Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: June 2001

31 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2001-0146
    31Monitor

    IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a se

    MediumCVSS 5.0No exploitEPSS 37%

    microsoft · exchange serverJun 2, 2001

  • CVE-2001-0148
    38Monitor

    The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a va

    HighCVSS 7.5Proof of conceptEPSS 26%

    microsoft · windows media playerJun 2, 2001

  • CVE-2001-0149
    30Monitor

    Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript fun

    MediumCVSS 5.0Proof of conceptEPSS 32%

    microsoft · internet explorerJun 2, 2001

  • CVE-2001-0150
    25Monitor

    Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allo

    MediumCVSS 5.1Proof of conceptEPSS 17%

    microsoft · internet explorerJun 2, 2001

  • CVE-2001-0151
    40Plan

    IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.

    MediumCVSS 5.0Proof of conceptEPSS 67%

    microsoft · internet information servicesJun 2, 2001

  • CVE-2001-0212
    35Monitor

    Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a ..

    HighCVSS 7.5Proof of conceptEPSS 17%

    his · auktionJun 2, 2001

  • CVE-2001-0253
    23Monitor

    Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories

    MediumCVSS 5.0Proof of conceptEPSS 10%

    iweb systems · hyperseekJun 2, 2001

  • CVE-2001-0311
    40Plan

    Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack client.

    MediumCVSS 4.6WeaponizedEPSS 11%

    hp · omniback iiJun 2, 2001

  • CVE-2001-0318
    33Monitor

    Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while usin

    HighCVSS 7.5No exploitEPSS 11%

    proftpd project · proftpdJun 2, 2001

  • CVE-2001-0322
    26Monitor

    MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash

    MediumCVSS 5.0Proof of conceptEPSS 20%

    microsoft · internet explorerJun 2, 2001

  • CVE-2001-1088
    36Monitor

    Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" opti

    HighCVSS 7.5Proof of conceptEPSS 19%

    microsoft · outlookJun 5, 2001

  • CVE-2001-1163
    43Plan

    Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    munica · netsqlJun 16, 2001

  • CVE-2001-0247
    46Plan

    Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} se

    CriticalCVSS 10.0Proof of conceptEPSS 19%

    mit · kerberos 5Jun 18, 2001

  • CVE-2001-0248
    42Plan

    Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the S

    CriticalCVSS 9.8No exploitEPSS 11%

    hp · hp-uxJun 18, 2001

  • CVE-2001-0249
    45Plan

    Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the L

    CriticalCVSS 9.8No exploitEPSS 19%

    hp · hp-uxJun 18, 2001

  • CVE-2001-0375
    23Monitor

    Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of ser

    MediumCVSS 5.0Proof of conceptEPSS 10%

    cisco · pix firewall 515Jun 18, 2001

  • CVE-2001-0414
    68This week

    Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possib

    CriticalCVSS 10.0WeaponizedEPSS 91%

    dave mills · ntpdJun 18, 2001

  • CVE-2001-1328
    35Monitor

    Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.

    HighCVSS 7.5No exploitEPSS 16%

    sun · sunosJun 22, 2001

  • CVE-2001-1162
    44Plan

    Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overw

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    samba · sambaJun 23, 2001

  • CVE-2001-0237
    25Monitor

    Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerbero

    MediumCVSS 5.0No exploitEPSS 18%

    microsoft · windows 2000Jun 27, 2001

  • CVE-2001-0241
    66This week

    Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print reques

    CriticalCVSS 10.0WeaponizedEPSS 85%

    microsoft · windows 2000Jun 27, 2001

  • CVE-2001-0242
    39Monitor

    Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version

    HighCVSS 7.5No exploitEPSS 30%

    microsoft · windows media playerJun 27, 2001

  • CVE-2001-0243
    25Monitor

    Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Inte

    MediumCVSS 5.0No exploitEPSS 17%

    microsoft · windows media playerJun 27, 2001

  • CVE-2001-0244
    34Monitor

    Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · index serverJun 27, 2001

  • CVE-2001-0245
    24Monitor

    Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include file

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · index serverJun 27, 2001

  • CVE-2001-0328
    25Monitor

    TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or

    MediumCVSS 5.0Proof of conceptEPSS 18%

    Jun 27, 2001

  • CVE-2001-0333
    57Plan

    Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding ..

    HighCVSS 7.5WeaponizedEPSS 90%

    microsoft · internet information serverJun 27, 2001

  • CVE-2001-0334
    34Monitor

    FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · internet information serverJun 27, 2001

  • CVE-2001-0335
    26Monitor

    FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a s

    MediumCVSS 5.0No exploitEPSS 20%

    microsoft · internet information serverJun 27, 2001

  • CVE-2001-0336
    25Monitor

    The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed

    MediumCVSS 5.0Proof of conceptEPSS 15%

    microsoft · internet information serverJun 27, 2001

  • CVE-2001-0339
    35Monitor

    Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actuall

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · internet explorerJun 27, 2001