By publication date
Exploited and new serious CVEs: July 1998
3 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
43Plan | CVE-1999-0006Proof of concept | Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.qualcomm · qpopper · CWE-125 | Critical9.8 | — | 12.1% | Jul 14, 1998 |
46Plan | CVE-1999-0005Proof of concept | Arbitrary command execution via IMAP buffer overflow in authenticate command.netscape · messaging server | Critical10.0 | — | 18.4% | Jul 20, 1998 |
24Monitor | CVE-1999-1447No exploit | Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in amicrosoft · internet explorer | Medium5.0 | — | 13.3% | Jul 28, 1998 |
- CVE-1999-000643Plan
Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
CriticalCVSS 9.8Proof of conceptEPSS 12%qualcomm · qpopperJul 14, 1998
- CVE-1999-000546Plan
Arbitrary command execution via IMAP buffer overflow in authenticate command.
CriticalCVSS 10.0Proof of conceptEPSS 18%netscape · messaging serverJul 20, 1998
- CVE-1999-144724Monitor
Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in a
MediumCVSS 5.0No exploitEPSS 13%microsoft · internet explorerJul 28, 1998