By publication date
Exploited and new serious CVEs: November 2001
7 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-2001-0723No exploit | Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulnermicrosoft · internet explorer | Medium6.4 | — | 11.3% | Nov 14, 2001 |
34Monitor | CVE-2001-0724No exploit | Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which camicrosoft · internet explorer | High7.5 | — | 12.3% | Nov 14, 2001 |
36Monitor | CVE-2001-0902No exploit | Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characmicrosoft · internet information services | High7.5 | — | 18.5% | Nov 20, 2001 |
36Monitor | CVE-2001-0909Proof of concept | Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long microsoft · windows xp | High7.5 | — | 19.7% | Nov 21, 2001 |
38Monitor | CVE-2001-0875Proof of concept | Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dimicrosoft · internet explorer | High7.5 | — | 28.0% | Nov 26, 2001 |
37Monitor | CVE-2001-0932Proof of concept | Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code vcooolsoft · powerftp | High7.5 | — | 22.6% | Nov 28, 2001 |
52Plan | CVE-2001-0550Proof of concept | wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handldavid madore · ftpd-bsd | High7.5 | — | 74.6% | Nov 30, 2001 |
- CVE-2001-072328Monitor
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulner
MediumCVSS 6.4No exploitEPSS 11%microsoft · internet explorerNov 14, 2001
- CVE-2001-072434Monitor
Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which ca
HighCVSS 7.5No exploitEPSS 12%microsoft · internet explorerNov 14, 2001
- CVE-2001-090236Monitor
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed charac
HighCVSS 7.5No exploitEPSS 18%microsoft · internet information servicesNov 20, 2001
- CVE-2001-090936Monitor
Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long
HighCVSS 7.5Proof of conceptEPSS 19%microsoft · windows xpNov 21, 2001
- CVE-2001-087538Monitor
Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the di
HighCVSS 7.5Proof of conceptEPSS 28%microsoft · internet explorerNov 26, 2001
- CVE-2001-093237Monitor
Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code v
HighCVSS 7.5Proof of conceptEPSS 22%cooolsoft · powerftpNov 28, 2001
- CVE-2001-055052Plan
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handl
HighCVSS 7.5Proof of conceptEPSS 74%david madore · ftpd-bsdNov 30, 2001