Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.Check this weekEPSS 18.84%Sep 20, 2001
- Medium5.0Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 a…Check this weekEPSS 16.98%Sep 20, 2001
- High7.5Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the conte…Check if you run itEPSS 3.08%Sep 11, 2001
- Medium5.0The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email w…Check if you run itEPSS 3.24%Sep 7, 2001
- Medium5.0Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, wh…Check if you run itEPSS 4.11%Aug 31, 2001
- High7.2Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in…Check if you run itEPSS 1.62%Aug 14, 2001
- Medium5.0Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which do…Check this weekEPSS 10.96%Aug 2, 2001
- Medium5.0Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending t…Check if you run itEPSS 2.23%Jul 21, 2001
- Medium5.0Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0.Check if you run itEPSS 2.70%Jul 21, 2001
- Medium5.0Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requ…Check if you run itEPSS 2.08%Jul 21, 2001
- Medium5.0Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.Check if you run itEPSS 2.08%Jul 21, 2001
- Medium5.0Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers…Check if you run itEPSS 3.46%Jul 21, 2001
- Critical10.0Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the co…Check this weekEPSS 85.20%Jul 21, 2001
- Medium5.0Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet conne…Check if you run itEPSS 2.10%Jul 21, 2001
- High7.2An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa…Check if you run itEPSS 1.92%Jul 21, 2001
- High7.5An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code a…Check if you run itEPSS 6.37%Jul 21, 2001
- UnknownMicrosoft index_server Out-of-bounds WritePatch nowKEVEPSS 96.73%Jul 19, 2001
- Unknownmit kerberos Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 38.75%Jul 18, 2001
- High7.5Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PRO…Check if you run itEPSS 6.31%Jul 17, 2001
- High7.5Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodin…Check if you run itEPSS 5.80%Jul 16, 2001
- Medium5.0Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated b…Check this weekEPSS 33.35%Jul 16, 2001
- High7.5Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the P…Check if you run itEPSS 8.78%Jul 16, 2001
- Medium5.0The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state…Check if you run itEPSS 4.99%Jul 10, 2001
- High7.5Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attacker…Check this weekEPSS 24.45%Jul 2, 2001
- Medium4.6Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with ..Check if you run itEPSS 2.22%Jun 27, 2001
Sort