Vulnerability Intelligence · Emerging
Emerging Threats, Before They Hit KEV.
Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.
Synced hourly · figures as of Oct 20, 2026
3,918 vulnerabilities · highest exploit probability first
- CVE-2001-1583Critical 10.0lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program.sun · sunosEPSS83%5 exploitsPublished Dec 31, 2001
- CVE-2001-1217Medium 5.0Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with ..oracle · application serverEPSS54%·Published Dec 21, 2001
- CVE-2001-0797Critical 10.0Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.sun · solarisEPSS95%10 exploitsPublished Dec 12, 2001
- CVE-2001-0803Critical 10.0Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.open group · cde common desktop environmentEPSS86%3 exploitsPublished Dec 6, 2001
- CVE-2001-0800Critical 10.0lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.sgi · irixEPSS54%2 exploitsPublished Dec 6, 2001
- CVE-2001-0540Medium 5.0Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.microsoft · terminal serverEPSS71%·Published Oct 30, 2001
- CVE-2001-0779Critical 10.0Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.sun · solarisEPSS62%1 exploitPublished Oct 18, 2001
- CVE-2001-0506High 7.2Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability.microsoft · internet information serverEPSS69%1 exploitPublished Sep 20, 2001
- CVE-2001-0538Critical 10.0Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.microsoft · outlookEPSS53%2 exploitsPublished Aug 14, 2001
- CVE-2001-0500Critical 10.0Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as…microsoft · indexing serviceEPSS97%6 exploitsPublished Jul 21, 2001
- CVE-2001-0499Critical 10.0Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.oracle · oracle8iEPSS85%3 exploitsPublished Jul 21, 2001
- CVE-2001-0537Critical 9.3HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.cisco · iosEPSS68%4 exploitsPublished Jul 21, 2001
- CVE-2001-1320High 7.5Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite.pgp · keyserverEPSS68%2 exploitsPublished Jul 16, 2001
- CVE-2001-0731Medium 5.0Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.apache · http serverEPSS57%1 exploitPublished Jul 9, 2001
- CVE-2001-1243Medium 5.0Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the…microsoft · internet information serverEPSS71%2 exploitsPublished Jul 4, 2001
- CVE-2001-0333High 7.5Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding ..microsoft · internet information serverEPSS91%10 exploitsPublished Jun 27, 2001
- CVE-2001-0241Critical 10.0Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.microsoft · windows 2000EPSS86%8 exploitsPublished Jun 27, 2001
- CVE-2001-0151Medium 5.0IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.microsoft · internet information servicesEPSS68%1 exploitPublished Jun 2, 2001
- CVE-2001-0236Critical 10.0Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.sun · solarisEPSS72%2 exploitsPublished May 3, 2001
- CVE-2001-0168Critical 10.0Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.att · winvncEPSS71%2 exploitsPublished May 3, 2001
- CVE-2001-0167High 7.6Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.att · winvncEPSS51%2 exploitsPublished May 3, 2001
- CVE-2001-0550High 7.5wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).washington university · wu-ftpdEPSS75%2 exploitsPublished Apr 30, 2001
- CVE-2001-0414Critical 10.0ntpd security holedave mills · ntpdEPSS92%4 exploitsPublished Apr 4, 2001
- CVE-2001-0925Medium 5.0The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2)…apache · http serverEPSS75%4 exploitsPublished Mar 12, 2001
- CVE-2001-0098Critical 10.0Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string.bea · weblogic serverEPSS78%1 exploitPublished Feb 12, 2001
- CVE-2000-1089Critical 10.0Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.microsoft · windows 2000EPSS75%3 exploitsPublished Jan 9, 2001
- CVE-2000-0979Medium 6.4File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka…microsoft · windows 95EPSS75%2 exploitsPublished Dec 19, 2000
- CVE-2000-0945High 10.0The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.cisco · catalyst 3500 xlEPSS73%1 exploitPublished Dec 19, 2000
- CVE-2000-0886High 7.5IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.microsoft · internet information serverEPSS69%1 exploitPublished Dec 19, 2000
- CVE-2000-0884High 7.5IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.microsoft · internet information serverEPSS63%9 exploitsPublished Dec 19, 2000
- CVE-2000-0869Medium 5.0The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.suse · suse linuxEPSS51%1 exploitPublished Nov 14, 2000
- CVE-2000-0778Medium 5.0IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability.microsoft · internet information servicesEPSS87%2 exploitsPublished Oct 20, 2000
