Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2001

17 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2001-1138
    33Monitor

    Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary fil

    HighCVSS 7.5Proof of conceptEPSS 10%

    randy parker · power up htmlSep 7, 2001

  • CVE-2001-0999
    34Monitor

    Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is te

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · outlook expressSep 12, 2001

  • CVE-2001-1013
    40Plan

    Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no publi

    MediumCVSS 5.0WeaponizedEPSS 65%

    redhat · linuxSep 12, 2001

  • CVE-2001-1112
    33Monitor

    Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of ch

    HighCVSS 7.5Proof of conceptEPSS 10%

    khamil landross and zack jones · eftpSep 12, 2001

  • CVE-2001-0986
    34Monitor

    SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, fil

    MediumCVSS 5.0Proof of conceptEPSS 48%

    microsoft · index serverSep 14, 2001

  • CVE-2001-0506
    49Plan

    Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for

    HighCVSS 7.2Proof of conceptEPSS 68%

    microsoft · internet information serverSep 20, 2001

  • CVE-2001-0508
    30Monitor

    Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request.

    MediumCVSS 5.0No exploitEPSS 32%

    microsoft · internet information servicesSep 20, 2001

  • CVE-2001-0509
    25Monitor

    Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT

    MediumCVSS 5.0No exploitEPSS 16%

    microsoft · exchange serverSep 20, 2001

  • CVE-2001-0541
    35Monitor

    Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Wind

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · windows media playerSep 20, 2001

  • CVE-2001-0543
    26Monitor

    Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via

    MediumCVSS 5.0No exploitEPSS 18%

    microsoft · exchange serverSep 20, 2001

  • CVE-2001-0546
    25Monitor

    Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a

    MediumCVSS 5.0No exploitEPSS 17%

    microsoft · isa serverSep 20, 2001

  • CVE-2001-0552
    48Plan

    ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands

    CriticalCVSS 10.0Proof of conceptEPSS 26%

    hp · openview network node managerSep 20, 2001

  • CVE-2001-0643
    23Monitor

    Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the

    MediumCVSS 5.0Proof of conceptEPSS 11%

    microsoft · internet explorerSep 20, 2001

  • CVE-2001-0658
    34Monitor

    Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · isa serverSep 20, 2001

  • CVE-2001-0690
    34Monitor

    Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker

    HighCVSS 7.5Proof of conceptEPSS 11%

    conectiva · linuxSep 20, 2001

  • CVE-2001-0700
    34Monitor

    Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MIME header.

    HighCVSS 7.5Proof of conceptEPSS 12%

    w3m · w3mSep 20, 2001

  • CVE-2001-0709
    31Monitor

    Microsoft IIS 4.0 and before, when installed on a FAT partition, allows a remote attacker to obtain source code of ASP files via a URL encod

    MediumCVSS 5.0No exploitEPSS 35%

    microsoft · internet information serverSep 20, 2001