58.507 CVE tracked
796 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
58.507 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2002-0152 | HIGH 7.5 | microsoft entourage Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, O | 17.4% | — |
| CVE-2002-0150 | HIGH 7.5 | microsoft internet_information_server Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values. | 49.5% | — |
| CVE-2002-0149 | HIGH 7.5 | microsoft internet_information_server Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names. | 62.7% | — |
| CVE-2002-0148 | HIGH 7.5 | microsoft internet_information_server Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page. | 64.5% | — |
| CVE-2002-0147 | HIGH 7.5 | microsoft internet_information_server Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun." | 61.8% | — |
| CVE-2002-0079 | HIGH 7.5 | microsoft internet_information_server Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code. | 77.3% | — |
| CVE-2002-0078 | HIGH 7.5 | microsoft internet_explorer The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability. | 21.9% | — |
| CVE-2002-0077 | HIGH 7.5 | microsoft internet_explorer Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup ob | 11.5% | — |
| CVE-2002-0076 | HIGH 7.5 | hp java_jre-jdk Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and | 26.9% | — |
| CVE-2002-0075 | HIGH 7.5 | microsoft internet_information_server Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message. | 33.8% | — |
| CVE-2002-0074 | HIGH 7.5 | microsoft internet_information_server Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session. | 33.8% | — |
| CVE-2002-0071 | HIGH 7.5 | microsoft internet_information_server Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names. | 33.6% | — |
| CVE-2002-0061 | HIGH 7.5 | apache http_server Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell inte | 50.4% | — |
| CVE-2002-0060 | HIGH 7.5 | linux linux_kernel IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictio | 4.9% | — |
| CVE-2002-0056 | HIGH 7.5 | microsoft sql_server Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection. | 24.9% | — |
| CVE-2002-0054 | HIGH 7.5 | microsoft exchange_server SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null sessio | 22.4% | — |
| CVE-2002-0053 | HIGH 7.5 | microsoft windows_2000 Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or m | 35.0% | — |
| CVE-2002-0050 | HIGH 7.5 | microsoft commerce_server Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data. | 13.2% | — |
| CVE-2002-0027 | HIGH 7.5 | microsoft internet_explorer Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" | 19.3% | — |
| CVE-2002-0026 | HIGH 7.5 | microsoft internet_explorer Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made. | 13.3% | — |
| CVE-2002-0024 | HIGH 7.5 | microsoft internet_explorer File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to downl | 4.3% | — |
| CVE-2002-0022 | HIGH 7.5 | microsoft internet_explorer Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be con | 39.8% | — |
| CVE-2002-0020 | HIGH 7.5 | microsoft interix Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options. | 16.9% | — |
| CVE-2001-1572 | HIGH 7.5 | linux linux_kernel The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets. | 2.8% | — |
| CVE-2001-1563 | HIGH 7.5 | apache tomcat Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers. | 4.9% | — |