По дате публикации
Эксплуатируемые и новые серьёзные CVE: август 2001 г.
12 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
23Наблюдать | CVE-2001-0590Proof of concept | Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malapache · tomcat | Средняя5,0 | — | 10,9 % | 2 авг. 2001 г. |
44В плане | CVE-2001-0609Proof of concept | Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed idinfodrom · cfingerd · CWE-193 | Критическая9,8 | — | 18,2 % | 2 авг. 2001 г. |
33Наблюдать | CVE-2001-1130Proof of concept | Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that containssuse · suse linux | Высокая7,5 | — | 10,8 % | 2 авг. 2001 г. |
36Наблюдать | CVE-2001-0504Эксплойта нет | Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gmicrosoft · windows 2000 | Высокая7,5 | — | 21,1 % | 14 авг. 2001 г. |
34Наблюдать | CVE-2001-0522Proof of concept | Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strgnu · privacy guard | Высокая7,5 | — | 13,7 % | 14 авг. 2001 г. |
56В плане | CVE-2001-0538Proof of concept | Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malmicrosoft · outlook | Критическая10,0 | — | 52,8 % | 14 авг. 2001 г. |
52В плане | CVE-2001-0554Proof of concept | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a mit · kerberos · CWE-120 | Критическая10,0 | — | 38,7 % | 14 авг. 2001 г. |
44В плане | CVE-2001-0555Proof of concept | ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a ..screaming media · siteware | Критическая10,0 | — | 14,9 % | 14 авг. 2001 г. |
23Наблюдать | CVE-2001-0557Proof of concept | T.t. hauck · jana web server | Средняя5,0 | — | 10,5 % | 14 авг. 2001 г. |
34Наблюдать | CVE-2001-0561Proof of concept | Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot dodrummond miles · a1stats | Высокая7,5 | — | 12,5 % | 14 авг. 2001 г. |
45В плане | CVE-2001-1067Proof of concept | Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP requaol · aol server | Критическая10,0 | — | 16,1 % | 31 авг. 2001 г. |
34Наблюдать | CVE-2000-1200Эксплойта нет | Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy functmicrosoft · windows nt | Средняя5,0 | — | 48,1 % | 31 авг. 2001 г. |
- CVE-2001-059023Наблюдать
Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a mal
СредняяCVSS 5,0Proof of conceptEPSS 10 %apache · tomcat2 авг. 2001 г.
- CVE-2001-060944В плане
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed id
КритическаяCVSS 9,8Proof of conceptEPSS 18 %infodrom · cfingerd2 авг. 2001 г.
- CVE-2001-113033Наблюдать
Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains
ВысокаяCVSS 7,5Proof of conceptEPSS 10 %suse · suse linux2 авг. 2001 г.
- CVE-2001-050436Наблюдать
Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to g
ВысокаяCVSS 7,5Эксплойта нетEPSS 21 %microsoft · windows 200014 авг. 2001 г.
- CVE-2001-052234Наблюдать
Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format str
ВысокаяCVSS 7,5Proof of conceptEPSS 13 %gnu · privacy guard14 авг. 2001 г.
- CVE-2001-053856В плане
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a mal
КритическаяCVSS 10,0Proof of conceptEPSS 52 %microsoft · outlook14 авг. 2001 г.
- CVE-2001-055452В плане
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a
КритическаяCVSS 10,0Proof of conceptEPSS 38 %mit · kerberos14 авг. 2001 г.
- CVE-2001-055544В плане
ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a ..
КритическаяCVSS 10,0Proof of conceptEPSS 14 %screaming media · siteware14 авг. 2001 г.
- CVE-2001-055723Наблюдать
T.
СредняяCVSS 5,0Proof of conceptEPSS 10 %t. hauck · jana web server14 авг. 2001 г.
- CVE-2001-056134Наблюдать
Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot do
ВысокаяCVSS 7,5Proof of conceptEPSS 12 %drummond miles · a1stats14 авг. 2001 г.
- CVE-2001-106745В плане
Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP requ
КритическаяCVSS 10,0Proof of conceptEPSS 16 %aol · aol server31 авг. 2001 г.
- CVE-2000-120034Наблюдать
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy funct
СредняяCVSS 5,0Эксплойта нетEPSS 48 %microsoft · windows nt31 авг. 2001 г.