Latest CVE Feed
-
7.5
HIGHCVE-2001-0987
Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap.... Read more
Affected Products : cgiwrap- EPSS Score: %9.55
- Published: Jul. 22, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1010
Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) attack on the page parameter.... Read more
Affected Products : sambar_server- EPSS Score: %5.05
- Published: Jul. 22, 2001
- Modified: Apr. 03, 2025
-
3.6
LOWCVE-2001-1258
Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.... Read more
Affected Products : imp- EPSS Score: %0.11
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
9.3
HIGHCVE-2001-0537
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.... Read more
Affected Products : ios- EPSS Score: %93.45
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0002
Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.... Read more
- EPSS Score: %25.60
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0352
SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via (1) dot11WEPDefaultKeyValue in the dot11WEPDefaultKeysTable of th... Read more
- EPSS Score: %0.44
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0501
Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner.... Read more
Affected Products : word- EPSS Score: %0.78
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0517
Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0.... Read more
Affected Products : oracle8i- EPSS Score: %0.72
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0350
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious progr... Read more
Affected Products : windows_2000- EPSS Score: %0.42
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0518
Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending the remainder of the command, which causes the listener to hang.... Read more
Affected Products : oracle9i- EPSS Score: %0.39
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0351
Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service.... Read more
Affected Products : windows_2000- EPSS Score: %0.44
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0534
Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands.... Read more
- EPSS Score: %2.06
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0513
Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers to cause a denial of service by repeatedly connecting to the Oracle listener but not co... Read more
Affected Products : oracle9i- EPSS Score: %0.90
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0498
Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header extension.... Read more
- EPSS Score: %0.48
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0347
Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid.... Read more
Affected Products : windows_2000- EPSS Score: %13.66
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0346
Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them.... Read more
Affected Products : windows_2000- EPSS Score: %8.11
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0348
Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace.... Read more
Affected Products : windows_2000- EPSS Score: %28.41
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0516
Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requester_version value that does not match an expected offset to the data.... Read more
- EPSS Score: %0.54
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
2.6
LOWCVE-2000-0892
Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL.... Read more
- EPSS Score: %0.66
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2000-0891
A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email.... Read more
Affected Products : lotus_notes- EPSS Score: %3.32
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025