По дате публикации
Эксплуатируемые и новые серьёзные CVE: март 2001 г.
11 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
26Наблюдать | CVE-1999-0681Proof of concept | Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackersmicrosoft · frontpage | Средняя5,0 | — | 20,4 % | 12 мар. 2001 г. |
26Наблюдать | CVE-1999-0945Эксплойта нет | Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service viamicrosoft · exchange server · CWE-120 | Средняя5,0 | — | 19,5 % | 12 мар. 2001 г. |
25Наблюдать | CVE-2001-0017Эксплойта нет | Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malfmicrosoft · windows nt | Средняя5,0 | — | 17,3 % | 12 мар. 2001 г. |
43В плане | CVE-2001-0113Proof of concept | statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used aomnicron · omnihttpd | Критическая10,0 | — | 10,3 % | 12 мар. 2001 г. |
44В плане | CVE-2001-0129Proof of concept | Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrartinyproxy · tinyproxy | Критическая10,0 | — | 13,8 % | 12 мар. 2001 г. |
33Наблюдать | CVE-2001-0136Proof of concept | Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commanproftpd · proftpd · CWE-401 | Средняя5,0 | — | 44,9 % | 12 мар. 2001 г. |
27Наблюдать | CVE-2001-0137Proof of concept | Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a smicrosoft · windows media player | Средняя5,1 | — | 22,1 % | 12 мар. 2001 г. |
50В плане | CVE-2001-0144Proof of concept | CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an inssh · ssh | Критическая10,0 | — | 32,4 % | 12 мар. 2001 г. |
43В плане | CVE-2001-0925Proof of concept | The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via anapache · http server · CWE-22 | Средняя5,0 | — | 75,2 % | 12 мар. 2001 г. |
44В плане | CVE-2001-0197Proof of concept | Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.icecast · icecast | Критическая10,0 | — | 13,1 % | 26 мар. 2001 г. |
44В плане | CVE-2001-0233Proof of concept | Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commanmatthew smith · micq | Критическая10,0 | — | 14,5 % | 26 мар. 2001 г. |
- CVE-1999-068126Наблюдать
Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers
СредняяCVSS 5,0Proof of conceptEPSS 20 %microsoft · frontpage12 мар. 2001 г.
- CVE-1999-094526Наблюдать
Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via
СредняяCVSS 5,0Эксплойта нетEPSS 19 %microsoft · exchange server12 мар. 2001 г.
- CVE-2001-001725Наблюдать
Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malf
СредняяCVSS 5,0Эксплойта нетEPSS 17 %microsoft · windows nt12 мар. 2001 г.
- CVE-2001-011343В плане
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used a
КритическаяCVSS 10,0Proof of conceptEPSS 10 %omnicron · omnihttpd12 мар. 2001 г.
- CVE-2001-012944В плане
Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrar
КритическаяCVSS 10,0Proof of conceptEPSS 13 %tinyproxy · tinyproxy12 мар. 2001 г.
- CVE-2001-013633Наблюдать
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE comman
СредняяCVSS 5,0Proof of conceptEPSS 44 %proftpd · proftpd12 мар. 2001 г.
- CVE-2001-013727Наблюдать
Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a s
СредняяCVSS 5,1Proof of conceptEPSS 22 %microsoft · windows media player12 мар. 2001 г.
- CVE-2001-014450В плане
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an in
КритическаяCVSS 10,0Proof of conceptEPSS 32 %ssh · ssh12 мар. 2001 г.
- CVE-2001-092543В плане
The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an
СредняяCVSS 5,0Proof of conceptEPSS 75 %apache · http server12 мар. 2001 г.
- CVE-2001-019744В плане
Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.
КритическаяCVSS 10,0Proof of conceptEPSS 13 %icecast · icecast26 мар. 2001 г.
- CVE-2001-023344В плане
Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary comman
КритическаяCVSS 10,0Proof of conceptEPSS 14 %matthew smith · micq26 мар. 2001 г.