Latest CVE Feed
-
7.5
HIGHCVE-2001-0991
Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious script, which is printed back in an error message.... Read more
Affected Products : proxomitron_naoko-4- EPSS Score: %16.58
- Published: Jul. 24, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0988
Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information.... Read more
Affected Products : arkeia- EPSS Score: %0.04
- Published: Jul. 23, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0989
Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign.... Read more
Affected Products : pileup- EPSS Score: %0.34
- Published: Jul. 23, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0982
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.... Read more
Affected Products : tivoli_secureway_policy_director- EPSS Score: %2.76
- Published: Jul. 23, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1010
Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) attack on the page parameter.... Read more
Affected Products : sambar_server- EPSS Score: %5.05
- Published: Jul. 22, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0987
Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap.... Read more
Affected Products : cgiwrap- EPSS Score: %9.55
- Published: Jul. 22, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0349
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious progr... Read more
Affected Products : windows_2000- EPSS Score: %3.11
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.8
HIGHCVE-2001-0497
dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which allows attackers to obtain the keys and perform dynamic DN... Read more
Affected Products : bind- EPSS Score: %0.11
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0503
Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting service port, aka a variant of the "NetMeeting Desktop Sharing" vulnerability.... Read more
Affected Products : netmeeting- EPSS Score: %22.39
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0515
Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.... Read more
- EPSS Score: %0.54
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0344
An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.... Read more
- EPSS Score: %1.04
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0345
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions.... Read more
Affected Products : windows_2000- EPSS Score: %13.48
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0340
An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is execu... Read more
Affected Products : exchange_server- EPSS Score: %6.26
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0499
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.... Read more
- EPSS Score: %74.94
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0502
Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login passw... Read more
Affected Products : windows_2000- EPSS Score: %0.96
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0341
Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll.... Read more
- EPSS Score: %25.17
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0514
SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive information such as WEP ... Read more
- EPSS Score: %0.72
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0500
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query... Read more
- EPSS Score: %91.04
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0353
Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a "transfer job" routine.... Read more
- EPSS Score: %1.48
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0018
Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of service via a flood of malformed service requests.... Read more
Affected Products : windows_2000- EPSS Score: %20.49
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025