Latest CVE Feed
-
5.0
MEDIUMCVE-2001-0429
Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port, which causes a network storm and a denial of service.... Read more
Affected Products : catos- EPSS Score: %0.50
- Published: Jul. 02, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0432
Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands.... Read more
Affected Products : interscan_viruswall- EPSS Score: %6.01
- Published: Jul. 02, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0391
Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.... Read more
Affected Products : xitami- EPSS Score: %0.66
- Published: Jul. 02, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1386
WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension.... Read more
Affected Products : wftpd- EPSS Score: %0.73
- Published: Jul. 01, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1043
ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.... Read more
Affected Products : ftp_server- EPSS Score: %1.81
- Published: Jul. 01, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1246
PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.... Read more
Affected Products : php- EPSS Score: %3.29
- Published: Jun. 30, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1250
vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, possibly due to a buffer overflow.... Read more
Affected Products : vwebserver- EPSS Score: %0.71
- Published: Jun. 29, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1248
vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space character (%20).... Read more
Affected Products : vwebserver- EPSS Score: %0.81
- Published: Jun. 29, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1249
vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names.... Read more
Affected Products : vwebserver- EPSS Score: %0.58
- Published: Jun. 29, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1251
SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.... Read more
- EPSS Score: %0.74
- Published: Jun. 29, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1239
PowerNet IX allows remote attackers to cause a denial of service via a port scan.... Read more
Affected Products : powernet_ix- EPSS Score: %0.66
- Published: Jun. 29, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1290
admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the table_width parameter.... Read more
Affected Products : active_classifieds- EPSS Score: %3.14
- Published: Jun. 28, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0333
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.... Read more
- EPSS Score: %84.47
- Published: Jun. 27, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0244
Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.... Read more
Affected Products : index_server- EPSS Score: %9.12
- Published: Jun. 27, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0245
Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.... Read more
- EPSS Score: %37.35
- Published: Jun. 27, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0489
Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.... Read more
Affected Products : gftp- EPSS Score: %0.67
- Published: Jun. 27, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0491
Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as (1) .... in CWD, (2) .. in NLST, or (3) ... in NLST.... Read more
Affected Products : raidenftpd- EPSS Score: %3.43
- Published: Jun. 27, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0481
Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.... Read more
Affected Products : mandrake_linux- EPSS Score: %0.06
- Published: Jun. 27, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0479
Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.... Read more
Affected Products : phppgadmin- EPSS Score: %1.73
- Published: Jun. 27, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0478
Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.... Read more
Affected Products : phpmyadmin- EPSS Score: %1.44
- Published: Jun. 27, 2001
- Modified: Apr. 03, 2025