58.127 CVE tracked
788 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
58.127 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2001-0718 | HIGH 7.5 | microsoft excel Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document. | 11.1% | — |
| CVE-2001-0712 | HIGH 7.5 | microsoft internet_explorer The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support script | 6.0% | — |
| CVE-2001-0669 | HIGH 7.5 | cisco catalyst_6000_intrusion_detection_system_module Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU | 4.4% | — |
| CVE-2001-0665 | HIGH 7.5 | microsoft ie Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the "HTTP | 12.1% | — |
| CVE-2001-0664 | HIGH 7.5 | microsoft internet_explorer Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, ak | 18.2% | — |
| CVE-2001-0658 | HIGH 7.5 | microsoft isa_server Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quot | 14.2% | — |
| CVE-2001-0622 | HIGH 7.5 | cisco content_services_switch_11000 The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the inter | 1.6% | — |
| CVE-2001-0621 | HIGH 7.5 | cisco content_services_switch_11000 The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands. | 1.4% | — |
| CVE-2001-0542 | HIGH 7.5 | microsoft sql_server Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS | 13.6% | — |
| CVE-2001-0541 | HIGH 7.5 | microsoft windows_media_player Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station (.NSC) file. | 15.6% | — |
| CVE-2001-0504 | HIGH 7.5 | microsoft windows_2000 Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying. | 21.1% | — |
| CVE-2001-0455 | HIGH 7.5 | cisco aironet_340 Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows remote attackers to modify its configuration. | 1.6% | — |
| CVE-2001-0405 | HIGH 7.5 | linux linux_kernel ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewa | 10.3% | — |
| CVE-2001-0347 | HIGH 7.5 | microsoft windows_2000 Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid. | 13.8% | — |
| CVE-2001-0341 | HIGH 7.5 | microsoft frontpage_server_extensions Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll. | 27.9% | — |
| CVE-2001-0340 | HIGH 7.5 | microsoft exchange_server An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed a | 6.4% | — |
| CVE-2001-0339 | HIGH 7.5 | microsoft internet_explorer Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks, aka the "Web page spoofing vulnerability." | 15.0% | — |
| CVE-2001-0334 | HIGH 7.5 | microsoft internet_information_server FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded. | 14.7% | — |
| CVE-2001-0333 | HIGH 7.5 | microsoft internet_information_server Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice. | 90.8% | — |
| CVE-2001-0288 | HIGH 7.5 | cisco ios Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. | 5.4% | — |
| CVE-2001-0244 | HIGH 7.5 | microsoft index_server Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter. | 14.7% | — |
| CVE-2001-0242 | HIGH 7.5 | microsoft windows_media_player Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the ".ASX Buffer Overrun" vulnerability as discussed in MS: | 30.0% | — |
| CVE-2001-0239 | HIGH 7.5 | microsoft isa_server Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type. | 28.0% | — |
| CVE-2001-0238 | HIGH 7.5 | microsoft windows_2000 Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests. | 14.8% | — |
| CVE-2001-0162 | HIGH 7.5 | microsoft windows_embedded_compact WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. | 15.2% | — |