Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers…Check if you run itEPSS 3.46%Jul 21, 2001
- Critical10.0Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the co…Check this weekEPSS 85.20%Jul 21, 2001
- Medium5.0Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet conne…Check if you run itEPSS 2.10%Jul 21, 2001
- High7.2An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa…Check if you run itEPSS 1.92%Jul 21, 2001
- High7.5An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code a…Check if you run itEPSS 6.37%Jul 21, 2001
- UnknownMicrosoft index_server Out-of-bounds WritePatch nowKEVEPSS 96.73%Jul 19, 2001
- Unknownmit kerberos Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 38.75%Jul 18, 2001
- High7.5Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PRO…Check if you run itEPSS 6.31%Jul 17, 2001
- High7.5Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodin…Check if you run itEPSS 5.80%Jul 16, 2001
- Medium5.0Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated b…Check this weekEPSS 33.35%Jul 16, 2001
- High7.5Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the P…Check if you run itEPSS 8.78%Jul 16, 2001
- Medium5.0The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state…Check if you run itEPSS 4.99%Jul 10, 2001
- High7.5Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attacker…Check this weekEPSS 24.45%Jul 2, 2001
- Medium4.6Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with ..Check if you run itEPSS 2.22%Jun 27, 2001
- Low2.1oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or over…Check if you run itEPSS 0.61%Jun 2, 2001
- Medium5.0IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's.Check this weekEPSS 37.06%Jun 2, 2001
- Medium5.0Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number…Check this weekEPSS 30.01%May 12, 2001
- High7.5Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp a…Check if you run itEPSS 5.18%May 3, 2001
- UnknownMicrosoft Internet Information Services (IIS) Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 90.77%Mar 18, 2001
- Medium5.0The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path th…Check this weekEPSS 75.24%Mar 12, 2001
- Low3.3htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.Check if you run itEPSS 2.31%Mar 12, 2001
- High7.5Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet…Check if you run itEPSS 4.03%Mar 12, 2001
- Medium5.0Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands.Check this weekEPSS 19.52%Mar 12, 2001
- Medium5.0Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.Check if you run itEPSS 2.83%Mar 12, 2001
- Medium5.0PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified ..Check if you run itEPSS 9.57%Feb 16, 2001
Sort