By publication date
Exploited and new serious CVEs: July 1997
8 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-1999-0153Proof of concept | Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.microsoft · windows 2000 | Medium5.0 | — | 21.0% | Jul 1, 1997 |
46Plan | CVE-1999-0526Weaponized | An X server's access control is disabled (e.g.x.org · x11 | Critical10.0 | — | 20.8% | Jul 1, 1997 |
40Plan | CVE-1999-0532Weaponized | A DNS server allows zone transfers. | —0.0 | — | 69.2% | Jul 1, 1997 |
15Monitor | CVE-1999-0031No exploit | JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka netscape · communicator | Low2.6 | — | 18.2% | Jul 8, 1997 |
24Monitor | CVE-1999-0196Proof of concept | websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receivwebgais development team · webgais | Medium5.0 | — | 13.4% | Jul 8, 1997 |
25Monitor | CVE-1999-1463No exploit | Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperlymicrosoft · windows nt | Medium5.0 | — | 16.6% | Jul 10, 1997 |
34Monitor | CVE-1999-0146Proof of concept | The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return charncsa · campas | High7.5 | — | 14.9% | Jul 15, 1997 |
32Monitor | CVE-1999-0025Proof of concept | root privileges via buffer overflow in df command on SGI IRIX systems.sgi · irix | High7.2 | — | 12.2% | Jul 16, 1997 |
- CVE-1999-015326Monitor
Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
MediumCVSS 5.0Proof of conceptEPSS 21%microsoft · windows 2000Jul 1, 1997
- CVE-1999-052646Plan
An X server's access control is disabled (e.g.
CriticalCVSS 10.0WeaponizedEPSS 20%x.org · x11Jul 1, 1997
- CVE-1999-053240Plan
A DNS server allows zone transfers.
CVSS 0.0WeaponizedEPSS 69%Jul 1, 1997
- CVE-1999-003115Monitor
JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka
LowCVSS 2.6No exploitEPSS 18%netscape · communicatorJul 8, 1997
- CVE-1999-019624Monitor
websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiv
MediumCVSS 5.0Proof of conceptEPSS 13%webgais development team · webgaisJul 8, 1997
- CVE-1999-146325Monitor
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly
MediumCVSS 5.0No exploitEPSS 16%microsoft · windows ntJul 10, 1997
- CVE-1999-014634Monitor
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return char
HighCVSS 7.5Proof of conceptEPSS 14%ncsa · campasJul 15, 1997
- CVE-1999-002532Monitor
root privileges via buffer overflow in df command on SGI IRIX systems.
HighCVSS 7.2Proof of conceptEPSS 12%sgi · irixJul 16, 1997