Skip to content

February 2002 · Band 4

Possible (1 to 10%)

82 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Every one of the 82 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3…CVE-2001-0975Oracle · 8.8% likely

    Oracle

  2. Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter.CVE-2001-0924Ibm · 8.1% likely

    IBM

  3. Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing…CVE-2001-0991Scott R. Lemmon · 7.1% likely
  4. Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could al…CVE-2001-0904Microsoft · 7.0% likely

    Microsoft

  5. Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to…CVE-2001-1044Basilix · 6.9% likely

    Basilix

  6. Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negat…CVE-2001-1009Fetchmail · 6.5% likely

    CWE-264Fetchmail

  7. Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 t…CVE-2001-0974Oracle · 6.3% likely

    Oracle

  8. Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authent…CVE-2001-0928Gnome · 6.1% likely

    Gnome

  9. Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands (1) HELO, (2…CVE-2001-1078Extremail · 5.4% likely

    Extremail

  10. Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) teln…CVE-2001-1064Cisco · 5.4% likely

    Cisco

  11. Buffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J allow remote attackers to execute arbitrary code via long arguments to the CGI progra…CVE-2001-0958Trend Micro · 5.0% likely

    Trend Micro

  12. Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname.CVE-2001-0934Cooolsoft · 4.4% likely

    Cooolsoft

  13. Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:".CVE-2001-0933Cooolsoft · 4.4% likely

    Cooolsoft

  14. Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET.CVE-2001-0931Cooolsoft · 4.3% likely

    Cooolsoft

  15. Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary co…CVE-2001-0949Valicert · 4.1% likely
  16. PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and deco…CVE-2001-0911Francisco Burzi · 3.9% likely

    Francisco Burzi

  17. shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter.CVE-2001-0985Hassan Consulting · 3.9% likely
  18. Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the a…CVE-2001-0972Surf-Net · 3.8% likely
  19. Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the request_id[DUM…CVE-2001-1045Basilix · 3.8% likely

    Basilix

  20. Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains…CVE-2001-0970Tdavid · 3.4% likely
  21. Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.CVE-2001-1042Transsoft · 3.3% likely

    CWE-59Transsoft

  22. phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameT…CVE-2001-1060Phpmyadmin · 3.3% likely

    Phpmyadmin

  23. Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a ..…CVE-2001-0938Persits · 3.2% likely
  24. THQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a client or server via packets to UDP port 7755.CVE-2001-0952Volition · 3.2% likely
  25. Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data af…CVE-2001-0898Opera Software · 3.1% likely

    Opera

  26. Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command.CVE-2001-0966Nudester.org · 3.0% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.