Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them afte…Check if you run itEPSS 1.70%Jul 23, 2002
- High7.2The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has ins…Check this weekEPSS 48.07%Jul 23, 2002
- High7.5Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database admini…Check this weekEPSS 11.24%Jul 23, 2002
- High7.5Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to…Check this weekEPSS 22.84%Jul 23, 2002
- High7.5SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing…Check if you run itEPSS 4.27%Jul 11, 2002
- High7.5Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part o…Check this weekEPSS 13.89%Jul 3, 2002
- High7.5Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type…Check this weekEPSS 55.45%Jul 3, 2002
- Medium5.0The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message att…Check this weekEPSS 15.24%Jun 18, 2002
- UnknownApache Chunk-encoded HTTP Request Arbitrary Code ExecutionPatch nowKEVEPSS 95.23%Jun 17, 2002
- Medium5.0The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote a…Check this weekEPSS 29.31%May 16, 2002
- High7.5Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via…Check this weekEPSS 24.86%May 16, 2002
- High7.8Microsoft Windows Privilege Escalation VulnerabilityPatch nowKEVEPSS 4.92%Mar 13, 2002
- Medium5.0XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files…Check this weekEPSS 23.23%Mar 8, 2002
- High7.5Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in…Check this weekEPSS 24.86%Mar 8, 2002
- Medium5.0SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed…Check this weekEPSS 37.96%Mar 8, 2002
- High7.5SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, whic…Check this weekEPSS 22.44%Mar 8, 2002
- Medium6.4Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys.Check this weekEPSS 13.30%Mar 8, 2002
- Low2.1Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtai…Check if you run itEPSS 0.34%Dec 31, 2001
- Medium5.0Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service.Check if you run itEPSS 7.36%Dec 20, 2001
- High7.5CVE-2001-0542 is listed by inventory_critical.Check this weekEPSS 13.62%Dec 20, 2001
- Low3.6Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages.Check if you run itEPSS 0.34%Dec 6, 2001
- High7.5Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote att…Check this weekEPSS 16.12%Dec 6, 2001
- High7.5Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, whic…Check if you run itEPSS 2.09%Dec 6, 2001
- Low2.1Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deepl…Check if you run itEPSS 2.05%Oct 30, 2001
- Medium5.0Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end fu…Check this weekEPSS 21.99%Oct 30, 2001
Sort