По дате публикации
Эксплуатируемые и новые серьёзные CVE: сентябрь 1999 г.
10 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
33Наблюдать | CVE-1999-0891Proof of concept | The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.microsoft · internet explorer · CWE-94 | Средняя5,0 | — | 42,5 % | 1 сент. 1999 г. |
47В плане | CVE-1999-0702Proof of concept | Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExmicrosoft · internet explorer · CWE-94 | Критическая10,0 | — | 24,4 % | 10 сент. 1999 г. |
31Наблюдать | CVE-1999-1575Proof of concept | The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumbmicrosoft · internet explorer | Средняя5,1 | — | 35,6 % | 10 сент. 1999 г. |
56В плане | CVE-1999-1053Готовый эксплойт | guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execapache · http server | Высокая7,5 | — | 85,2 % | 13 сент. 1999 г. |
42В плане | CVE-1999-0886Proof of concept | The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.microsoft · windows nt · CWE-16 | Критическая9,0 | — | 21,5 % | 17 сент. 1999 г. |
34Наблюдать | CVE-1999-0909Эксплойта нет | Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the microsoft · terminal server · CWE-264 | Высокая7,5 | — | 12,0 % | 20 сент. 1999 г. |
34Наблюдать | CVE-1999-0777Эксплойта нет | IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.microsoft · commercial internet system · CWE-264 | Высокая7,5 | — | 11,9 % | 23 сент. 1999 г. |
38Наблюдать | CVE-1999-1484Proof of concept | Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the metmicrosoft · msn setup bulletin board services | Высокая7,5 | — | 26,9 % | 24 сент. 1999 г. |
26Наблюдать | CVE-1999-1578Proof of concept | Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remotemicrosoft · internet explorer | Средняя5,1 | — | 19,4 % | 24 сент. 1999 г. |
34Наблюдать | CVE-1999-1576Proof of concept | Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute adobe · acrobat reader | Высокая7,5 | — | 12,8 % | 27 сент. 1999 г. |
- CVE-1999-089133Наблюдать
The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.
СредняяCVSS 5,0Proof of conceptEPSS 42 %microsoft · internet explorer1 сент. 1999 г.
- CVE-1999-070247В плане
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportEx
КритическаяCVSS 10,0Proof of conceptEPSS 24 %microsoft · internet explorer10 сент. 1999 г.
- CVE-1999-157531Наблюдать
The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb
СредняяCVSS 5,1Proof of conceptEPSS 35 %microsoft · internet explorer10 сент. 1999 г.
- CVE-1999-105356В плане
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to exec
ВысокаяCVSS 7,5Готовый эксплойтEPSS 85 %apache · http server13 сент. 1999 г.
- CVE-1999-088642В плане
The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.
КритическаяCVSS 9,0Proof of conceptEPSS 21 %microsoft · windows nt17 сент. 1999 г.
- CVE-1999-090934Наблюдать
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the
ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %microsoft · terminal server20 сент. 1999 г.
- CVE-1999-077734Наблюдать
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %microsoft · commercial internet system23 сент. 1999 г.
- CVE-1999-148438Наблюдать
Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the met
ВысокаяCVSS 7,5Proof of conceptEPSS 26 %microsoft · msn setup bulletin board services24 сент. 1999 г.
- CVE-1999-157826Наблюдать
Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote
СредняяCVSS 5,1Proof of conceptEPSS 19 %microsoft · internet explorer24 сент. 1999 г.
- CVE-1999-157634Наблюдать
Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute
ВысокаяCVSS 7,5Proof of conceptEPSS 12 %adobe · acrobat reader27 сент. 1999 г.