По дате публикации
Эксплуатируемые и новые серьёзные CVE: январь 2001 г.
8 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
35Наблюдать | CVE-2001-0162Proof of concept | WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.microsoft · windows embedded compact | Высокая7,5 | — | 15,2 % | 1 янв. 2001 г. |
34Наблюдать | CVE-2000-1039Эксплойта нет | Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connecmicrosoft · windows 95 | Средняя5,0 | — | 45,8 % | 9 янв. 2001 г. |
62На этой неделе | CVE-2000-1089Готовый эксплойт | Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflomicrosoft · windows 2000 | Критическая10,0 | — | 74,6 % | 9 янв. 2001 г. |
20Наблюдать | CVE-2000-1105Proof of concept | The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely demicrosoft · indexing service | Средняя4,3 | — | 10,8 % | 9 янв. 2001 г. |
24Наблюдать | CVE-2000-1111Эксплойта нет | Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to camicrosoft · windows 2000 | Средняя5,0 | — | 13,0 % | 9 янв. 2001 г. |
22Наблюдать | CVE-2000-1112Proof of concept | Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a smicrosoft · windows media player | Средняя4,6 | — | 13,9 % | 9 янв. 2001 г. |
36Наблюдать | CVE-2000-1113Proof of concept | Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Rediremicrosoft · windows media player | Высокая7,5 | — | 19,4 % | 9 янв. 2001 г. |
35Наблюдать | CVE-2000-1149Эксплойта нет | Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long usernamicrosoft · windows nt | Высокая7,5 | — | 16,0 % | 9 янв. 2001 г. |
- CVE-2001-016235Наблюдать
WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
ВысокаяCVSS 7,5Proof of conceptEPSS 15 %microsoft · windows embedded compact1 янв. 2001 г.
- CVE-2000-103934Наблюдать
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connec
СредняяCVSS 5,0Эксплойта нетEPSS 45 %microsoft · windows 959 янв. 2001 г.
- CVE-2000-108962На этой неделе
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflo
КритическаяCVSS 10,0Готовый эксплойтEPSS 74 %microsoft · windows 20009 янв. 2001 г.
- CVE-2000-110520Наблюдать
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely de
СредняяCVSS 4,3Proof of conceptEPSS 10 %microsoft · indexing service9 янв. 2001 г.
- CVE-2000-111124Наблюдать
Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to ca
СредняяCVSS 5,0Эксплойта нетEPSS 13 %microsoft · windows 20009 янв. 2001 г.
- CVE-2000-111222Наблюдать
Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a s
СредняяCVSS 4,6Proof of conceptEPSS 13 %microsoft · windows media player9 янв. 2001 г.
- CVE-2000-111336Наблюдать
Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redire
ВысокаяCVSS 7,5Proof of conceptEPSS 19 %microsoft · windows media player9 янв. 2001 г.
- CVE-2000-114935Наблюдать
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long userna
ВысокаяCVSS 7,5Эксплойта нетEPSS 16 %microsoft · windows nt9 янв. 2001 г.