By publication date
Exploited and new serious CVEs: January 2001
8 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2001-0162Proof of concept | WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.microsoft · windows embedded compact | High7.5 | — | 15.2% | Jan 1, 2001 |
34Monitor | CVE-2000-1039No exploit | Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connecmicrosoft · windows 95 | Medium5.0 | — | 45.8% | Jan 9, 2001 |
62This week | CVE-2000-1089Weaponized | Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflomicrosoft · windows 2000 | Critical10.0 | — | 74.6% | Jan 9, 2001 |
20Monitor | CVE-2000-1105Proof of concept | The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely demicrosoft · indexing service | Medium4.3 | — | 10.8% | Jan 9, 2001 |
24Monitor | CVE-2000-1111No exploit | Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to camicrosoft · windows 2000 | Medium5.0 | — | 13.0% | Jan 9, 2001 |
22Monitor | CVE-2000-1112Proof of concept | Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a smicrosoft · windows media player | Medium4.6 | — | 13.9% | Jan 9, 2001 |
36Monitor | CVE-2000-1113Proof of concept | Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Rediremicrosoft · windows media player | High7.5 | — | 19.4% | Jan 9, 2001 |
35Monitor | CVE-2000-1149No exploit | Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long usernamicrosoft · windows nt | High7.5 | — | 16.0% | Jan 9, 2001 |
- CVE-2001-016235Monitor
WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
HighCVSS 7.5Proof of conceptEPSS 15%microsoft · windows embedded compactJan 1, 2001
- CVE-2000-103934Monitor
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connec
MediumCVSS 5.0No exploitEPSS 45%microsoft · windows 95Jan 9, 2001
- CVE-2000-108962This week
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflo
CriticalCVSS 10.0WeaponizedEPSS 74%microsoft · windows 2000Jan 9, 2001
- CVE-2000-110520Monitor
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely de
MediumCVSS 4.3Proof of conceptEPSS 10%microsoft · indexing serviceJan 9, 2001
- CVE-2000-111124Monitor
Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to ca
MediumCVSS 5.0No exploitEPSS 13%microsoft · windows 2000Jan 9, 2001
- CVE-2000-111222Monitor
Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a s
MediumCVSS 4.6Proof of conceptEPSS 13%microsoft · windows media playerJan 9, 2001
- CVE-2000-111336Monitor
Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redire
HighCVSS 7.5Proof of conceptEPSS 19%microsoft · windows media playerJan 9, 2001
- CVE-2000-114935Monitor
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long userna
HighCVSS 7.5No exploitEPSS 16%microsoft · windows ntJan 9, 2001