By publication date
Exploited and new serious CVEs: December 1998
3 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-1999-0332No exploit | Buffer overflow in NetMeeting allows denial of service and remote command execution.microsoft · netmeeting · CWE-119 | High7.5 | — | 12.7% | Dec 1, 1998 |
45Plan | CVE-1999-0385No exploit | The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commandmicrosoft · exchange server · CWE-120 | Critical10.0 | — | 18.2% | Dec 1, 1998 |
15Monitor | CVE-1999-0869Proof of concept | Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.microsoft · internet explorer | Low2.6 | — | 17.3% | Dec 1, 1998 |
- CVE-1999-033234Monitor
Buffer overflow in NetMeeting allows denial of service and remote command execution.
HighCVSS 7.5No exploitEPSS 12%microsoft · netmeetingDec 1, 1998
- CVE-1999-038545Plan
The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute command
CriticalCVSS 10.0No exploitEPSS 18%microsoft · exchange serverDec 1, 1998
- CVE-1999-086915Monitor
Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.
LowCVSS 2.6Proof of conceptEPSS 17%microsoft · internet explorerDec 1, 1998