Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: октябрь 2000 г.

21 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2000-1204
    23Наблюдать

    Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source

    СредняяCVSS 5,0Эксплойта нетEPSS 10 %

    apache · http server13 окт. 2000 г.

  • CVE-2000-0676
    26Наблюдать

    Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a conne

    СредняяCVSS 5,0Proof of conceptEPSS 20 %

    netscape · communicator20 окт. 2000 г.

  • CVE-2000-0681
    55В плане

    Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extensi

    КритическаяCVSS 10,0Эксплойта нетEPSS 50 %

    bea · weblogic server20 окт. 2000 г.

  • CVE-2000-0684
    44В плане

    BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP c

    КритическаяCVSS 10,0Proof of conceptEPSS 12 %

    bea · weblogic server20 окт. 2000 г.

  • CVE-2000-0685
    44В плане

    BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Ja

    КритическаяCVSS 10,0Proof of conceptEPSS 12 %

    bea · weblogic server20 окт. 2000 г.

  • CVE-2000-0690
    43В плане

    Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile pa

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    cgi script center · auction weaver20 окт. 2000 г.

  • CVE-2000-0697
    43В плане

    The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell

    КритическаяCVSS 10,0Proof of conceptEPSS 11 %

    sun · solaris answerbook220 окт. 2000 г.

  • CVE-2000-0699
    44В плане

    Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via fo

    КритическаяCVSS 10,0Proof of conceptEPSS 14 %

    hp · hp-ux20 окт. 2000 г.

  • CVE-2000-0704
    44В плане

    Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO

    КритическаяCVSS 10,0Proof of conceptEPSS 13 %

    omron · worldview20 окт. 2000 г.

  • CVE-2000-0709
    28Наблюдать

    The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some compo

    СредняяCVSS 5,0Эксплойта нетEPSS 25 %

    microsoft · frontpage20 окт. 2000 г.

  • CVE-2000-0710
    28Наблюдать

    The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the serv

    СредняяCVSS 5,0Эксплойта нетEPSS 26 %

    microsoft · frontpage20 окт. 2000 г.

  • CVE-2000-0711
    40В плане

    Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attacker

    ВысокаяCVSS 7,5Proof of conceptEPSS 33 %

    netscape · communicator20 окт. 2000 г.

  • CVE-2000-0733
    44В плане

    Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execut

    КритическаяCVSS 10,0Proof of conceptEPSS 12 %

    sgi · irix20 окт. 2000 г.

  • CVE-2000-0742
    26Наблюдать

    The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet

    СредняяCVSS 5,0Эксплойта нетEPSS 18 %

    microsoft · windows 9520 окт. 2000 г.

  • CVE-2000-0743
    44В плане

    Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation

    КритическаяCVSS 10,0Proof of conceptEPSS 12 %

    university of minnesota · gopherd20 окт. 2000 г.

  • CVE-2000-0745
    34Наблюдать

    admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by req

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    francisco burzi · php-nuke20 окт. 2000 г.

  • CVE-2000-0746
    33Наблюдать

    Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks.

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    microsoft · frontpage20 окт. 2000 г.

  • CVE-2000-0759
    33Наблюдать

    Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates

    СредняяCVSS 6,4Proof of conceptEPSS 25 %

    apache · tomcat20 окт. 2000 г.

  • CVE-2000-0760
    44В плане

    The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexist

    СредняяCVSS 6,4Proof of conceptEPSS 62 %

    apache · tomcat20 окт. 2000 г.

  • CVE-2000-0770
    30Наблюдать

    IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, whi

    СредняяCVSS 6,4Эксплойта нетEPSS 15 %

    microsoft · internet information server20 окт. 2000 г.

  • CVE-2000-0778
    46В плане

    IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header,

    СредняяCVSS 5,0Proof of conceptEPSS 87 %

    microsoft · internet information services20 окт. 2000 г.