Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 5.0

    MEDIUM
    CVE-2001-0767

    Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in (1) LS or (2) GET.... Read more

    Affected Products : guildftpd
    • EPSS Score: %0.90
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0785

    Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows allows remote attackers to read arbitrary files via a .. (dot dot) attack.... Read more

    Affected Products : air_messenger_lan_server
    • EPSS Score: %0.51
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0747

    Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long method name in an HTTP request.... Read more

    Affected Products : iplanet_web_server
    • EPSS Score: %1.34
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0739

    Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges.... Read more

    Affected Products : secure_linux
    • EPSS Score: %0.05
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0783

    Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command.... Read more

    Affected Products : tftp_server
    • EPSS Score: %1.21
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0759

    Buffer overflow in bctool in Jetico BestCrypt 0.8.1 and earlier allows local users to execute arbitrary code via a file or directory with a long pathname, which is processed during an unmount.... Read more

    Affected Products : bestcrypt
    • EPSS Score: %0.14
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0740

    3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attackers to cause a denial of service via a long string containing a large number of "%s" strings, possibly triggering a format string vulnera... Read more

    Affected Products : 3c840-us 3cp4144
    • EPSS Score: %5.88
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2001-0787

    LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges.... Read more

    Affected Products : linux
    • EPSS Score: %0.12
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0795

    Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as (1) upper case letters or (2) 8.3 file names.... Read more

    Affected Products : liteserve
    • EPSS Score: %0.92
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0769

    Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request containing a null character.... Read more

    Affected Products : guildftpd
    • EPSS Score: %0.66
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0773

    Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service (crash) via a series of SYN or TCP connect requests.... Read more

    Affected Products : 3220-h_dsl_router
    • EPSS Score: %1.51
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0771

    Spytech SpyAnywhere 1.50 allows remote attackers to gain administrator access via a single character in the "loginpass" field.... Read more

    Affected Products : spyanywhere
    • EPSS Score: %1.23
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2001-0768

    GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.... Read more

    Affected Products : guildftpd
    • EPSS Score: %0.07
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0782

    KDE ktvision 0.1.1-271 and earlier allows local attackers to gain root privileges via a symlink attack on a user configuration file.... Read more

    Affected Products : ktv
    • EPSS Score: %0.09
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0788

    Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header.... Read more

    Affected Products : air_messenger_lan_server
    • EPSS Score: %2.67
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0760

    Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field.... Read more

    Affected Products : nfuse
    • EPSS Score: %6.62
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0742

    Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command.... Read more

    Affected Products : cmail
    • EPSS Score: %0.74
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0778

    OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).... Read more

    Affected Products : omnihttpd
    • EPSS Score: %3.06
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0780

    Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. (dot dot) in the SHOW parameter.... Read more

    Affected Products : directory_pro
    • EPSS Score: %2.34
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
  • 2.1

    LOW
    CVE-2001-0736

    Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.... Read more

    • EPSS Score: %0.17
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
Showing 20 of 291615 Results