Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 3.6

    LOW
    CVE-2000-0472

    Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.... Read more

    Affected Products : inn
    • Published: Feb. 06, 2000
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2000-0145

    The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.... Read more

    Affected Products : debian_linux
    • Published: Feb. 05, 2000
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2000-0128

    The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.... Read more

    Affected Products : the_finger_server
    • Published: Feb. 04, 2000
    • Modified: Apr. 03, 2025

  • 2.1

    LOW
    CVE-2000-0129

    Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.... Read more

    Affected Products : windows_95 windows_98 windows_nt
    • Published: Feb. 04, 2000
    • Modified: Apr. 03, 2025

  • 2.1

    LOW
    CVE-2000-0089

    The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability.... Read more

    Affected Products : windows_nt
    • Published: Feb. 04, 2000
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2000-0122

    Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.... Read more

    Affected Products : frontpage
    • Published: Feb. 03, 2000
    • Modified: Apr. 03, 2025

  • 2.1

    LOW
    CVE-2000-0124

    surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions.... Read more

    Affected Products : superscout
    • Published: Feb. 03, 2000
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2000-0218

    Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.... Read more

    Affected Products : suse_linux openlinux
    • Published: Feb. 03, 2000
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2000-0127

    The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.... Read more

    Affected Products : webspeed
    • Published: Feb. 03, 2000
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2000-0125

    wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.... Read more

    Affected Products : wwwthreads
    • Published: Feb. 03, 2000
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2000-0112

    The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during the installation.... Read more

    Affected Products : debian_linux
    • Published: Feb. 02, 2000
    • Modified: Apr. 03, 2025

  • 5.1

    MEDIUM
    CVE-2000-0469

    Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.... Read more

    Affected Products : webbanner
    • Published: Feb. 02, 2000
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2000-0114

    Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.... Read more

    Affected Products : internet_information_server
    • Published: Feb. 02, 2000
    • Modified: Apr. 03, 2025

  • 3.6

    LOW
    CVE-2000-0121

    The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability.... Read more

    Affected Products : windows_nt
    • Published: Feb. 01, 2000
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2000-0107

    Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.... Read more

    Affected Products : debian_linux
    • Published: Feb. 01, 2000
    • Modified: Apr. 03, 2025

  • 6.2

    MEDIUM
    CVE-2000-0151

    GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.... Read more

    Affected Products : make
    • Published: Feb. 01, 2000
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2000-0157

    NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.... Read more

    Affected Products : netbsd
    • Published: Feb. 01, 2000
    • Modified: Apr. 03, 2025

  • 10.0

    HIGH
    CVE-2000-0133

    Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands.... Read more

    Affected Products : tiny_ftpdaemon
    • Published: Feb. 01, 2000
    • Modified: Apr. 03, 2025

  • 4.3

    MEDIUM
    CVE-2000-1205

    Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_resp... Read more

    Affected Products : http_server
    • Published: Feb. 01, 2000
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2000-0101

    The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.... Read more

    Affected Products : orderpage
    • Published: Feb. 01, 2000
    • Modified: Apr. 03, 2025
Showing 20 of 293354 Results