Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 7.5

    HIGH
    CVE-2001-1365

    Vulnerability in IntraGnat before 1.4.... Read more

    Affected Products : intragnat
    • EPSS Score: %0.47
    • Published: Jul. 19, 2001
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2001-1363

    Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow attackers to gain administrative privileges.... Read more

    Affected Products : phpwebsite
    • EPSS Score: %0.48
    • Published: Jul. 19, 2001
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2001-1375

    tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory.... Read more

    Affected Products : linux linux
    • EPSS Score: %0.14
    • Published: Jul. 19, 2001
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2001-1367

    The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges.... Read more

    Affected Products : phpslice
    • EPSS Score: %0.93
    • Published: Jul. 19, 2001
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2001-1172

    OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file.... Read more

    Affected Products : httprotect
    • EPSS Score: %0.08
    • Published: Jul. 19, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-1361

    Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links.... Read more

    Affected Products : twig
    • EPSS Score: %0.47
    • Published: Jul. 19, 2001
    • Modified: Apr. 03, 2025

  • 2.1

    LOW
    CVE-2001-1302

    The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a prob... Read more

    Affected Products : windows_2000
    • EPSS Score: %0.72
    • Published: Jul. 18, 2001
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2001-1373

    MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send potentially dangerous attachments.... Read more

    Affected Products : zonealarm
    • EPSS Score: %0.56
    • Published: Jul. 18, 2001
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2001-1303

    The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected network without authentication.... Read more

    Affected Products : firewall-1
    • EPSS Score: %3.51
    • Published: Jul. 18, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-1030

    Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as p... Read more

    • EPSS Score: %0.18
    • Published: Jul. 18, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-1241

    Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!" and the desired program name.... Read more

    Affected Products : un-cgi
    • EPSS Score: %2.96
    • Published: Jul. 17, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-1242

    Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. (dot dot) in an HTML form.... Read more

    Affected Products : un-cgi
    • EPSS Score: %4.75
    • Published: Jul. 17, 2001
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2001-1182

    Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.... Read more

    Affected Products : hp-ux
    • EPSS Score: %0.05
    • Published: Jul. 17, 2001
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2001-1179

    xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.... Read more

    Affected Products : x11r6
    • EPSS Score: %0.06
    • Published: Jul. 17, 2001
    • Modified: Apr. 03, 2025

  • 6.2

    MEDIUM
    CVE-2001-1177

    ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.... Read more

    • EPSS Score: %0.13
    • Published: Jul. 17, 2001
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-1999-1569

    Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which exceeds the server's player limit.... Read more

    Affected Products : quake
    • EPSS Score: %1.32
    • Published: Jul. 17, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-1279

    Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerabil... Read more

    Affected Products : tcpdump
    • EPSS Score: %17.29
    • Published: Jul. 17, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-0980

    docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.... Read more

    • EPSS Score: %2.80
    • Published: Jul. 17, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-0974

    Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.... Read more

    Affected Products : internet_directory
    • EPSS Score: %2.70
    • Published: Jul. 17, 2001
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2001-1307

    Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.... Read more

    Affected Products : iplanet_directory_server
    • EPSS Score: %7.47
    • Published: Jul. 16, 2001
    • Modified: Apr. 03, 2025
Showing 20 of 291219 Results