Yayın tarihine göre
Ocak 1999: sömürülen ve yeni ciddi CVE kayıtları
15 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
27İzleyin | CVE-1999-0448Kavram kanıtı | IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really requestmicrosoft · internet information server | Orta5,0 | — | %24,6 | 1 Oca 1999 |
2İzleyin | CVE-1999-0497Silahlaştırılmış | Anonymous FTP is enabled. | —0,0 | — | %7,2 | 1 Oca 1999 |
44Planlayın | CVE-1999-0512Silahlaştırılmış | A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers. | Kritik10,0 | — | %12,3 | 1 Oca 1999 |
43Planlayın | CVE-1999-0554Silahlaştırılmış | NFS exports system-critical data to the world, e.g. | Kritik10,0 | — | %11,1 | 1 Oca 1999 |
34İzleyin | CVE-1999-0651Silahlaştırılmış | The rsh/rlogin service is running. | Yüksek7,5 | — | %11,9 | 1 Oca 1999 |
56Planlayın | CVE-1999-0661Kavram kanıtı | A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers | Kritik10,0 | — | %54,2 | 1 Oca 1999 |
47Planlayın | CVE-1999-1376İstismar yok | Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.microsoft · internet information server | Kritik10,0 | — | %23,9 | 14 Oca 1999 |
16İzleyin | CVE-1999-1538Kavram kanıtı | When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machinmicrosoft · internet information server | Düşük2,1 | — | %25,2 | 14 Oca 1999 |
29İzleyin | CVE-1999-0678Kavram kanıtı | A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation filesapache · http server | Orta5,0 | — | %31,4 | 17 Oca 1999 |
24İzleyin | CVE-1999-1544İstismar yok | Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a lomicrosoft · internet information server | Orta5,0 | — | %13,6 | 24 Oca 1999 |
25İzleyin | CVE-1999-0357İstismar yok | Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involvingmicrosoft · windows 98 | Orta5,0 | — | %16,5 | 25 Oca 1999 |
46Planlayın | CVE-1999-0449İstismar yok | The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advseamicrosoft · internet information server | Yüksek7,8 | — | %49,2 | 26 Oca 1999 |
36İzleyin | CVE-1999-0450Kavram kanıtı | In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).microsoft · internet information server | Yüksek7,5 | — | %19,0 | 26 Oca 1999 |
23İzleyin | CVE-1999-0348İstismar yok | IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.microsoft · internet information server · CWE-200 | Orta5,0 | — | %10,5 | 27 Oca 1999 |
35İzleyin | CVE-1999-0349İstismar yok | A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbmicrosoft · internet information server · CWE-119 | Yüksek7,5 | — | %17,9 | 27 Oca 1999 |
- CVE-1999-044827İzleyin
IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request
OrtaCVSS 5,0Kavram kanıtıEPSS %24microsoft · internet information server1 Oca 1999
- CVE-1999-04972İzleyin
Anonymous FTP is enabled.
CVSS 0,0SilahlaştırılmışEPSS %71 Oca 1999
- CVE-1999-051244Planlayın
A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.
KritikCVSS 10,0SilahlaştırılmışEPSS %121 Oca 1999
- CVE-1999-055443Planlayın
NFS exports system-critical data to the world, e.g.
KritikCVSS 10,0SilahlaştırılmışEPSS %111 Oca 1999
- CVE-1999-065134İzleyin
The rsh/rlogin service is running.
YüksekCVSS 7,5SilahlaştırılmışEPSS %111 Oca 1999
- CVE-1999-066156Planlayın
A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers
KritikCVSS 10,0Kavram kanıtıEPSS %541 Oca 1999
- CVE-1999-137647Planlayın
Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.
KritikCVSS 10,0İstismar yokEPSS %23microsoft · internet information server14 Oca 1999
- CVE-1999-153816İzleyin
When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machin
DüşükCVSS 2,1Kavram kanıtıEPSS %25microsoft · internet information server14 Oca 1999
- CVE-1999-067829İzleyin
A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files
OrtaCVSS 5,0Kavram kanıtıEPSS %31apache · http server17 Oca 1999
- CVE-1999-154424İzleyin
Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a lo
OrtaCVSS 5,0İstismar yokEPSS %13microsoft · internet information server24 Oca 1999
- CVE-1999-035725İzleyin
Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving
OrtaCVSS 5,0İstismar yokEPSS %16microsoft · windows 9825 Oca 1999
- CVE-1999-044946Planlayın
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsea
YüksekCVSS 7,8İstismar yokEPSS %49microsoft · internet information server26 Oca 1999
- CVE-1999-045036İzleyin
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
YüksekCVSS 7,5Kavram kanıtıEPSS %19microsoft · internet information server26 Oca 1999
- CVE-1999-034823İzleyin
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
OrtaCVSS 5,0İstismar yokEPSS %10microsoft · internet information server27 Oca 1999
- CVE-1999-034935İzleyin
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arb
YüksekCVSS 7,5İstismar yokEPSS %17microsoft · internet information server27 Oca 1999