Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 2.6

    LOW
    CVE-2000-0892

    Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL.... Read more

    Affected Products : openlinux u_win
    • EPSS Score: %0.66
    • Published: Jul. 21, 2001
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2001-0516

    Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requester_version value that does not match an expected offset to the data.... Read more

    Affected Products : oracle8i oracle9i
    • EPSS Score: %0.54
    • Published: Jul. 21, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2000-0891

    A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email.... Read more

    Affected Products : lotus_notes
    • EPSS Score: %3.32
    • Published: Jul. 21, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-0341

    Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll.... Read more

    • EPSS Score: %25.17
    • Published: Jul. 21, 2001
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2001-1370

    prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and ... Read more

    Affected Products : phplib
    • EPSS Score: %30.07
    • Published: Jul. 21, 2001
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2001-0500

    Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query... Read more

    • EPSS Score: %91.04
    • Published: Jul. 21, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-0514

    SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive information such as WEP ... Read more

    • EPSS Score: %0.72
    • Published: Jul. 21, 2001
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2001-0502

    Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login passw... Read more

    Affected Products : windows_2000
    • EPSS Score: %0.96
    • Published: Jul. 21, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-1257

    Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email.... Read more

    Affected Products : imp
    • EPSS Score: %1.41
    • Published: Jul. 21, 2001
    • Modified: Apr. 03, 2025

  • 3.6

    LOW
    CVE-2001-1258

    Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.... Read more

    Affected Products : imp
    • EPSS Score: %0.11
    • Published: Jul. 21, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-0002

    Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.... Read more

    • EPSS Score: %25.60
    • Published: Jul. 21, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-1265

    Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. (dot dot) attack.... Read more

    Affected Products : alphaworks_tftp_server
    • EPSS Score: %0.75
    • Published: Jul. 20, 2001
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2001-1355

    Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup comma... Read more

    Affected Products : surgeftp dmail
    • EPSS Score: %1.33
    • Published: Jul. 20, 2001
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2001-1354

    NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as ... Read more

    Affected Products : surgeftp dmail
    • EPSS Score: %0.15
    • Published: Jul. 20, 2001
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2001-1367

    The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges.... Read more

    Affected Products : phpslice
    • EPSS Score: %0.93
    • Published: Jul. 19, 2001
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2001-1374

    expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd.... Read more

    Affected Products : linux linux expect
    • EPSS Score: %0.05
    • Published: Jul. 19, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-1361

    Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links.... Read more

    Affected Products : twig
    • EPSS Score: %0.47
    • Published: Jul. 19, 2001
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2001-1360

    Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned.... Read more

    Affected Products : sane
    • EPSS Score: %0.05
    • Published: Jul. 19, 2001
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2001-1363

    Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow attackers to gain administrative privileges.... Read more

    Affected Products : phpwebsite
    • EPSS Score: %0.48
    • Published: Jul. 19, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-1364

    Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified.... Read more

    Affected Products : autodns
    • EPSS Score: %0.49
    • Published: Jul. 19, 2001
    • Modified: Apr. 03, 2025
Showing 20 of 291219 Results