Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 5.0

    MEDIUM
    CVE-2001-0707

    Denicomp RSHD 2.18 and earlier allows a remote attacker to cause a denial of service (crash) via a long string to port 514.... Read more

    Affected Products : rshd
    • EPSS Score: %0.66
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0689

    Vulnerability in TrendMicro Virus Control System 1.8 allows a remote attacker to view configuration files and change the configuration via a certain CGI program.... Read more

    Affected Products : virus_control_system
    • EPSS Score: %0.64
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0658

    Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly... Read more

    Affected Products : isa_server
    • EPSS Score: %11.67
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0636

    Buffer overflows in Raytheon SilentRunner allow remote attackers to (1) cause a denial of service in the collector (cle.exe) component of SilentRunner 2.0 via traffic containing long passwords, or (2) execute arbitrary commands via long HTTP queries in th... Read more

    Affected Products : silentrunner
    • EPSS Score: %0.99
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2001-0686

    Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environment variable.... Read more

    Affected Products : solaris
    • EPSS Score: %0.13
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0701

    Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument.... Read more

    Affected Products : solaris sunvts
    • EPSS Score: %0.14
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0699

    Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument.... Read more

    Affected Products : solaris sunos
    • EPSS Score: %0.06
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0644

    Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server.... Read more

    Affected Products : rumpus_ftp_server
    • EPSS Score: %0.53
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0676

    Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a "dot dot" attack in the filename for an attachment.... Read more

    Affected Products : the_bat
    • EPSS Score: %1.03
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0645

    Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to (1) access to the management tier via the "admin" password, or (2) connect to a MySQL ODBC from the management tier using a blank password.... Read more

    Affected Products : netprowler
    • EPSS Score: %1.34
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0675

    Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email to a user's account containing a carriage return <CR> that is not followed by a line feed <LF>.... Read more

    Affected Products : the_bat
    • EPSS Score: %4.31
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0643

    Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type.... Read more

    Affected Products : internet_explorer
    • EPSS Score: %17.25
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 4.6

    MEDIUM
    CVE-2001-0678

    A buffer overflow in reggo.dll file used by Trend Micro InterScan VirusWall prior to 3.51 build 1349 for Windows NT 3.5 and InterScan WebManager 1.2 allows a local attacker to execute arbitrary code.... Read more

    • EPSS Score: %0.10
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0649

    Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request.... Read more

    Affected Products : personal_web_sharing
    • EPSS Score: %4.01
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0659

    Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to cause a denial of service (reboot) via a malformed IrDA packet.... Read more

    Affected Products : windows_2000
    • EPSS Score: %14.41
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0506

    Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vu... Read more

    • EPSS Score: %37.94
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 7.5

    HIGH
    CVE-2001-0700

    Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MIME header.... Read more

    Affected Products : w3m w3m
    • EPSS Score: %13.31
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 7.2

    HIGH
    CVE-2001-0507

    IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.... Read more

    Affected Products : internet_information_services iis
    • EPSS Score: %1.15
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 2.1

    LOW
    CVE-2001-0642

    Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive by appending .. (dot dot) sequences to filenames listed in the content.ini file.... Read more

    Affected Products : incredimail
    • EPSS Score: %0.12
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
  • 5.0

    MEDIUM
    CVE-2001-0687

    Broker FTP server 5.9.5 for Windows NT and 9x allows a remote attacker to retrieve privileged web server system information by (1) issuing a CD command (CD C:) followed by the LS command, (2) specifying arbitrary paths in the UNC format (\\computername\sh... Read more

    Affected Products : broker_ftp_server
    • EPSS Score: %0.81
    • Published: Sep. 20, 2001
    • Modified: Apr. 03, 2025
Showing 20 of 291842 Results