By publication date
Exploited and new serious CVEs: June 1998
3 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-1999-0278Proof of concept | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.microsoft · internet information server | Medium5.0 | — | 64.8% | Jun 1, 1998 |
40Plan | CVE-1999-0508Weaponized | An account on a router, firewall, or other network device has a default, null, blank, or missing password. | Medium4.6 | — | 3.5% | Jun 1, 1998 |
44Plan | CVE-1999-1479Proof of concept | The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.matt wright · textcounter | Critical10.0 | — | 11.9% | Jun 24, 1998 |
- CVE-1999-027839Monitor
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
MediumCVSS 5.0Proof of conceptEPSS 64%microsoft · internet information serverJun 1, 1998
- CVE-1999-050840Plan
An account on a router, firewall, or other network device has a default, null, blank, or missing password.
MediumCVSS 4.6WeaponizedEPSS 3%Jun 1, 1998
- CVE-1999-147944Plan
The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.
CriticalCVSS 10.0Proof of conceptEPSS 11%matt wright · textcounterJun 24, 1998