Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: February 1996

2 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a.

    MediumCVSS 5.0WeaponizedEPSS 14%

    Feb 8, 1996

  • IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    microsoft · internet information servicesFeb 25, 1996