Latest CVE Feed
-
7.5
HIGHCVE-2001-0712
The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support s... Read more
Affected Products : internet_explorer- EPSS Score: %9.79
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0923
RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.... Read more
Affected Products : redhat_package_manager- EPSS Score: %0.07
- Published: Oct. 25, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1462
WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to enter debug mode via a URL containing null characters, which may allow attackers to obtain sensitive information.... Read more
Affected Products : securid- EPSS Score: %0.82
- Published: Oct. 24, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1438
Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS crash and VisorPhone database corruption) by sending a large or crafted SMS image.... Read more
- EPSS Score: %1.04
- Published: Oct. 22, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1461
Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded (1) /.. or (2) \.. sequences.... Read more
Affected Products : securid- EPSS Score: %0.53
- Published: Oct. 22, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0745
Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox: URL in the document.referrer property.... Read more
Affected Products : messanger- EPSS Score: %1.08
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0743
Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands.... Read more
Affected Products : webboard- EPSS Score: %2.96
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0744
Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file.... Read more
Affected Products : imp- EPSS Score: %0.09
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0737
A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack.... Read more
Affected Products : cordless_freedom cordless_freedom_navigator cordless_freedom_pro cordless_itouch_keyboard- EPSS Score: %0.89
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0777
Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts.... Read more
Affected Products : omnihttpd- EPSS Score: %0.89
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0765
BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories.... Read more
Affected Products : bison_ftp_server- EPSS Score: %0.08
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0767
Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in (1) LS or (2) GET.... Read more
Affected Products : guildftpd- EPSS Score: %0.90
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0794
Buffer overflow in A-FTP Anonymous FTP Server allows remote attackers to cause a denial of service via a long USER command.... Read more
Affected Products : anonymous_ftp_server- EPSS Score: %0.71
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0748
Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary files by prepending several / (slash) characters to the URI.... Read more
Affected Products : acme_server- EPSS Score: %12.38
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0756
CatalogMgr.pl in VirtualCatalog (incorrectly claimed to be in VirtualCart) allows remote attackers to execute arbitrary code via the template parameter.... Read more
Affected Products : virtualcatalog- EPSS Score: %1.84
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0741
Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets.... Read more
Affected Products : hsrp- EPSS Score: %1.91
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0747
Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long method name in an HTTP request.... Read more
Affected Products : iplanet_web_server- EPSS Score: %1.34
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0773
Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service (crash) via a series of SYN or TCP connect requests.... Read more
Affected Products : 3220-h_dsl_router- EPSS Score: %1.51
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0787
LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges.... Read more
Affected Products : linux- EPSS Score: %0.12
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0795
Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as (1) upper case letters or (2) 8.3 file names.... Read more
Affected Products : liteserve- EPSS Score: %0.92
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025