By publication date
Exploited and new serious CVEs: May 2001
13 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2001-0152Weaponized | The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a fimicrosoft · plus | Low2.1 | — | 8.8% | May 3, 2001 |
34Monitor | CVE-2001-0153No exploit | Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitramicrosoft · visual basic · CWE-119 | High7.5 | — | 12.3% | May 3, 2001 |
33Monitor | CVE-2001-0154No exploit | HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attmicrosoft · internet explorer | High7.5 | — | 11.2% | May 3, 2001 |
45Plan | CVE-2001-0167Weaponized | Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands att · winvnc | High7.6 | — | 50.8% | May 3, 2001 |
61This week | CVE-2001-0168Weaponized | Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands att · winvnc | Critical10.0 | — | 70.7% | May 3, 2001 |
44Plan | CVE-2001-0171Proof of concept | Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a whitsoft · slimserve | Critical10.0 | — | 12.2% | May 3, 2001 |
23Monitor | CVE-2001-0199Proof of concept | Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a ..guido frassetto · sedum | Medium5.0 | — | 10.7% | May 3, 2001 |
27Monitor | CVE-2001-0205Proof of concept | Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the raol · aol server | Medium5.0 | — | 23.6% | May 3, 2001 |
62This week | CVE-2001-0236Proof of concept | Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication"sun · solaris | Critical10.0 | — | 72.0% | May 3, 2001 |
43Plan | CVE-2001-0277Proof of concept | Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbworking resources inc. · badblue | Critical10.0 | — | 10.9% | May 3, 2001 |
44Plan | CVE-2001-0280Proof of concept | Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command.atrium software · mercur | Critical10.0 | — | 12.9% | May 3, 2001 |
14Monitor | CVE-2001-0324Proof of concept | Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of microsoft · windows 2000 | Low2.6 | — | 14.2% | May 3, 2001 |
29Monitor | CVE-2001-1342No exploit | Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI thapache · http server | Medium5.0 | — | 30.7% | May 12, 2001 |
- CVE-2001-015240Plan
The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a fi
LowCVSS 2.1WeaponizedEPSS 8%microsoft · plusMay 3, 2001
- CVE-2001-015334Monitor
Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitra
HighCVSS 7.5No exploitEPSS 12%microsoft · visual basicMay 3, 2001
- CVE-2001-015433Monitor
HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the att
HighCVSS 7.5No exploitEPSS 11%microsoft · internet explorerMay 3, 2001
- CVE-2001-016745Plan
Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands
HighCVSS 7.6WeaponizedEPSS 50%att · winvncMay 3, 2001
- CVE-2001-016861This week
Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands
CriticalCVSS 10.0WeaponizedEPSS 70%att · winvncMay 3, 2001
- CVE-2001-017144Plan
Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a
CriticalCVSS 10.0Proof of conceptEPSS 12%whitsoft · slimserveMay 3, 2001
- CVE-2001-019923Monitor
Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a ..
MediumCVSS 5.0Proof of conceptEPSS 10%guido frassetto · sedumMay 3, 2001
- CVE-2001-020527Monitor
Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the r
MediumCVSS 5.0Proof of conceptEPSS 23%aol · aol serverMay 3, 2001
- CVE-2001-023662This week
Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication"
CriticalCVSS 10.0Proof of conceptEPSS 72%sun · solarisMay 3, 2001
- CVE-2001-027743Plan
Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arb
CriticalCVSS 10.0Proof of conceptEPSS 10%working resources inc. · badblueMay 3, 2001
- CVE-2001-028044Plan
Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command.
CriticalCVSS 10.0Proof of conceptEPSS 12%atrium software · mercurMay 3, 2001
- CVE-2001-032414Monitor
Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of
LowCVSS 2.6Proof of conceptEPSS 14%microsoft · windows 2000May 3, 2001
- CVE-2001-134229Monitor
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI th
MediumCVSS 5.0No exploitEPSS 30%apache · http serverMay 12, 2001