56.807 CVE tracked
777 Exploited now
183 Used by ransomware
Last sync
CVE Tracker
56.807 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2001-0716 | MED 5.0 | citrix metaframe Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service (crash) via a large number of incomplete connections to the server. | 1.7% | — |
| CVE-2001-0711 | MED 5.0 | cisco ios Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP community string. | 3.2% | — |
| CVE-2001-0709 | MED 5.0 | microsoft internet_information_server Microsoft IIS 4.0 and before, when installed on a FAT partition, allows a remote attacker to obtain source code of ASP files via a URL encoded with Unicode. | 35.6% | — |
| CVE-2001-0663 | MED 5.0 | microsoft windows_2000 Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets. | 31.6% | — |
| CVE-2001-0662 | MED 5.0 | microsoft windows_nt RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request. | 22.6% | — |
| CVE-2001-0660 | MED 5.0 | microsoft exchange_server Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL). | 22.0% | — |
| CVE-2001-0659 | MED 5.0 | microsoft windows_2000 Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to cause a denial of service (reboot) via a malformed IrDA packet. | 8.0% | — |
| CVE-2001-0650 | MED 5.0 | cisco ios Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute. | 2.4% | — |
| CVE-2001-0643 | MED 5.0 | microsoft internet_explorer Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type. | 11.4% | — |
| CVE-2001-0590 | MED 5.0 | apache tomcat Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0). | 11.0% | — |
| CVE-2001-0566 | MED 5.0 | cisco catalyst_2900 Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP is disabled. | 6.4% | — |
| CVE-2001-0546 | MED 5.0 | microsoft isa_server Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data. | 17.3% | — |
| CVE-2001-0545 | MED 5.0 | microsoft internet_information_server IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a length that is different than the actual length. | 18.3% | — |
| CVE-2001-0543 | MED 5.0 | microsoft exchange_server Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts. | 18.8% | — |
| CVE-2001-0540 | MED 5.0 | microsoft terminal_server Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389. | 71.2% | — |
| CVE-2001-0509 | MED 5.0 | microsoft exchange_server Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs. | 17.0% | — |
| CVE-2001-0508 | MED 5.0 | microsoft internet_information_services Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request. | 27.1% | — |
| CVE-2001-0505 | MED 5.0 | microsoft services Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service. | 33.4% | — |
| CVE-2001-0503 | MED 5.0 | microsoft netmeeting Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting service port, aka a variant of the "NetMeeting Desktop Sharing" vulnerability. | 17.3% | — |
| CVE-2001-0429 | MED 5.0 | cisco catos Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port, which causes a network storm and a denial of service. | 1.4% | — |
| CVE-2001-0428 | MED 5.0 | cisco vpn_3000_concentrator_series_software Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP option. | 1.7% | — |
| CVE-2001-0375 | MED 5.0 | cisco pix_firewall_515 Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via a large number of authentication requests. | 10.3% | — |
| CVE-2001-0348 | MED 5.0 | microsoft windows_2000 Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace. | 17.2% | — |
| CVE-2001-0346 | MED 5.0 | microsoft windows_2000 Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them. | 5.9% | — |
| CVE-2001-0345 | MED 5.0 | microsoft windows_2000 Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions. | 6.6% | — |