Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 5.0

    MEDIUM
    CVE-2001-0778

    OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).... Read more

    Affected Products : omnihttpd
    • EPSS Score: %3.06
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0776

    Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long username to the POP3 service.... Read more

    Affected Products : dynfx_mailserver
    • EPSS Score: %0.81
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0770

    Buffer overflow in GuildFTPd Server 0.97 allows remote attacker to execute arbitrary code via a long SITE command.... Read more

    Affected Products : guildftpd
    • EPSS Score: %3.21
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0757

    Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet.... Read more

    Affected Products : 6400_nrp_2
    • EPSS Score: %1.77
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 2.1

    LOW
    CVE-2001-0736

    Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.... Read more

    • EPSS Score: %0.17
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0735

    Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.... Read more

    Affected Products : cfingerd
    • EPSS Score: %0.20
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 6.2

    MEDIUM
    CVE-2001-0905

    Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denial of service or gain root privileges by sending a signal while a signal handling routine is already running.... Read more

    Affected Products : procmail linux
    • EPSS Score: %0.05
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0763

    Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svc_logprint function.... Read more

    Affected Products : debian_linux suse_linux
    • EPSS Score: %25.35
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-1384

    ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.... Read more

    Affected Products : linux_kernel linux
    • EPSS Score: %0.32
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0734

    Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by (1) the sigreturn system call or (2) the process_write_regs kernel routine.... Read more

    Affected Products : netbsd
    • EPSS Score: %0.05
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0751

    Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections.... Read more

    Affected Products : cbos
    • EPSS Score: %3.98
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0769

    Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request containing a null character.... Read more

    Affected Products : guildftpd
    • EPSS Score: %0.66
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0739

    Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges.... Read more

    Affected Products : secure_linux
    • EPSS Score: %0.05
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0740

    3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attackers to cause a denial of service via a long string containing a large number of "%s" strings, possibly triggering a format string vulnera... Read more

    Affected Products : 3c840-us 3cp4144
    • EPSS Score: %5.88
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0759

    Buffer overflow in bctool in Jetico BestCrypt 0.8.1 and earlier allows local users to execute arbitrary code via a file or directory with a long pathname, which is processed during an unmount.... Read more

    Affected Products : bestcrypt
    • EPSS Score: %0.14
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2001-0787

    LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges.... Read more

    Affected Products : linux
    • EPSS Score: %0.12
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0783

    Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command.... Read more

    Affected Products : tftp_server
    • EPSS Score: %1.21
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0795

    Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as (1) upper case letters or (2) 8.3 file names.... Read more

    Affected Products : liteserve
    • EPSS Score: %0.92
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0788

    Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header.... Read more

    Affected Products : air_messenger_lan_server
    • EPSS Score: %2.67
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2001-0768

    GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.... Read more

    Affected Products : guildftpd
    • EPSS Score: %0.07
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
Showing 20 of 291196 Results