By publication date
Exploited and new serious CVEs: August 2001
12 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
23Monitor | CVE-2001-0590Proof of concept | Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malapache · tomcat | Medium5.0 | — | 10.9% | Aug 2, 2001 |
44Plan | CVE-2001-0609Proof of concept | Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed idinfodrom · cfingerd · CWE-193 | Critical9.8 | — | 18.2% | Aug 2, 2001 |
33Monitor | CVE-2001-1130Proof of concept | Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that containssuse · suse linux | High7.5 | — | 10.8% | Aug 2, 2001 |
36Monitor | CVE-2001-0504No exploit | Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gmicrosoft · windows 2000 | High7.5 | — | 21.1% | Aug 14, 2001 |
34Monitor | CVE-2001-0522Proof of concept | Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strgnu · privacy guard | High7.5 | — | 13.7% | Aug 14, 2001 |
56Plan | CVE-2001-0538Proof of concept | Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malmicrosoft · outlook | Critical10.0 | — | 52.8% | Aug 14, 2001 |
52Plan | CVE-2001-0554Proof of concept | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a mit · kerberos · CWE-120 | Critical10.0 | — | 38.7% | Aug 14, 2001 |
44Plan | CVE-2001-0555Proof of concept | ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a ..screaming media · siteware | Critical10.0 | — | 14.9% | Aug 14, 2001 |
23Monitor | CVE-2001-0557Proof of concept | T.t. hauck · jana web server | Medium5.0 | — | 10.5% | Aug 14, 2001 |
34Monitor | CVE-2001-0561Proof of concept | Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot dodrummond miles · a1stats | High7.5 | — | 12.5% | Aug 14, 2001 |
45Plan | CVE-2001-1067Proof of concept | Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP requaol · aol server | Critical10.0 | — | 16.1% | Aug 31, 2001 |
34Monitor | CVE-2000-1200No exploit | Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy functmicrosoft · windows nt | Medium5.0 | — | 48.1% | Aug 31, 2001 |
- CVE-2001-059023Monitor
Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a mal
MediumCVSS 5.0Proof of conceptEPSS 10%apache · tomcatAug 2, 2001
- CVE-2001-060944Plan
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed id
CriticalCVSS 9.8Proof of conceptEPSS 18%infodrom · cfingerdAug 2, 2001
- CVE-2001-113033Monitor
Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains
HighCVSS 7.5Proof of conceptEPSS 10%suse · suse linuxAug 2, 2001
- CVE-2001-050436Monitor
Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to g
HighCVSS 7.5No exploitEPSS 21%microsoft · windows 2000Aug 14, 2001
- CVE-2001-052234Monitor
Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format str
HighCVSS 7.5Proof of conceptEPSS 13%gnu · privacy guardAug 14, 2001
- CVE-2001-053856Plan
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a mal
CriticalCVSS 10.0Proof of conceptEPSS 52%microsoft · outlookAug 14, 2001
- CVE-2001-055452Plan
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a
CriticalCVSS 10.0Proof of conceptEPSS 38%mit · kerberosAug 14, 2001
- CVE-2001-055544Plan
ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a ..
CriticalCVSS 10.0Proof of conceptEPSS 14%screaming media · sitewareAug 14, 2001
- CVE-2001-055723Monitor
T.
MediumCVSS 5.0Proof of conceptEPSS 10%t. hauck · jana web serverAug 14, 2001
- CVE-2001-056134Monitor
Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot do
HighCVSS 7.5Proof of conceptEPSS 12%drummond miles · a1statsAug 14, 2001
- CVE-2001-106745Plan
Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP requ
CriticalCVSS 10.0Proof of conceptEPSS 16%aol · aol serverAug 31, 2001
- CVE-2000-120034Monitor
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy funct
MediumCVSS 5.0No exploitEPSS 48%microsoft · windows ntAug 31, 2001