Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 2.1

    LOW
    CVE-2001-0544

    IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table.... Read more

    Affected Products : internet_information_services
    • EPSS Score: %0.51
    • Published: Oct. 30, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-0535

    Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variab... Read more

    Affected Products : coldfusion_server
    • EPSS Score: %0.75
    • Published: Oct. 30, 2001
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2001-0729

    Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.... Read more

    Affected Products : http_server
    • EPSS Score: %2.40
    • Published: Oct. 30, 2001
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2001-0713

    Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the h... Read more

    Affected Products : sendmail
    • EPSS Score: %0.07
    • Published: Oct. 30, 2001
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2001-0717

    Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function.... Read more

    Affected Products : tooltalk_database_server
    • EPSS Score: %24.24
    • Published: Oct. 30, 2001
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2001-0923

    RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.... Read more

    Affected Products : redhat_package_manager
    • EPSS Score: %0.07
    • Published: Oct. 25, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-1462

    WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to enter debug mode via a URL containing null characters, which may allow attackers to obtain sensitive information.... Read more

    Affected Products : securid
    • EPSS Score: %0.82
    • Published: Oct. 24, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-1461

    Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded (1) /.. or (2) \.. sequences.... Read more

    Affected Products : securid
    • EPSS Score: %0.53
    • Published: Oct. 22, 2001
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2001-1438

    Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS crash and VisorPhone database corruption) by sending a large or crafted SMS image.... Read more

    Affected Products : palm_os visor
    • EPSS Score: %1.04
    • Published: Oct. 22, 2001
    • Modified: Apr. 03, 2025

  • 2.1

    LOW
    CVE-2001-0744

    Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file.... Read more

    Affected Products : imp
    • EPSS Score: %0.09
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2001-0743

    Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands.... Read more

    Affected Products : webboard
    • EPSS Score: %2.96
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2001-0765

    BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories.... Read more

    Affected Products : bison_ftp_server
    • EPSS Score: %0.08
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2001-0777

    Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts.... Read more

    Affected Products : omnihttpd
    • EPSS Score: %0.89
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-0737

    A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack.... Read more

    • EPSS Score: %0.89
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2001-0745

    Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox: URL in the document.referrer property.... Read more

    Affected Products : messanger
    • EPSS Score: %1.08
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2001-0774

    Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on temporary files.... Read more

    Affected Products : tripwire
    • EPSS Score: %0.09
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-0775

    Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field.... Read more

    Affected Products : xli xloadimage
    • EPSS Score: %25.56
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2001-0779

    Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.... Read more

    Affected Products : solaris sunos
    • EPSS Score: %80.72
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2001-0734

    Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by (1) the sigreturn system call or (2) the process_write_regs kernel routine.... Read more

    Affected Products : netbsd
    • EPSS Score: %0.05
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2001-1384

    ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.... Read more

    Affected Products : linux_kernel linux
    • EPSS Score: %0.32
    • Published: Oct. 18, 2001
    • Modified: Apr. 03, 2025
Showing 20 of 291712 Results