По дате публикации
Эксплуатируемые и новые серьёзные CVE: ноябрь 2000 г.
9 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
28Наблюдать | CVE-2000-0830Proof of concept | annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 tmicrosoft · webtv | Средняя5,0 | — | 25,8 % | 14 нояб. 2000 г. |
43В плане | CVE-2000-0833Proof of concept | Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.jack de winter · winsmtp | Критическая10,0 | — | 10,4 % | 14 нояб. 2000 г. |
42В плане | CVE-2000-0834Proof of concept | The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the Nmicrosoft · windows 2000 | Высокая7,5 | — | 39,6 % | 14 нояб. 2000 г. |
45В плане | CVE-2000-0844Proof of concept | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackecaldera · openlinux ebuilder · CWE-264 | Критическая10,0 | — | 15,6 % | 14 нояб. 2000 г. |
14Наблюдать | CVE-2000-0849Эксплойта нет | Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service vmicrosoft · windows media services | Низкая2,6 | — | 14,9 % | 14 нояб. 2000 г. |
51В плане | CVE-2000-0854Proof of concept | When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msimicrosoft · office | Критическая10,0 | — | 37,2 % | 14 нояб. 2000 г. |
26Наблюдать | CVE-2000-0858Эксплойта нет | Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed remicrosoft · internet information server | Средняя5,0 | — | 18,7 % | 14 нояб. 2000 г. |
33Наблюдать | CVE-2000-0868Эксплойта нет | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /capache · http server | Средняя5,0 | — | 44,7 % | 14 нояб. 2000 г. |
35Наблюдать | CVE-2000-0869Proof of concept | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories viaapache · http server | Средняя5,0 | — | 50,9 % | 14 нояб. 2000 г. |
- CVE-2000-083028Наблюдать
annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 t
СредняяCVSS 5,0Proof of conceptEPSS 25 %microsoft · webtv14 нояб. 2000 г.
- CVE-2000-083343В плане
Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.
КритическаяCVSS 10,0Proof of conceptEPSS 10 %jack de winter · winsmtp14 нояб. 2000 г.
- CVE-2000-083442В плане
The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the N
ВысокаяCVSS 7,5Proof of conceptEPSS 39 %microsoft · windows 200014 нояб. 2000 г.
- CVE-2000-084445В плане
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attacke
КритическаяCVSS 10,0Proof of conceptEPSS 15 %caldera · openlinux ebuilder14 нояб. 2000 г.
- CVE-2000-084914Наблюдать
Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service v
НизкаяCVSS 2,6Эксплойта нетEPSS 14 %microsoft · windows media services14 нояб. 2000 г.
- CVE-2000-085451В плане
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi
КритическаяCVSS 10,0Proof of conceptEPSS 37 %microsoft · office14 нояб. 2000 г.
- CVE-2000-085826Наблюдать
Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed re
СредняяCVSS 5,0Эксплойта нетEPSS 18 %microsoft · internet information server14 нояб. 2000 г.
- CVE-2000-086833Наблюдать
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /c
СредняяCVSS 5,0Эксплойта нетEPSS 44 %apache · http server14 нояб. 2000 г.
- CVE-2000-086935Наблюдать
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via
СредняяCVSS 5,0Proof of conceptEPSS 50 %apache · http server14 нояб. 2000 г.