Latest CVE Feed
-
2.1
LOWCVE-2001-0714
Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (data loss) by (1) setting a high initial message hop count option (-h), which causes Sendmail to drop queue entries, (2) via the -qR opti... Read more
Affected Products : sendmail- EPSS Score: %0.06
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0717
Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function.... Read more
Affected Products : tooltalk_database_server- EPSS Score: %24.24
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0660
Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL).... Read more
Affected Products : exchange_server- EPSS Score: %19.55
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0712
The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support s... Read more
Affected Products : internet_explorer- EPSS Score: %9.79
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0728
Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local users to gain privileges.... Read more
Affected Products : management_agents- EPSS Score: %0.10
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0664
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restriction... Read more
Affected Products : internet_explorer- EPSS Score: %27.30
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0667
Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute commands by spawning Telnet with a log file option on the command line and writing arbitrary code into an executable file ... Read more
Affected Products : internet_explorer- EPSS Score: %2.08
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0669
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before... Read more
- EPSS Score: %14.76
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0535
Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variab... Read more
Affected Products : coldfusion_server- EPSS Score: %0.75
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0718
Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document.... Read more
- EPSS Score: %16.30
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0665
Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the "... Read more
- EPSS Score: %10.86
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0540
Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.... Read more
Affected Products : terminal_server- EPSS Score: %29.54
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0923
RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.... Read more
Affected Products : redhat_package_manager- EPSS Score: %0.07
- Published: Oct. 25, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1462
WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to enter debug mode via a URL containing null characters, which may allow attackers to obtain sensitive information.... Read more
Affected Products : securid- EPSS Score: %0.82
- Published: Oct. 24, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1438
Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS crash and VisorPhone database corruption) by sending a large or crafted SMS image.... Read more
- EPSS Score: %1.04
- Published: Oct. 22, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1461
Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded (1) /.. or (2) \.. sequences.... Read more
Affected Products : securid- EPSS Score: %0.53
- Published: Oct. 22, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0737
A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack.... Read more
Affected Products : cordless_freedom cordless_freedom_navigator cordless_freedom_pro cordless_itouch_keyboard- EPSS Score: %0.89
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0777
Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts.... Read more
Affected Products : omnihttpd- EPSS Score: %0.89
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0755
Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly execute arbitrary code via a long SITE command.... Read more
Affected Products : debian_linux- EPSS Score: %0.87
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0765
BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories.... Read more
Affected Products : bison_ftp_server- EPSS Score: %0.08
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025