Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 19, 2026
401 vulnerabilities · highest exploit probability first
- CVE-2005-0455Medium 5.1Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large…EPSS54%3 exploitsPublished Feb 24, 2005
- CVE-2004-0942Medium 5.0Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.apache · http serverEPSS59%1 exploitPublished Feb 9, 2005
- CVE-2004-1135Medium 5.0Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands.ipswitch · ws ftp serverEPSS50%3 exploitsPublished Jan 10, 2005
- CVE-2004-1520Medium 4.6Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command.ipswitch · imailEPSS89%5 exploitsPublished Dec 31, 2004
- CVE-2004-2466Medium 5.0chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow.efs software · easy chat serverEPSS75%4 exploitsPublished Dec 31, 2004
- CVE-2004-2115Medium 6.8Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.oracle · http serverEPSS58%1 exploitPublished Dec 31, 2004
- CVE-2004-2074Medium 5.0Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands.bolintech · dream ftp serverEPSS36%3 exploitsPublished Dec 31, 2004
- CVE-2004-1305Medium 5.0The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to…microsoft · windows 2000EPSS59%1 exploitPublished Dec 23, 2004
- CVE-2003-0718Medium 5.0The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of…microsoft · internet information servicesEPSS88%1 exploitPublished Nov 3, 2004
- CVE-2004-1626Medium 5.0Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command.code-crafters · ability serverEPSS67%3 exploitsPublished Oct 22, 2004
- CVE-2004-0751Medium 5.0The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).apache · http serverEPSS72%1 exploitPublished Oct 20, 2004
- CVE-2004-0230Medium 5.0TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections,…juniper · junosEPSS80%7 exploitsPublished Aug 18, 2004
- CVE-2004-0493Medium 6.4The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of…apache · http serverEPSS85%2 exploitsPublished Aug 6, 2004
- CVE-2004-0594Medium 5.1The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function…php · phpEPSS55%1 exploitPublished Jul 13, 2004
- CVE-2004-0430Medium 5.1Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string…apple · mac os xEPSS41%4 exploitsPublished Jul 7, 2004
- CVE-2004-0120Medium 5.0The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.microsoft · windows 2000EPSS51%1 exploitPublished Jun 1, 2004
- CVE-2004-0184Medium 5.0Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an…tcpdump · tcpdumpEPSS60%1 exploitPublished May 4, 2004
- CVE-2004-1060Medium 5.0Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low…icmp · icmpEPSS75%2 exploitsPublished Apr 12, 2004
- CVE-2004-0176Medium 5.0Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.ethereal group · etherealEPSS67%2 exploitsPublished Mar 4, 2004
- CVE-2004-2086Medium 5.0Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter.sambar · sambar serverEPSS75%3 exploitsPublished Feb 6, 2004
- CVE-2001-1410Medium 5.0Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering.microsoft · internet explorerEPSS51%1 exploitPublished Aug 18, 2003
- CVE-2003-0245Medium 5.0Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to…apache · http serverEPSS63%1 exploitPublished Jun 9, 2003
- CVE-2003-0190Medium 5.0OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.openbsd · opensshEPSS77%3 exploitsPublished May 12, 2003
- CVE-2003-0132Medium 5.0A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed.apache · http serverEPSS87%2 exploitsPublished Apr 11, 2003
- CVE-2002-1143Medium 5.0Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and…microsoft · excelEPSS54%2 exploitsPublished Apr 11, 2003
- CVE-2003-0001Medium 5.3cisco: information leak in ethernet frames.linux · linux kernelEPSS70%3 exploitsPublished Jan 6, 2003
- CVE-2002-1744Medium 5.0Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).microsoft · internet information servicesEPSS65%1 exploitPublished Dec 31, 2002
- CVE-2002-0840Medium 6.8Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host:…apache · http serverEPSS95%1 exploitPublished Oct 11, 2002
- CVE-2002-0654Medium 5.0Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child…apache · http serverEPSS59%1 exploitPublished Sep 5, 2002
- CVE-2001-1013Medium 5.0Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.redhat · linuxEPSS66%1 exploitPublished Feb 2, 2002
- CVE-2001-0731Medium 5.0Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.apache · http serverEPSS57%1 exploitPublished Jul 9, 2001
- CVE-2001-1243Medium 5.0Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the…microsoft · internet information serverEPSS71%2 exploitsPublished Jul 4, 2001
