57.411 CVE tracked
782 Exploited now
186 Used by ransomware
Last sync
CVE Tracker
57.411 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2001-0346 | MED 5.0 | microsoft windows_2000 Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them. | 5.9% | — |
| CVE-2001-0345 | MED 5.0 | microsoft windows_2000 Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions. | 6.6% | — |
| CVE-2001-0337 | MED 5.0 | microsoft internet_information_server The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of service via a series of requests. | 5.0% | — |
| CVE-2001-0336 | MED 5.0 | microsoft internet_information_server The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed request. | 15.9% | — |
| CVE-2001-0335 | MED 5.0 | microsoft internet_information_server FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters. | 21.0% | — |
| CVE-2001-0332 | MED 5.0 | microsoft internet_explorer Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain usin | 5.7% | — |
| CVE-2001-0322 | MED 5.0 | microsoft internet_explorer MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that creates and deletes an object that is associated with the browser window object. | 21.0% | — |
| CVE-2001-0246 | MED 5.0 | microsoft internet_explorer Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka | 5.6% | — |
| CVE-2001-0245 | MED 5.0 | microsoft index_server Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability. | 14.3% | — |
| CVE-2001-0243 | MED 5.0 | microsoft windows_media_player Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet | 17.6% | — |
| CVE-2001-0237 | MED 5.0 | microsoft windows_2000 Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data. | 18.3% | — |
| CVE-2001-0161 | MED 5.0 | cisco aironet Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it easier for remote attackers to mount brute force attacks. | 0.8% | — |
| CVE-2001-0151 | MED 5.0 | microsoft internet_information_services IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests. | 67.9% | — |
| CVE-2001-0149 | MED 5.0 | microsoft internet_explorer Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object. | 32.2% | — |
| CVE-2001-0146 | MED 5.0 | microsoft exchange_server IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's. | 37.1% | — |
| CVE-2001-0096 | MED 5.0 | microsoft internet_information_server FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Malformed Web Form Submission" vulnerability. | 20.3% | — |
| CVE-2001-0083 | MED 5.0 | microsoft windows_media_services Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memory leak that allows remote attackers to cause a denial of service via a series of severed connections, aka the "Severed W | 17.3% | — |
| CVE-2001-0080 | MED 5.0 | cisco catalyst_4000 Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-SSH client, which generates a protocol mismatch error. | 8.9% | — |
| CVE-2001-0058 | MED 5.0 | cisco broadband_operating_system The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a URL that does not end in a space character. | 1.7% | — |
| CVE-2001-0057 | MED 5.0 | cisco broadband_operating_system Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet. | 1.3% | — |
| CVE-2001-0055 | MED 5.0 | cisco broadband_operating_system CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets. | 1.3% | — |
| CVE-2001-0042 | MED 5.0 | apache http_server PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded backslash) sequences. | 9.6% | — |
| CVE-2001-0018 | MED 5.0 | microsoft windows_2000 Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of service via a flood of malformed service requests. | 18.3% | — |
| CVE-2001-0017 | MED 5.0 | microsoft windows_nt Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malformed PPTP Packet Stream" vulnerability. | 17.3% | — |
| CVE-2001-0014 | MED 5.0 | microsoft windows_2000 Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the "Invalid RDP Data" vulnerability. | 13.3% | — |