By publication date
Exploited and new serious CVEs: December 1996
3 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
52Plan | CVE-1999-0043No exploit | Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.isc · inn · CWE-78 | Critical9.8 | — | 44.5% | Dec 4, 1996 |
38Monitor | CVE-1999-0045Proof of concept | List of arbitrary files on Web host via nph-test-cgi script.apache · http server | High7.5 | — | 25.9% | Dec 10, 1996 |
42Plan | CVE-1999-0128Proof of concept | Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.digital · osf 1 | Medium5.0 | — | 74.5% | Dec 18, 1996 |
- CVE-1999-004352Plan
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
CriticalCVSS 9.8No exploitEPSS 44%isc · innDec 4, 1996
- CVE-1999-004538Monitor
List of arbitrary files on Web host via nph-test-cgi script.
HighCVSS 7.5Proof of conceptEPSS 25%apache · http serverDec 10, 1996
- CVE-1999-012842Plan
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
MediumCVSS 5.0Proof of conceptEPSS 74%digital · osf 1Dec 18, 1996