0.52.9%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
34
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
34
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
13
38.2%
Proof of concept only
0
0.0%
Forecast only
1
2.9%
No public exploit
20
58.8%
split by
peak 12 / year
19951
Not applicable1
Critical1
not blocked1
Working exploit published1
19961
Not applicable1
Critical1
not blocked1
No public exploit1
19971
Not applicable1
Critical1
not blocked1
No public exploit1
19981
Not applicable1
Critical1
not blocked1
Working exploit published1
19993
Not applicable3
Critical3
not blocked3
Working exploit published2
No public exploit1
20002
Not applicable2
Critical2
not blocked2
Working exploit published1
No public exploit1
200112
Not applicable12
Critical12
not blocked12
Working exploit published4
No public exploit8
200210
Not applicable10
Critical10
not blocked10
Working exploit published3
Forecast only1
No public exploit6
20033
Not applicable3
Critical3
not blocked3
Working exploit published1
No public exploit2
199519961997199819992000200120022003
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2003-0356 | Critical | 2003-06-09 | Not applicable | No public exploit | Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions. |
| CVE-2003-0174 | Critical | 2003-05-12 | Not applicable | No public exploit | The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password. |
| CVE-2002-1484 | Critical | 2003-04-22 | Not applicable | Working exploit published | DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message. |
| CVE-2002-2119 | Critical | 2002-12-31 | Not applicable | No public exploit | Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing. |
| CVE-2002-1820 | Critical | 2002-12-31 | Not applicable | No public exploit | register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a." |
| CVE-2002-1816 | Critical | 2002-12-31 | Not applicable | Working exploit published | Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. |
| CVE-2002-1798 | Critical | 2002-12-31 | Not applicable | Working exploit published | MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to admin/credit_card_info.php. |
| CVE-2002-1347 | Critical | 2002-12-18 | Not applicable | No public exploit | Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string. |
| CVE-2002-0391 | Critical | 2002-08-12 | Not applicable | Forecast only | Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd. |
| CVE-2002-0671 | Critical | 2002-07-23 | Not applicable | No public exploit | Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing. |
| CVE-2002-0639 | Critical | 2002-07-03 | Not applicable | No public exploit | Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication. |
| CVE-2002-0083 | Critical | 2002-03-15 | Not applicable | Working exploit published | Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges. |
| CVE-2002-0059 | Critical | 2002-03-15 | Not applicable | No public exploit | The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data. |
| CVE-2001-1496 | Critical | 2001-12-31 | Not applicable | No public exploit | Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code. |
| CVE-2001-1481 | Critical | 2001-12-31 | Not applicable | No public exploit | Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to gain privileges. |
| CVE-2001-0766 | Critical | 2001-10-18 | Not applicable | Working exploit published | Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters. |
| CVE-2001-1125 | Critical | 2001-10-05 | Not applicable | No public exploit | Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site. |
| CVE-2001-0967 | Critical | 2001-08-31 | Not applicable | No public exploit | Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing. |
| CVE-2001-1155 | Critical | 2001-08-23 | Not applicable | No public exploit | TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing. |
| CVE-2001-0609 | Critical | 2001-08-02 | Not applicable | Working exploit published | Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function. |
| CVE-2001-1291 | Critical | 2001-07-12 | Not applicable | Working exploit published | The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing. |
| CVE-2001-0395 | Critical | 2001-07-02 | Not applicable | No public exploit | Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brute force password guessing. |
| CVE-2001-0249 | Critical | 2001-06-18 | Not applicable | No public exploit | Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings. |
| CVE-2001-0248 | Critical | 2001-06-18 | Not applicable | No public exploit | Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings. |
| CVE-2001-1339 | Critical | 2001-05-24 | Not applicable | Working exploit published | Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks. |
| CVE-2000-0944 | Critical | 2000-12-19 | Not applicable | Working exploit published | CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password. |
| CVE-2000-1218 | Critical | 2000-04-14 | Not applicable | No public exploit | The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache. |
| CVE-1999-1588 | Critical | 1999-12-31 | Not applicable | Working exploit published | Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766. |
| CVE-1999-1324 | Critical | 1999-12-31 | Not applicable | No public exploit | VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing. |
| CVE-1999-0426 | Critical | 1999-03-01 | Not applicable | Working exploit published | The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing. |
| CVE-1999-0006 | Critical | 1998-07-14 | Not applicable | Working exploit published | Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command. |
| CVE-1999-0511 | Critical | 1997-01-01 | Not applicable | No public exploit | IP forwarding is enabled on a machine which is not a router or firewall. |
| CVE-1999-0043 | Critical | 1996-12-04 | Not applicable | No public exploit | Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others. |
| CVE-1999-0066 | Critical | 1995-07-31 | Not applicable | Working exploit published | AnyForm CGI remote execution. |