- CVE-2001-0151Medium 5.0IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.microsoft · internet information servicesEPSS68%1 exploitPublished Jun 2, 2001
- CVE-2001-0925Medium 5.0The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2)…apache · http serverEPSS75%4 exploitsPublished Mar 12, 2001
- CVE-2000-0979Medium 6.4File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka…microsoft · windows 95EPSS75%2 exploitsPublished Dec 19, 2000
- CVE-2000-0869Medium 5.0The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.suse · suse linuxEPSS51%1 exploitPublished Nov 14, 2000
- CVE-2000-0778Medium 5.0IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability.microsoft · internet information servicesEPSS87%2 exploitsPublished Oct 20, 2000
- CVE-2000-0760Medium 6.4The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.apache · tomcatEPSS62%1 exploitPublished Oct 20, 2000
- CVE-2000-0630Medium 5.0IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.microsoft · internet information serverEPSS68%1 exploitPublished Jul 17, 2000
- CVE-2000-0665Medium 5.0GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.gamsoft · telsrvEPSS51%2 exploitsPublished Jul 17, 2000
- CVE-2000-0574Medium 5.0FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary…openbsd · ftpdEPSS59%1 exploitPublished Jul 7, 2000
- CVE-2000-0408Medium 5.0IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.microsoft · internet information serverEPSS58%1 exploitPublished May 11, 2000
- CVE-2000-0302Medium 5.0Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.microsoft · index serverEPSS79%1 exploitPublished Mar 31, 2000
- CVE-2000-0246Medium 5.0IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.microsoft · commercial internet systemEPSS80%1 exploitPublished Mar 30, 2000
- CVE-1999-1551Medium 5.0Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.ipswitch · imailEPSS72%1 exploitPublished Mar 2, 1999
- CVE-1999-0278Medium 5.0In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.microsoft · internet information serverEPSS65%1 exploitPublished Jun 1, 1998
- CVE-1999-0513Medium 5.0ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.freebsd · freebsdEPSS71%1 exploitPublished Jan 5, 1998
- CVE-1999-0016Medium 5.0Land IP denial of service.hp · hp-uxEPSS96%5 exploitsPublished Dec 1, 1997
- CVE-1999-0191Medium 6.4IIS newdsn.exe CGI script allows remote users to overwrite files.microsoft · internet information serverEPSS53%1 exploitPublished Sep 1, 1997
- CVE-1999-0128Medium 5.0Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.ibm · sngEPSS75%1 exploitPublished Dec 18, 1996
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2005-0455 | Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large… | Medium 5.1 | 54% | 3 exploits | |
| CVE-2004-0942 | Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters. apache · http server | Medium 5.0 | 59% | 1 exploit | |
| CVE-2004-1135 | Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands. ipswitch · ws ftp server | Medium 5.0 | 50% | 3 exploits | |
| CVE-2004-1520 | Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command. ipswitch · imail | Medium 4.6 | 89% | 5 exploits | |
| CVE-2004-2466 | chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow. efs software · easy chat server | Medium 5.0 | 75% | 4 exploits | |
| CVE-2004-2115 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request. oracle · http server | Medium 6.8 | 58% | 1 exploit | |
| CVE-2004-2074 | Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands. bolintech · dream ftp server | Medium 5.0 | 36% | 3 exploits | |
| CVE-2004-1305 | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to… microsoft · windows 2000 | Medium 5.0 | 59% | 1 exploit | |
| CVE-2003-0718 | The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of… microsoft · internet information services | Medium 5.0 | 88% | 1 exploit | |
| CVE-2004-1626 | Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command. code-crafters · ability server | Medium 5.0 | 67% | 3 exploits | |
| CVE-2004-0751 | The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault). apache · http server | Medium 5.0 | 72% | 1 exploit | |
| CVE-2004-0230 | TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections,… juniper · junos | Medium 5.0 | 80% | 7 exploits | |
| CVE-2004-0493 | The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of… apache · http server | Medium 6.4 | 85% | 2 exploits | |
| CVE-2004-0594 | The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function… php · php | Medium 5.1 | 55% | 1 exploit | |
| CVE-2004-0430 | Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string… apple · mac os x | Medium 5.1 | 41% | 4 exploits | |
| CVE-2004-0120 | The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages. microsoft · windows 2000 | Medium 5.0 | 51% | 1 exploit | |
