Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.Check this weekEPSS 11.92%Oct 30, 2001
- Medium5.0Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.Check if you run itEPSS 6.77%Oct 30, 2001
- Low2.1Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deepl…Check if you run itEPSS 2.05%Oct 30, 2001
- Medium5.0Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end fu…Check this weekEPSS 21.99%Oct 30, 2001
- Critical9.8Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is n…Check if you run itEPSS 8.86%Oct 18, 2001
- High7.2NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent items" and (2) "services" menus…Check if you run itEPSS 0.47%Oct 17, 2001
- Medium4.6WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.Check if you run itEPSS 0.61%Oct 2, 2001
- Medium5.0Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.Check this weekEPSS 56.76%Oct 1, 2001
- Medium5.0Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.Check this weekEPSS 18.84%Sep 20, 2001
- Medium5.0Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 a…Check this weekEPSS 16.98%Sep 20, 2001
- High7.5Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the conte…Check if you run itEPSS 3.08%Sep 11, 2001
- Medium5.0The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email w…Check if you run itEPSS 3.24%Sep 7, 2001
- Medium5.0Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, wh…Check if you run itEPSS 4.11%Aug 31, 2001
- High7.2Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in…Check if you run itEPSS 1.62%Aug 14, 2001
- Medium5.0Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which do…Check this weekEPSS 10.96%Aug 2, 2001
- Medium5.0Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending t…Check if you run itEPSS 2.23%Jul 21, 2001
- Medium5.0Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0.Check if you run itEPSS 2.70%Jul 21, 2001
- Medium5.0Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requ…Check if you run itEPSS 2.08%Jul 21, 2001
- Medium5.0Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.Check if you run itEPSS 2.08%Jul 21, 2001
- Medium5.0Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers…Check if you run itEPSS 3.46%Jul 21, 2001
- Critical10.0Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the co…Check this weekEPSS 85.20%Jul 21, 2001
- Medium5.0Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet conne…Check if you run itEPSS 2.10%Jul 21, 2001
- High7.2An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa…Check if you run itEPSS 1.92%Jul 21, 2001
- High7.5An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code a…Check if you run itEPSS 6.37%Jul 21, 2001
- UnknownMicrosoft index_server Out-of-bounds WritePatch nowKEVEPSS 96.73%Jul 19, 2001
Sort