- CVE-2000-0760Medium 6.4The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.apache · tomcatEPSS62%1 exploitPublished Oct 20, 2000
- CVE-2000-0681Critical 10.0Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.bea · weblogic serverEPSS51%·Published Oct 20, 2000
- CVE-2000-0917High 10.0Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.caldera · openlinux ebuilderEPSS79%5 exploitsPublished Sep 25, 2000
- CVE-2000-0630Medium 5.0IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.microsoft · internet information serverEPSS68%1 exploitPublished Jul 17, 2000
- CVE-2000-0665Medium 5.0GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.gamsoft · telsrvEPSS51%2 exploitsPublished Jul 17, 2000
- CVE-2000-0649Low 2.6IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.microsoft · internet information serverEPSS77%1 exploitPublished Jul 13, 2000
- CVE-2000-0574Medium 5.0FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary…openbsd · ftpdEPSS59%1 exploitPublished Jul 7, 2000
- CVE-2000-0573Critical 10.0The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.hp · hp-uxEPSS96%8 exploitsPublished Jun 23, 2000
- CVE-2000-0402Low 2.1The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.microsoft · sql serverEPSS91%4 exploitsPublished May 30, 2000
- CVE-2000-0408Medium 5.0IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.microsoft · internet information serverEPSS58%1 exploitPublished May 11, 2000
- CVE-2000-0457High 7.5ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability.microsoft · internet information serverEPSS53%1 exploitPublished May 11, 2000
- CVE-2000-0248Critical 10.0The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.redhat · linuxEPSS74%4 exploitsPublished Apr 24, 2000
- CVE-2000-0322Critical 10.0The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.redhat · linuxEPSS42%3 exploitsPublished Apr 24, 2000
- CVE-2000-0284High 7.5Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.university of washington · imapEPSS68%9 exploitsPublished Apr 16, 2000
- CVE-2000-0302Medium 5.0Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.microsoft · index serverEPSS79%1 exploitPublished Mar 31, 2000
- CVE-2000-0246Medium 5.0IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.microsoft · commercial internet systemEPSS80%1 exploitPublished Mar 30, 2000
- CVE-1999-1053High 7.5guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".apache · http serverEPSS85%3 exploitsPublished Sep 13, 1999
- CVE-1999-1011Critical 10.0The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.microsoft · data access componentsEPSS77%3 exploitsPublished Jul 19, 1999
| CVE | Title | Severity | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2001-1583 | lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. sun · sunos | Critical 10.0 | 83% | 5 exploits | |
| CVE-2001-1217 | Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. oracle · application server | Medium 5.0 | 54% | · | |
| CVE-2001-0797 | Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin. sun · solaris | Critical 10.0 | 95% | 10 exploits | |
| CVE-2001-0803 | Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands. open group · cde common desktop environment | Critical 10.0 | 86% | 3 exploits | |
| CVE-2001-0800 | lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. sgi · irix | Critical 10.0 | 54% | 2 exploits | |
| CVE-2001-0540 | Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389. microsoft · terminal server | Medium 5.0 | 71% | · | |
| CVE-2001-0779 | Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username. sun · solaris | Critical 10.0 | 62% | 1 exploit | |
| CVE-2001-0506 | Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability. microsoft · internet information server | High 7.2 | 69% | 1 exploit | |
| CVE-2001-0538 | Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page. microsoft · outlook | Critical 10.0 | 53% | 2 exploits | |
| CVE-2001-0500 | Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as… microsoft · indexing service | Critical 10.0 | 97% | 6 exploits | |
| CVE-2001-0499 | Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD. oracle · oracle8i | Critical 10.0 | 85% | 3 exploits | |
| CVE-2001-0537 | HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL. cisco · ios | Critical 9.3 | 68% | 4 exploits | |
| CVE-2001-1320 | Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite. pgp · keyserver | High 7.5 | 68% | 2 exploits | |
| CVE-2001-0731 | Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string. apache · http server | Medium 5.0 | 57% | 1 exploit | |
| CVE-2001-1243 | Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the… microsoft · internet information server | Medium 5.0 | 71% | 2 exploits | |
| CVE-2001-0333 | Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. microsoft · internet information server | High 7.5 | 91% | 10 exploits | |
