Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: June 1999

5 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    cdomain · cdomainfreeJun 1, 1999

  • CVE-1999-1412
    31Monitor

    A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash)

    MediumCVSS 5.0Proof of conceptEPSS 35%

    apache · http serverJun 3, 1999

  • CVE-1999-0874
    62This week

    Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM e

    CriticalCVSS 10.0WeaponizedEPSS 74%

    microsoft · internet information serverJun 16, 1999

  • CVE-1999-1164
    24Monitor

    Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL header

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · outlookJun 25, 1999

  • CVE-1999-0140
    24Monitor

    Denial of service in RAS/PPTP on NT systems.

    MediumCVSS 5.0Proof of conceptEPSS 13%

    microsoft · windows ntJun 30, 1999