Sign in Free assessment

zeus records

3 published records for vendor zeus.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
46Plan	CVE-2010-0359Proof of concept	Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service (daemon crash) or zeus · zeus web server · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	20.0%	Jan 20, 2010
20Monitor	CVE-2010-0362No exploit	Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS rzeus · zeus web server · CWE-310 Pre-auth	Medium5.0	—	1.5%	Jan 20, 2010
10Monitor	CVE-2010-0363No exploit	Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote attackers zeus · zeus web server · CWE-79 Pre-auth XSS	Low2.6	—	1.2%	Jan 20, 2010

CVE-2010-0359
46Plan
Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service (daemon crash) or
CriticalCVSS 10.0Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
zeus · zeus web serverJan 20, 2010
CVE-2010-0362
20Monitor
Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS r
MediumCVSS 5.0No exploitEPSS 1%
- Pre-auth
zeus · zeus web serverJan 20, 2010
CVE-2010-0363
10Monitor
Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote attackers
LowCVSS 2.6No exploitEPSS 1%
- Pre-auth
- XSS
zeus · zeus web serverJan 20, 2010