Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 5.0

    MEDIUM
    CVE-2001-0662

    RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.... Read more

    Affected Products : windows_nt
    • EPSS Score: %18.26
    • Published: Oct. 30, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0545

    IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a length that is different than the actual length.... Read more

    • EPSS Score: %16.16
    • Published: Oct. 30, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0505

    Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service.... Read more

    Affected Products : services
    • EPSS Score: %11.11
    • Published: Oct. 30, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0665

    Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the "... Read more

    Affected Products : internet_explorer ie
    • EPSS Score: %10.86
    • Published: Oct. 30, 2001
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2001-0728

    Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local users to gain privileges.... Read more

    Affected Products : management_agents
    • EPSS Score: %0.10
    • Published: Oct. 30, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0540

    Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.... Read more

    Affected Products : terminal_server
    • EPSS Score: %29.54
    • Published: Oct. 30, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0718

    Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document.... Read more

    Affected Products : excel powerpoint
    • EPSS Score: %16.30
    • Published: Oct. 30, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0923

    RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.... Read more

    Affected Products : redhat_package_manager
    • EPSS Score: %0.07
    • Published: Oct. 25, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-1462

    WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to enter debug mode via a URL containing null characters, which may allow attackers to obtain sensitive information.... Read more

    Affected Products : securid
    • EPSS Score: %0.82
    • Published: Oct. 24, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-1438

    Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS crash and VisorPhone database corruption) by sending a large or crafted SMS image.... Read more

    Affected Products : palm_os visor
    • EPSS Score: %1.04
    • Published: Oct. 22, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-1461

    Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded (1) /.. or (2) \.. sequences.... Read more

    Affected Products : securid
    • EPSS Score: %0.53
    • Published: Oct. 22, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0743

    Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands.... Read more

    Affected Products : webboard
    • EPSS Score: %2.96
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 2.1

    LOW
    CVE-2001-0744

    Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file.... Read more

    Affected Products : imp
    • EPSS Score: %0.09
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0737

    A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack.... Read more

    • EPSS Score: %0.89
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0777

    Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts.... Read more

    Affected Products : omnihttpd
    • EPSS Score: %0.89
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2001-0765

    BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories.... Read more

    Affected Products : bison_ftp_server
    • EPSS Score: %0.08
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0745

    Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox: URL in the document.referrer property.... Read more

    Affected Products : messanger
    • EPSS Score: %1.08
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0735

    Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.... Read more

    Affected Products : cfingerd
    • EPSS Score: %0.20
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0780

    Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. (dot dot) in the SHOW parameter.... Read more

    Affected Products : directory_pro
    • EPSS Score: %2.34
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0778

    OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).... Read more

    Affected Products : omnihttpd
    • EPSS Score: %3.06
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
Showing 20 of 291274 Results