Every CVE whose affected-product data names Stephen Turner Analog, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (4)
CVE-2001-0301 — CVSS 10.0 (critical): Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large…
CVE-2002-0166 — CVSS 7.5 (high): Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the…
CVE-1999-1287 — CVSS 5.0 (medium): Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.
CVE-2002-1154 — CVSS 5.0 (medium): anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to…