Skip to content

February 2001 · Band 3

Likely to be exploited (10% or more)

6 CVEs

Each square is a CVE that EPSS gives a 10% or higher chance of exploitation in the next 30 days.

likely to be exploited
6

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

  1. Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string.CVE-2001-0098Bea · 78% likely

    Bea

  2. Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character.CVE-2000-1090Microsoft · 17% likely

    Microsoft

  3. everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.CVE-2001-0023Leif M. Wright · 14% likely

    Leif M. Wright

  4. simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter.CVE-2001-0022Leif M. Wright · 13% likely

    Leif M. Wright

  5. ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.CVE-2001-0025Leif M. Wright · 12% likely

    Leif M. Wright

  6. statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.CVE-2001-0113Omnicron · 10% likely

    Omnicron

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.