By publication date
Exploited and new serious CVEs: August 1999
8 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-1999-0682No exploit | Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e.microsoft · exchange server | Medium5.0 | — | 26.0% | Aug 6, 1999 |
26Monitor | CVE-1999-0867Proof of concept | Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.microsoft · commercial internet system · CWE-20 | Medium5.0 | — | 21.5% | Aug 11, 1999 |
33Monitor | CVE-1999-0875Proof of concept | DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.microsoft · windows 2000 · CWE-16 | High7.5 | — | 10.1% | Aug 11, 1999 |
35Monitor | CVE-1999-0725Proof of concept | When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain filemicrosoft · internet information server · CWE-16 | High7.1 | — | 24.8% | Aug 19, 1999 |
27Monitor | CVE-1999-0668Proof of concept | The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbmicrosoft · internet explorer | Medium5.1 | — | 22.5% | Aug 21, 1999 |
24Monitor | CVE-1999-1052No exploit | Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the dmicrosoft · frontpage | Medium5.0 | — | 14.2% | Aug 24, 1999 |
28Monitor | CVE-2000-0328No exploit | Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and sessiomicrosoft · windows nt | Medium5.0 | — | 25.0% | Aug 24, 1999 |
51Plan | CVE-1999-0911Proof of concept | Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that creaproftpd project · proftpd | Critical10.0 | — | 38.0% | Aug 27, 1999 |
- CVE-1999-068228Monitor
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e.
MediumCVSS 5.0No exploitEPSS 26%microsoft · exchange serverAug 6, 1999
- CVE-1999-086726Monitor
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
MediumCVSS 5.0Proof of conceptEPSS 21%microsoft · commercial internet systemAug 11, 1999
- CVE-1999-087533Monitor
DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
HighCVSS 7.5Proof of conceptEPSS 10%microsoft · windows 2000Aug 11, 1999
- CVE-1999-072535Monitor
When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain file
HighCVSS 7.1Proof of conceptEPSS 24%microsoft · internet information serverAug 19, 1999
- CVE-1999-066827Monitor
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arb
MediumCVSS 5.1Proof of conceptEPSS 22%microsoft · internet explorerAug 21, 1999
- CVE-1999-105224Monitor
Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the d
MediumCVSS 5.0No exploitEPSS 14%microsoft · frontpageAug 24, 1999
- CVE-2000-032828Monitor
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and sessio
MediumCVSS 5.0No exploitEPSS 25%microsoft · windows ntAug 24, 1999
- CVE-1999-091151Plan
Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that crea
CriticalCVSS 10.0Proof of conceptEPSS 38%proftpd project · proftpdAug 27, 1999