By publication date
Exploited and new serious CVEs: September 1999
10 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
33Monitor | CVE-1999-0891Proof of concept | The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.microsoft · internet explorer · CWE-94 | Medium5.0 | — | 42.5% | Sep 1, 1999 |
47Plan | CVE-1999-0702Proof of concept | Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExmicrosoft · internet explorer · CWE-94 | Critical10.0 | — | 24.4% | Sep 10, 1999 |
31Monitor | CVE-1999-1575Proof of concept | The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumbmicrosoft · internet explorer | Medium5.1 | — | 35.6% | Sep 10, 1999 |
56Plan | CVE-1999-1053Weaponized | guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execapache · http server | High7.5 | — | 85.2% | Sep 13, 1999 |
42Plan | CVE-1999-0886Proof of concept | The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.microsoft · windows nt · CWE-16 | Critical9.0 | — | 21.5% | Sep 17, 1999 |
34Monitor | CVE-1999-0909No exploit | Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the microsoft · terminal server · CWE-264 | High7.5 | — | 12.0% | Sep 20, 1999 |
34Monitor | CVE-1999-0777No exploit | IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.microsoft · commercial internet system · CWE-264 | High7.5 | — | 11.9% | Sep 23, 1999 |
38Monitor | CVE-1999-1484Proof of concept | Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the metmicrosoft · msn setup bulletin board services | High7.5 | — | 26.9% | Sep 24, 1999 |
26Monitor | CVE-1999-1578Proof of concept | Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remotemicrosoft · internet explorer | Medium5.1 | — | 19.4% | Sep 24, 1999 |
34Monitor | CVE-1999-1576Proof of concept | Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute adobe · acrobat reader | High7.5 | — | 12.8% | Sep 27, 1999 |
- CVE-1999-089133Monitor
The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.
MediumCVSS 5.0Proof of conceptEPSS 42%microsoft · internet explorerSep 1, 1999
- CVE-1999-070247Plan
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportEx
CriticalCVSS 10.0Proof of conceptEPSS 24%microsoft · internet explorerSep 10, 1999
- CVE-1999-157531Monitor
The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb
MediumCVSS 5.1Proof of conceptEPSS 35%microsoft · internet explorerSep 10, 1999
- CVE-1999-105356Plan
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to exec
HighCVSS 7.5WeaponizedEPSS 85%apache · http serverSep 13, 1999
- CVE-1999-088642Plan
The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.
CriticalCVSS 9.0Proof of conceptEPSS 21%microsoft · windows ntSep 17, 1999
- CVE-1999-090934Monitor
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the
HighCVSS 7.5No exploitEPSS 12%microsoft · terminal serverSep 20, 1999
- CVE-1999-077734Monitor
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
HighCVSS 7.5No exploitEPSS 11%microsoft · commercial internet systemSep 23, 1999
- CVE-1999-148438Monitor
Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the met
HighCVSS 7.5Proof of conceptEPSS 26%microsoft · msn setup bulletin board servicesSep 24, 1999
- CVE-1999-157826Monitor
Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote
MediumCVSS 5.1Proof of conceptEPSS 19%microsoft · internet explorerSep 24, 1999
- CVE-1999-157634Monitor
Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute
HighCVSS 7.5Proof of conceptEPSS 12%adobe · acrobat readerSep 27, 1999