Latest CVE Feed
-
7.5
HIGHCVE-2001-0514
SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive information such as WEP ... Read more
- EPSS Score: %0.72
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-1370
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and ... Read more
Affected Products : phplib- EPSS Score: %30.07
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
9.3
HIGHCVE-2001-0537
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.... Read more
Affected Products : ios- EPSS Score: %93.45
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0351
Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service.... Read more
Affected Products : windows_2000- EPSS Score: %0.44
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0002
Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.... Read more
- EPSS Score: %25.60
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0340
An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is execu... Read more
Affected Products : exchange_server- EPSS Score: %6.26
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0499
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.... Read more
- EPSS Score: %74.94
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0344
An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.... Read more
- EPSS Score: %1.04
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0349
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious progr... Read more
Affected Products : windows_2000- EPSS Score: %3.11
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0515
Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.... Read more
- EPSS Score: %0.54
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0018
Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of service via a flood of malformed service requests.... Read more
Affected Products : windows_2000- EPSS Score: %20.49
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0503
Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting service port, aka a variant of the "NetMeeting Desktop Sharing" vulnerability.... Read more
Affected Products : netmeeting- EPSS Score: %22.39
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.8
HIGHCVE-2001-0497
dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which allows attackers to obtain the keys and perform dynamic DN... Read more
Affected Products : bind- EPSS Score: %0.11
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0345
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions.... Read more
Affected Products : windows_2000- EPSS Score: %13.48
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0534
Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands.... Read more
- EPSS Score: %2.06
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0350
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious progr... Read more
Affected Products : windows_2000- EPSS Score: %0.42
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0517
Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0.... Read more
Affected Products : oracle8i- EPSS Score: %0.72
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0501
Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner.... Read more
Affected Products : word- EPSS Score: %0.78
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0352
SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via (1) dot11WEPDefaultKeyValue in the dot11WEPDefaultKeysTable of th... Read more
- EPSS Score: %0.44
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1265
Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. (dot dot) attack.... Read more
Affected Products : alphaworks_tftp_server- EPSS Score: %0.75
- Published: Jul. 20, 2001
- Modified: Apr. 03, 2025