Latest CVE Feed
-
5.0
MEDIUMCVE-2001-0895
Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router... Read more
Affected Products : catalyst_2948g-l3 catalyst_2950 catalyst_3550 catalyst_4000 catalyst_4908g-l3 catalyst_5000 catalyst_6000 catalyst_8500 catalyst_2900xl catalyst_3500xl +1 more products- EPSS Score: %1.67
- Published: Nov. 15, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0897
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.... Read more
Affected Products : ultimate_bulletin_board- EPSS Score: %1.17
- Published: Nov. 15, 2001
- Modified: Apr. 03, 2025
-
6.4
MEDIUMCVE-2001-0723
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulnerability."... Read more
Affected Products : internet_explorer- EPSS Score: %11.14
- Published: Nov. 14, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0724
Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka th... Read more
Affected Products : internet_explorer- EPSS Score: %2.68
- Published: Nov. 14, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0893
Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.... Read more
Affected Products : mini_httpd- EPSS Score: %0.68
- Published: Nov. 13, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-1415
vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes.... Read more
Affected Products : openbsd- EPSS Score: %0.10
- Published: Nov. 13, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0892
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.... Read more
Affected Products : thttpd- EPSS Score: %0.45
- Published: Nov. 13, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-1429
Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted text file.... Read more
Affected Products : midnight_commander- EPSS Score: %0.07
- Published: Nov. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0894
Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service (memory exhaustion) by generating a large number of SM... Read more
Affected Products : postfix- EPSS Score: %1.27
- Published: Nov. 11, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-1387
iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak.... Read more
- EPSS Score: %0.11
- Published: Nov. 05, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1388
iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator.... Read more
- EPSS Score: %0.42
- Published: Nov. 05, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-1129
Format string vulnerabilities in (1) _probuild, (2) _dbutil, (3) _mprosrv, (4) _mprshut, (5) _proapsv, (6) _progres, (7) _proutil, (8) _rfutil and (9) prolib in Progress database 9.1C allows a local user to execute arbitrary code via format string specifi... Read more
Affected Products : progress- EPSS Score: %0.02
- Published: Nov. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0729
Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.... Read more
Affected Products : http_server- EPSS Score: %2.40
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0712
The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support s... Read more
Affected Products : internet_explorer- EPSS Score: %9.79
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0713
Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the h... Read more
Affected Products : sendmail- EPSS Score: %0.07
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0728
Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local users to gain privileges.... Read more
Affected Products : management_agents- EPSS Score: %0.10
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0669
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before... Read more
- EPSS Score: %14.76
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0652
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.... Read more
- EPSS Score: %0.11
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0665
Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the "... Read more
- EPSS Score: %10.86
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0714
Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (data loss) by (1) setting a high initial message hop count option (-h), which causes Sendmail to drop queue entries, (2) via the -qR opti... Read more
Affected Products : sendmail- EPSS Score: %0.06
- Published: Oct. 30, 2001
- Modified: Apr. 03, 2025