Latest CVE Feed
-
5.1
MEDIUMCVE-2001-0090
The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the user, which could allow an attacker to execute arbitrary ActiveX controls, aka the "Browser Print Template" vulnerability.... Read more
Affected Products : internet_explorer- EPSS Score: %8.05
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0047
The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages and gain privileges, aka one of the "Registry Permissions" vulnerabilit... Read more
Affected Products : windows_nt- EPSS Score: %1.17
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0045
The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the "Registry Permissions" vulnerabilities.... Read more
Affected Products : windows_nt- EPSS Score: %1.24
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0031
BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a .JSP file name that does not exist.... Read more
Affected Products : one-to-one_enterprise_server- EPSS Score: %0.76
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0051
IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database.... Read more
Affected Products : db2_universal_database- EPSS Score: %7.21
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0040
APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file.... Read more
Affected Products : apcupsd- EPSS Score: %0.17
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0032
Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privileges via malicious format string specifiers in a URL.... Read more
Affected Products : ssldump- EPSS Score: %4.38
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0056
The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection.... Read more
Affected Products : broadband_operating_system- EPSS Score: %0.75
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0037
Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. (dot dot) specifiers.... Read more
Affected Products : homeseer- EPSS Score: %4.31
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0035
Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request.... Read more
Affected Products : kth_kerberos- EPSS Score: %0.85
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0052
IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.... Read more
Affected Products : db2_universal_database- EPSS Score: %1.57
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
2.6
LOWCVE-2001-0091
The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka a variant of the "Scriptlet Rendering" vulnerability.... Read more
Affected Products : internet_explorer- EPSS Score: %13.45
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0038
Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. C:) in the requested URL.... Read more
Affected Products : offline_explorer- EPSS Score: %3.45
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0057
Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet.... Read more
- EPSS Score: %0.66
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2000-0893
The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system.... Read more
Affected Products : irix- EPSS Score: %1.35
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0033
KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges... Read more
- EPSS Score: %0.05
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0042
PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded backslash) sequences.... Read more
Affected Products : http_server- EPSS Score: %24.00
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0030
FoolProof 3.9 allows local users to bypass program execution restrictions by downloading the restricted executables from another source and renaming them.... Read more
Affected Products : foolproof_security- EPSS Score: %0.05
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0034
KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false proxy responses and possibly gain privileges.... Read more
Affected Products : kth_kerberos- EPSS Score: %0.38
- Published: Feb. 16, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0061
procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain root privileges by forking a child process and executing a privileged process from the child, while... Read more
Affected Products : freebsd- EPSS Score: %0.05
- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025