Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2001

32 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2001-0945
    26Monitor

    Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message

    MediumCVSS 5.0No exploitEPSS 19%

    microsoft · outlook expressDec 3, 2001

  • CVE-2001-0663
    29Monitor

    Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop

    MediumCVSS 5.0Proof of conceptEPSS 31%

    microsoft · windows 2000Dec 6, 2001

  • CVE-2001-0719
    35Monitor

    Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming F

    HighCVSS 7.5No exploitEPSS 17%

    microsoft · windows media playerDec 6, 2001

  • CVE-2001-0721
    25Monitor

    Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or c

    MediumCVSS 5.0No exploitEPSS 17%

    microsoft · windows 98Dec 6, 2001

  • CVE-2001-0722
    33Monitor

    Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie

    MediumCVSS 6.4Proof of conceptEPSS 27%

    microsoft · internet explorerDec 6, 2001

  • CVE-2001-0726
    35Monitor

    Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script,

    HighCVSS 7.5No exploitEPSS 16%

    microsoft · exchange serverDec 6, 2001

  • CVE-2001-0800
    56Plan

    lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.

    CriticalCVSS 10.0WeaponizedEPSS 54%

    sgi · irixDec 6, 2001

  • CVE-2001-0803
    66This week

    Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to exec

    CriticalCVSS 10.0WeaponizedEPSS 85%

    open group · cde common desktop environmentDec 6, 2001

  • CVE-2001-0815
    34Monitor

    Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP

    HighCVSS 7.5Proof of conceptEPSS 14%

    activestate · activeperlDec 6, 2001

  • CVE-2001-0817
    43Plan

    Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and ga

    CriticalCVSS 10.0No exploitEPSS 10%

    hp · hp-uxDec 6, 2001

  • CVE-2001-0820
    34Monitor

    Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log f

    HighCVSS 7.5Proof of conceptEPSS 12%

    gaztek · ghttpDec 6, 2001

  • CVE-2001-0829
    24Monitor

    A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, w

    MediumCVSS 5.1No exploitEPSS 12%

    apache · tomcatDec 6, 2001

  • CVE-2001-0836
    34Monitor

    Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

    HighCVSS 7.5Proof of conceptEPSS 14%

    oracle · application server web cacheDec 6, 2001

  • CVE-2001-0846
    52Plan

    Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator templa

    CriticalCVSS 10.0No exploitEPSS 41%

    lotus · dominoDec 6, 2001

  • CVE-2001-0951
    28Monitor

    Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 wit

    MediumCVSS 5.0Proof of conceptEPSS 27%

    microsoft · windows 2000Dec 7, 2001

  • CVE-2001-1186
    30Monitor

    Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than t

    MediumCVSS 5.0Proof of conceptEPSS 34%

    microsoft · internet information servicesDec 11, 2001

  • CVE-2001-0797
    68This week

    Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large numbe

    CriticalCVSS 10.0WeaponizedEPSS 94%

    sgi · irixDec 12, 2001

  • CVE-2001-0874
    27Monitor

    Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's dom

    MediumCVSS 5.0No exploitEPSS 21%

    microsoft · internet explorerDec 13, 2001

  • CVE-2001-0727
    39Monitor

    Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields

    HighCVSS 7.5No exploitEPSS 31%

    microsoft · internet explorerDec 14, 2001

  • CVE-2001-0542
    34Monitor

    Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functi

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · sql serverDec 20, 2001

  • CVE-2001-0876
    45Plan

    Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NO

    HighCVSS 7.5Proof of conceptEPSS 49%

    microsoft · windows 98Dec 20, 2001

  • CVE-2001-0877
    33Monitor

    Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP a

    MediumCVSS 5.0No exploitEPSS 43%

    microsoft · windows 98Dec 20, 2001

  • CVE-2001-1217
    36Monitor

    Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive

    MediumCVSS 5.0No exploitEPSS 54%

    oracle · application serverDec 21, 2001

  • CVE-2001-1489
    25Monitor

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a l

    MediumCVSS 5.0Proof of conceptEPSS 17%

    microsoft · ieDec 31, 2001

  • CVE-2001-1500
    34Monitor

    ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which a

    HighCVSS 7.5No exploitEPSS 12%

    proftpd project · proftpdDec 31, 2001

  • CVE-2001-1501
    32Monitor

    The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory co

    MediumCVSS 5.0Proof of conceptEPSS 38%

    proftpd project · proftpdDec 31, 2001

  • CVE-2001-1533
    26Monitor

    Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmente

    MediumCVSS 5.3No exploitEPSS 18%

    microsoft · isa serverDec 31, 2001

  • CVE-2001-1539
    24Monitor

    Stack consumption vulnerability in Internet Explorer The JavaScript settimeout function in Internet Explorer allows remote attackers to caus

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · internet explorerDec 31, 2001

  • CVE-2001-1547
    34Monitor

    Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, does not block email a

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · outlook expressDec 31, 2001

  • CVE-2001-1552
    24Monitor

    ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Pr

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · windows meDec 31, 2001

  • CVE-2001-1571
    24Monitor

    The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain t

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · windows xpDec 31, 2001

  • CVE-2001-1583
    65This week

    lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control

    CriticalCVSS 10.0WeaponizedEPSS 83%

    sun · sunosDec 31, 2001