By publication date
Exploited and new serious CVEs: September 1997
4 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
33Monitor | CVE-1999-0148Proof of concept | The handler CGI program in IRIX allows arbitrary command execution.sgi · irix | High7.5 | — | 10.4% | Sep 1, 1997 |
41Plan | CVE-1999-0191Proof of concept | IIS newdsn.exe CGI script allows remote users to overwrite files.microsoft · internet information server | Medium6.4 | — | 53.3% | Sep 1, 1997 |
44Plan | CVE-1999-0667Weaponized | The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service.arp protocol · arp protocol | Critical10.0 | — | 13.6% | Sep 19, 1997 |
33Monitor | CVE-1999-0267Proof of concept | Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.ncsa · ncsa httpd | High7.5 | — | 10.2% | Sep 23, 1997 |
- CVE-1999-014833Monitor
The handler CGI program in IRIX allows arbitrary command execution.
HighCVSS 7.5Proof of conceptEPSS 10%sgi · irixSep 1, 1997
- CVE-1999-019141Plan
IIS newdsn.exe CGI script allows remote users to overwrite files.
MediumCVSS 6.4Proof of conceptEPSS 53%microsoft · internet information serverSep 1, 1997
- CVE-1999-066744Plan
The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service.
CriticalCVSS 10.0WeaponizedEPSS 13%arp protocol · arp protocolSep 19, 1997
- CVE-1999-026733Monitor
Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
HighCVSS 7.5Proof of conceptEPSS 10%ncsa · ncsa httpdSep 23, 1997