Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: декабрь 2000 г.

33 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2000-0999
    44В плане

    Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privilege

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    openbsd · openssh11 дек. 2000 г.

  • CVE-2000-1003
    14Наблюдать

    NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to retu

    НизкаяCVSS 2,6Эксплойта нетEPSS 12 %

    microsoft · windows 9511 дек. 2000 г.

  • CVE-2000-1006
    24Наблюдать

    Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause

    СредняяCVSS 5,0Эксплойта нетEPSS 14 %

    microsoft · exchange server11 дек. 2000 г.

  • CVE-2000-1014
    33Наблюдать

    Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitra

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    sco · unixware11 дек. 2000 г.

  • CVE-2000-1029
    44В плане

    Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.

    КритическаяCVSS 10,0Proof of conceptEPSS 14 %

    isc · bind11 дек. 2000 г.

  • CVE-2000-1034
    48В плане

    Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFi

    КритическаяCVSS 10,0Эксплойта нетEPSS 27 %

    microsoft · windows 200011 дек. 2000 г.

  • CVE-2000-1035
    44В плане

    Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary

    КритическаяCVSS 10,0Proof of conceptEPSS 12 %

    typsoft · typsoft11 дек. 2000 г.

  • CVE-2000-1053
    43В плане

    Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack an

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    macromedia · jrun11 дек. 2000 г.

  • CVE-2000-1058
    25Наблюдать

    Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial

    СредняяCVSS 5,0Proof of conceptEPSS 16 %

    hp · openview network node manager11 дек. 2000 г.

  • CVE-2000-1061
    23Наблюдать

    Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a

    СредняяCVSS 5,1Proof of conceptEPSS 10 %

    microsoft · ie11 дек. 2000 г.

  • CVE-1999-1579
    27Наблюдать

    The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote

    СредняяCVSS 5,0Эксплойта нетEPSS 21 %

    microsoft · windows nt14 дек. 2000 г.

  • CVE-2000-0817
    35Наблюдать

    Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via

    ВысокаяCVSS 7,5Эксплойта нетEPSS 15 %

    microsoft · network monitor19 дек. 2000 г.

  • CVE-2000-0884
    49В плане

    IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed UR

    ВысокаяCVSS 7,5Proof of conceptEPSS 63 %

    microsoft · internet information server19 дек. 2000 г.

  • CVE-2000-0885
    34Наблюдать

    Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIF

    ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %

    microsoft · systems management server19 дек. 2000 г.

  • CVE-2000-0886
    51В плане

    IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with ope

    ВысокаяCVSS 7,5Proof of conceptEPSS 68 %

    microsoft · internet information server19 дек. 2000 г.

  • CVE-2000-0887
    27Наблюдать

    named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request

    СредняяCVSS 5,0Proof of conceptEPSS 22 %

    isc · bind19 дек. 2000 г.

  • CVE-2000-0909
    33Наблюдать

    Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    university of washington · pine19 дек. 2000 г.

  • CVE-2000-0913
    31Наблюдать

    mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a

    СредняяCVSS 5,0Эксплойта нетEPSS 35 %

    apache · http server19 дек. 2000 г.

  • CVE-2000-0917
    64На этой неделе

    Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.

    КритическаяCVSS 10,0Готовый эксплойтEPSS 78 %

    caldera · openlinux ebuilder19 дек. 2000 г.

  • CVE-2000-0929
    24Наблюдать

    Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that

    СредняяCVSS 5,0Proof of conceptEPSS 14 %

    microsoft · windows media player19 дек. 2000 г.

  • CVE-2000-0941
    44В плане

    Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" paramete

    КритическаяCVSS 10,0Proof of conceptEPSS 13 %

    kootenay web inc · kootenay web inc whois19 дек. 2000 г.

  • CVE-2000-0942
    27Наблюдать

    The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS)

    СредняяCVSS 5,1Proof of conceptEPSS 22 %

    microsoft · indexing service19 дек. 2000 г.

  • CVE-2000-0944
    42В плане

    CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, w

    КритическаяCVSS 9,8Proof of conceptEPSS 11 %

    cgi · script center news update19 дек. 2000 г.

  • CVE-2000-0945
    62На этой неделе

    The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication w

    КритическаяCVSS 10,0Готовый эксплойтEPSS 72 %

    cisco · catalyst 3500 xl19 дек. 2000 г.

  • CVE-2000-0951
    33Наблюдать

    A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web ro

    СредняяCVSS 5,0Proof of conceptEPSS 44 %

    microsoft · internet information services19 дек. 2000 г.

  • CVE-2000-0967
    46В плане

    PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering

    КритическаяCVSS 10,0Proof of conceptEPSS 20 %

    php · php19 дек. 2000 г.

  • CVE-2000-0970
    44В плане

    IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijac

    ВысокаяCVSS 7,5Эксплойта нетEPSS 45 %

    microsoft · internet information server19 дек. 2000 г.

  • CVE-2000-0973
    45В плане

    Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by fo

    КритическаяCVSS 10,0Proof of conceptEPSS 18 %

    daniel stenberg · curl19 дек. 2000 г.

  • CVE-2000-0979
    48В плане

    File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows

    СредняяCVSS 6,4Готовый эксплойтEPSS 75 %

    microsoft · windows 9519 дек. 2000 г.

  • CVE-2000-0980
    24Наблюдать

    NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows

    СредняяCVSS 5,0Эксплойта нетEPSS 13 %

    microsoft · windows 9519 дек. 2000 г.

  • CVE-2000-0982
    34Наблюдать

    Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allo

    ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %

    microsoft · internet explorer19 дек. 2000 г.

  • CVE-2000-0983
    26Наблюдать

    Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequen

    СредняяCVSS 5,0Proof of conceptEPSS 20 %

    microsoft · netmeeting19 дек. 2000 г.

  • CVE-2000-1227
    24Наблюдать

    Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB

    СредняяCVSS 5,0Эксплойта нетEPSS 13 %

    microsoft · windows 200031 дек. 2000 г.