По дате публикации
Эксплуатируемые и новые серьёзные CVE: январь 2000 г.
16 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
24Наблюдать | CVE-2000-0082Эксплойта нет | WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.microsoft · webtv | Средняя5,0 | — | 14,5 % | 2 янв. 2000 г. |
34Наблюдать | CVE-2000-0053Эксплойта нет | Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.microsoft · commercial internet system | Высокая7,5 | — | 14,6 % | 4 янв. 2000 г. |
43В плане | CVE-2000-0059Proof of concept | PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remotephp · php | Критическая10,0 | — | 10,9 % | 4 янв. 2000 г. |
34Наблюдать | CVE-2000-0085Эксплойта нет | Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNmicrosoft · hotmail | Высокая7,5 | — | 14,9 % | 4 янв. 2000 г. |
46В плане | CVE-2000-0061Proof of concept | Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been lomicrosoft · internet explorer | Критическая10,0 | — | 19,8 % | 7 янв. 2000 г. |
44В плане | CVE-2000-1220Proof of concept | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing ssgi · irix | Критическая10,0 | — | 14,2 % | 8 янв. 2000 г. |
45В плане | CVE-2000-1221Proof of concept | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostnamsgi · irix | Критическая10,0 | — | 16,7 % | 8 янв. 2000 г. |
46В плане | CVE-2000-0081Эксплойта нет | Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimicrosoft · hotmail | Критическая10,0 | — | 18,9 % | 10 янв. 2000 г. |
28Наблюдать | CVE-2000-0071Эксплойта нет | IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensimicrosoft · internet information server | Средняя5,0 | — | 28,0 % | 11 янв. 2000 г. |
44В плане | CVE-2000-0065Proof of concept | Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.avtronics · inetserv | Критическая10,0 | — | 12,8 % | 17 янв. 2000 г. |
44В плане | CVE-2000-0091Proof of concept | Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or passworinter7 · vpopmail | Критическая10,0 | — | 12,8 % | 21 янв. 2000 г. |
23Наблюдать | CVE-2000-0115Эксплойта нет | IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.microsoft · internet information server | Средняя5,0 | — | 10,0 % | 21 янв. 2000 г. |
31Наблюдать | CVE-2000-0097Proof of concept | The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argumicrosoft · index server | Средняя5,0 | — | 35,8 % | 26 янв. 2000 г. |
35Наблюдать | CVE-2000-0098Эксплойта нет | Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file tmicrosoft · index server | Средняя5,0 | — | 48,5 % | 26 янв. 2000 г. |
34Наблюдать | CVE-2000-0126Proof of concept | Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a ..microsoft · internet information server | Средняя5,0 | — | 45,6 % | 26 янв. 2000 г. |
16Наблюдать | CVE-2000-0132Proof of concept | Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.microsoft · virtual machine · CWE-200 | Низкая2,6 | — | 19,0 % | 31 янв. 2000 г. |
- CVE-2000-008224Наблюдать
WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.
СредняяCVSS 5,0Эксплойта нетEPSS 14 %microsoft · webtv2 янв. 2000 г.
- CVE-2000-005334Наблюдать
Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.
ВысокаяCVSS 7,5Эксплойта нетEPSS 14 %microsoft · commercial internet system4 янв. 2000 г.
- CVE-2000-005943В плане
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote
КритическаяCVSS 10,0Proof of conceptEPSS 10 %php · php4 янв. 2000 г.
- CVE-2000-008534Наблюдать
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYN
ВысокаяCVSS 7,5Эксплойта нетEPSS 14 %microsoft · hotmail4 янв. 2000 г.
- CVE-2000-006146В плане
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been lo
КритическаяCVSS 10,0Proof of conceptEPSS 19 %microsoft · internet explorer7 янв. 2000 г.
- CVE-2000-122044В плане
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing s
КритическаяCVSS 10,0Proof of conceptEPSS 14 %sgi · irix8 янв. 2000 г.
- CVE-2000-122145В плане
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostnam
КритическаяCVSS 10,0Proof of conceptEPSS 16 %sgi · irix8 янв. 2000 г.
- CVE-2000-008146В плане
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadeci
КритическаяCVSS 10,0Эксплойта нетEPSS 18 %microsoft · hotmail10 янв. 2000 г.
- CVE-2000-007128Наблюдать
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensi
СредняяCVSS 5,0Эксплойта нетEPSS 28 %microsoft · internet information server11 янв. 2000 г.
- CVE-2000-006544В плане
Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.
КритическаяCVSS 10,0Proof of conceptEPSS 12 %avtronics · inetserv17 янв. 2000 г.
- CVE-2000-009144В плане
Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or passwor
КритическаяCVSS 10,0Proof of conceptEPSS 12 %inter7 · vpopmail21 янв. 2000 г.
- CVE-2000-011523Наблюдать
IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
СредняяCVSS 5,0Эксплойта нетEPSS 10 %microsoft · internet information server21 янв. 2000 г.
- CVE-2000-009731Наблюдать
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argu
СредняяCVSS 5,0Proof of conceptEPSS 35 %microsoft · index server26 янв. 2000 г.
- CVE-2000-009835Наблюдать
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file t
СредняяCVSS 5,0Эксплойта нетEPSS 48 %microsoft · index server26 янв. 2000 г.
- CVE-2000-012634Наблюдать
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a ..
СредняяCVSS 5,0Proof of conceptEPSS 45 %microsoft · internet information server26 янв. 2000 г.
- CVE-2000-013216Наблюдать
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
НизкаяCVSS 2,6Proof of conceptEPSS 19 %microsoft · virtual machine31 янв. 2000 г.