| CVE-2001-0241 | Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0. microsoft · windows 2000 | Critical 10.0 | 86% | 8 exploits | |
| CVE-2001-0151 | IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests. microsoft · internet information services | Medium 5.0 | 68% | 1 exploit | |
| CVE-2001-0236 | Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event. sun · solaris | Critical 10.0 | 72% | 2 exploits | |
| CVE-2001-0168 | Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0. att · winvnc | Critical 10.0 | 71% | 2 exploits | |
| CVE-2001-0167 | Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string. att · winvnc | High 7.6 | 51% | 2 exploits | |
| CVE-2001-0550 | wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob). washington university · wu-ftpd | High 7.5 | 75% | 2 exploits | |
| CVE-2001-0414 | ntpd security hole dave mills · ntpd | Critical 10.0 | 92% | 4 exploits | |
| CVE-2001-0925 | The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2)… apache · http server | Medium 5.0 | 75% | 4 exploits | |
| CVE-2001-0098 | Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string. bea · weblogic server | Critical 10.0 | 78% | 1 exploit | |
| CVE-2000-1089 | Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability. microsoft · windows 2000 | Critical 10.0 | 75% | 3 exploits | |
| CVE-2000-0979 | File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka… microsoft · windows 95 | Medium 6.4 | 75% | 2 exploits | |
| CVE-2000-0945 | The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory. cisco · catalyst 3500 xl | High 10.0 | 73% | 1 exploit | |
| CVE-2000-0886 | IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability. microsoft · internet information server | High 7.5 | 69% | 1 exploit | |
| CVE-2000-0884 | IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability. microsoft · internet information server | High 7.5 | 63% | 9 exploits | |
| CVE-2000-0869 | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method. suse · suse linux | Medium 5.0 | 51% | 1 exploit | |
| CVE-2000-0778 | IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability. microsoft · internet information services | Medium 5.0 | 87% | 2 exploits | |
| CVE-2000-0760 | The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension. apache · tomcat | Medium 6.4 | 62% | 1 exploit | |
| CVE-2000-0681 | Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension. bea · weblogic server | Critical 10.0 | 51% | · | |
| CVE-2000-0917 | Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands. caldera · openlinux ebuilder | High 10.0 | 79% | 5 exploits | |
| CVE-2000-0630 | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability. microsoft · internet information server | Medium 5.0 | 68% | 1 exploit | |
| CVE-2000-0665 | GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username. gamsoft · telsrv | Medium 5.0 | 51% | 2 exploits | |
| CVE-2000-0649 | IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined. microsoft · internet information server | Low 2.6 | 77% | 1 exploit | |
| CVE-2000-0574 | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary… openbsd · ftpd | Medium 5.0 | 59% | 1 exploit | |
| CVE-2000-0573 | The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command. hp · hp-ux | Critical 10.0 | 96% | 8 exploits | |
| CVE-2000-0402 | The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability. microsoft · sql server | Low 2.1 | 91% | 4 exploits | |
| CVE-2000-0408 | IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability. microsoft · internet information server | Medium 5.0 | 58% | 1 exploit | |
| CVE-2000-0457 | ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability. microsoft · internet information server | High 7.5 | 53% | 1 exploit | |
| CVE-2000-0248 | The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands. redhat · linux | Critical 10.0 | 74% | 4 exploits | |
| CVE-2000-0322 | The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters. redhat · linux | Critical 10.0 | 42% | 3 exploits | |
| CVE-2000-0284 | Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands. university of washington · imap | High 7.5 | 68% | 9 exploits | |
| CVE-2000-0302 | Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL. microsoft · index server | Medium 5.0 | 79% | 1 exploit | |
| CVE-2000-0246 | IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability. microsoft · commercial internet system | Medium 5.0 | 80% | 1 exploit | |
| CVE-1999-1053 | guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->". apache · http server | High 7.5 | 85% | 3 exploits | |
| CVE-1999-1011 | The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands. microsoft · data access components | Critical 10.0 | 77% | 3 exploits |
Showing 3,851–3,900 of 3,918
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.