By publication date
Exploited and new serious CVEs: January 1997
6 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-1999-0170Weaponized | Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.digital · ultrix | High7.5 | — | 18.7% | Jan 1, 1997 |
34Monitor | CVE-1999-0178Proof of concept | Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary coreilly · oreilly website | High7.5 | — | 12.4% | Jan 1, 1997 |
38Monitor | CVE-1999-0236Proof of concept | ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.apache · http server | High7.5 | — | 25.7% | Jan 1, 1997 |
49Plan | CVE-1999-0504Weaponized | A Windows NT local user or administrator account has a default, null, blank, or missing password.microsoft · windows 2000 | High7.5 | — | 64.2% | Jan 1, 1997 |
40Plan | CVE-1999-0517Weaponized | An SNMP community name is the default (e.g.hp · hp-ux · CWE-200 | Medium5.9 | — | 28.6% | Jan 1, 1997 |
33Monitor | CVE-1999-0562Proof of concept | The registry in Windows NT can be accessed remotely by users who are not administrators.microsoft · windows 2000 | High7.5 | — | 10.1% | Jan 1, 1997 |
- CVE-1999-017040Plan
Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
HighCVSS 7.5WeaponizedEPSS 18%digital · ultrixJan 1, 1997
- CVE-1999-017834Monitor
Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary c
HighCVSS 7.5Proof of conceptEPSS 12%oreilly · oreilly websiteJan 1, 1997
- CVE-1999-023638Monitor
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
HighCVSS 7.5Proof of conceptEPSS 25%apache · http serverJan 1, 1997
- CVE-1999-050449Plan
A Windows NT local user or administrator account has a default, null, blank, or missing password.
HighCVSS 7.5WeaponizedEPSS 64%microsoft · windows 2000Jan 1, 1997
- CVE-1999-051740Plan
An SNMP community name is the default (e.g.
MediumCVSS 5.9WeaponizedEPSS 28%hp · hp-uxJan 1, 1997
- CVE-1999-056233Monitor
The registry in Windows NT can be accessed remotely by users who are not administrators.
HighCVSS 7.5Proof of conceptEPSS 10%microsoft · windows 2000Jan 1, 1997