По дате публикации
Эксплуатируемые и новые серьёзные CVE: октябрь 2001 г.
15 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
37Наблюдать | CVE-2001-0731Proof of concept | Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the apache · http server | Средняя5,0 | — | 56,7 % | 1 окт. 2001 г. |
45В плане | CVE-2001-0746Proof of concept | Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of serviiplanet · iplanet web server | Критическая10,0 | — | 15,1 % | 18 окт. 2001 г. |
35Наблюдать | CVE-2001-0763Proof of concept | Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, wdebian · debian linux | Высокая7,5 | — | 17,1 % | 18 окт. 2001 г. |
35Наблюдать | CVE-2001-0775Proof of concept | Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format imagxli · xli · CWE-119 | Высокая7,5 | — | 16,3 % | 18 окт. 2001 г. |
59В плане | CVE-2001-0779Proof of concept | Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.sun · solaris | Критическая10,0 | — | 62,1 % | 18 окт. 2001 г. |
30Наблюдать | CVE-2001-0505Эксплойта нет | Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a largemicrosoft · services | Средняя5,0 | — | 33,3 % | 30 окт. 2001 г. |
41В плане | CVE-2001-0540Эксплойта нет | Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via microsoft · terminal server | Средняя5,0 | — | 71,2 % | 30 окт. 2001 г. |
25Наблюдать | CVE-2001-0545Эксплойта нет | IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a lmicrosoft · internet information server | Средняя5,0 | — | 18,3 % | 30 окт. 2001 г. |
27Наблюдать | CVE-2001-0660Эксплойта нет | Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by direcmicrosoft · exchange server | Средняя5,0 | — | 21,9 % | 30 окт. 2001 г. |
27Наблюдать | CVE-2001-0662Эксплойта нет | RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.microsoft · windows nt | Средняя5,0 | — | 22,5 % | 30 окт. 2001 г. |
35Наблюдать | CVE-2001-0664Proof of concept | Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses,microsoft · internet explorer | Высокая7,5 | — | 18,1 % | 30 окт. 2001 г. |
34Наблюдать | CVE-2001-0665Эксплойта нет | Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from microsoft · ie | Высокая7,5 | — | 12,0 % | 30 окт. 2001 г. |
33Наблюдать | CVE-2001-0667Эксплойта нет | Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute commandmicrosoft · internet explorer · CWE-88 | Высокая7,3 | — | 14,6 % | 30 окт. 2001 г. |
33Наблюдать | CVE-2001-0718Эксплойта нет | Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restricmicrosoft · excel | Высокая7,5 | — | 11,0 % | 30 окт. 2001 г. |
24Наблюдать | CVE-2001-0730Эксплойта нет | split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with apache · http server | Средняя5,0 | — | 11,9 % | 30 окт. 2001 г. |
- CVE-2001-073137Наблюдать
Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the
СредняяCVSS 5,0Proof of conceptEPSS 56 %apache · http server1 окт. 2001 г.
- CVE-2001-074645В плане
Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of servi
КритическаяCVSS 10,0Proof of conceptEPSS 15 %iplanet · iplanet web server18 окт. 2001 г.
- CVE-2001-076335Наблюдать
Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, w
ВысокаяCVSS 7,5Proof of conceptEPSS 17 %debian · debian linux18 окт. 2001 г.
- CVE-2001-077535Наблюдать
Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format imag
ВысокаяCVSS 7,5Proof of conceptEPSS 16 %xli · xli18 окт. 2001 г.
- CVE-2001-077959В плане
Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.
КритическаяCVSS 10,0Proof of conceptEPSS 62 %sun · solaris18 окт. 2001 г.
- CVE-2001-050530Наблюдать
Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large
СредняяCVSS 5,0Эксплойта нетEPSS 33 %microsoft · services30 окт. 2001 г.
- CVE-2001-054041В плане
Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via
СредняяCVSS 5,0Эксплойта нетEPSS 71 %microsoft · terminal server30 окт. 2001 г.
- CVE-2001-054525Наблюдать
IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a l
СредняяCVSS 5,0Эксплойта нетEPSS 18 %microsoft · internet information server30 окт. 2001 г.
- CVE-2001-066027Наблюдать
Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by direc
СредняяCVSS 5,0Эксплойта нетEPSS 21 %microsoft · exchange server30 окт. 2001 г.
- CVE-2001-066227Наблюдать
RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.
СредняяCVSS 5,0Эксплойта нетEPSS 22 %microsoft · windows nt30 окт. 2001 г.
- CVE-2001-066435Наблюдать
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses,
ВысокаяCVSS 7,5Proof of conceptEPSS 18 %microsoft · internet explorer30 окт. 2001 г.
- CVE-2001-066534Наблюдать
Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from
ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %microsoft · ie30 окт. 2001 г.
- CVE-2001-066733Наблюдать
Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute command
ВысокаяCVSS 7,3Эксплойта нетEPSS 14 %microsoft · internet explorer30 окт. 2001 г.
- CVE-2001-071833Наблюдать
Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restric
ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %microsoft · excel30 окт. 2001 г.
- CVE-2001-073024Наблюдать
split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with
СредняяCVSS 5,0Эксплойта нетEPSS 11 %apache · http server30 окт. 2001 г.