| CVE-2004-0184 | Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an… tcpdump · tcpdump | Medium 5.0 | 60% | 1 exploit | |
| CVE-2004-1060 | Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low… icmp · icmp | Medium 5.0 | 75% | 2 exploits | |
| CVE-2004-0176 | Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors. ethereal group · ethereal | Medium 5.0 | 67% | 2 exploits | |
| CVE-2004-2086 | Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter. sambar · sambar server | Medium 5.0 | 75% | 3 exploits | |
| CVE-2001-1410 | Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering. microsoft · internet explorer | Medium 5.0 | 51% | 1 exploit | |
| CVE-2003-0245 | Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to… apache · http server | Medium 5.0 | 63% | 1 exploit | |
| CVE-2003-0190 | OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack. openbsd · openssh | Medium 5.0 | 77% | 3 exploits | |
| CVE-2003-0132 | A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed. apache · http server | Medium 5.0 | 87% | 2 exploits | |
| CVE-2002-1143 | Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and… microsoft · excel | Medium 5.0 | 54% | 2 exploits | |
| CVE-2003-0001 | cisco: information leak in ethernet frames. linux · linux kernel | Medium 5.3 | 70% | 3 exploits | |
| CVE-2002-1744 | Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot). microsoft · internet information services | Medium 5.0 | 65% | 1 exploit | |
| CVE-2002-0840 | Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host:… apache · http server | Medium 6.8 | 95% | 1 exploit | |
| CVE-2002-0654 | Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child… apache · http server | Medium 5.0 | 59% | 1 exploit | |
| CVE-2001-1013 | Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server. redhat · linux | Medium 5.0 | 66% | 1 exploit | |
| CVE-2001-0731 | Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string. apache · http server | Medium 5.0 | 57% | 1 exploit | |
| CVE-2001-1243 | Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the… microsoft · internet information server | Medium 5.0 | 71% | 2 exploits | |
| CVE-2001-0151 | IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests. microsoft · internet information services | Medium 5.0 | 68% | 1 exploit | |
| CVE-2001-0925 | The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2)… apache · http server | Medium 5.0 | 75% | 4 exploits | |
| CVE-2000-0979 | File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka… microsoft · windows 95 | Medium 6.4 | 75% | 2 exploits | |
| CVE-2000-0869 | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method. suse · suse linux | Medium 5.0 | 51% | 1 exploit | |
| CVE-2000-0778 | IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability. microsoft · internet information services | Medium 5.0 | 87% | 2 exploits | |
| CVE-2000-0760 | The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension. apache · tomcat | Medium 6.4 | 62% | 1 exploit | |
| CVE-2000-0630 | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability. microsoft · internet information server | Medium 5.0 | 68% | 1 exploit | |
| CVE-2000-0665 | GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username. gamsoft · telsrv | Medium 5.0 | 51% | 2 exploits | |
| CVE-2000-0574 | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary… openbsd · ftpd | Medium 5.0 | 59% | 1 exploit | |
| CVE-2000-0408 | IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability. microsoft · internet information server | Medium 5.0 | 58% | 1 exploit | |
| CVE-2000-0302 | Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL. microsoft · index server | Medium 5.0 | 79% | 1 exploit | |
| CVE-2000-0246 | IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability. microsoft · commercial internet system | Medium 5.0 | 80% | 1 exploit | |
| CVE-1999-1551 | Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL. ipswitch · imail | Medium 5.0 | 72% | 1 exploit | |
| CVE-1999-0278 | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. microsoft · internet information server | Medium 5.0 | 65% | 1 exploit | |
| CVE-1999-0513 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. freebsd · freebsd | Medium 5.0 | 71% | 1 exploit | |
| CVE-1999-0016 | Land IP denial of service. hp · hp-ux | Medium 5.0 | 96% | 5 exploits | |
| CVE-1999-0191 | IIS newdsn.exe CGI script allows remote users to overwrite files. microsoft · internet information server | Medium 6.4 | 53% | 1 exploit | |
| CVE-1999-0128 | Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. ibm · sng | Medium 5.0 | 75% | 1 exploit |
Showing 351–400 of 401
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.