Yayın tarihine göre
Eylül 1999: sömürülen ve yeni ciddi CVE kayıtları
10 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
33İzleyin | CVE-1999-0891Kavram kanıtı | The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.microsoft · internet explorer · CWE-94 | Orta5,0 | — | %42,5 | 1 Eyl 1999 |
47Planlayın | CVE-1999-0702Kavram kanıtı | Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExmicrosoft · internet explorer · CWE-94 | Kritik10,0 | — | %24,4 | 10 Eyl 1999 |
31İzleyin | CVE-1999-1575Kavram kanıtı | The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumbmicrosoft · internet explorer | Orta5,1 | — | %35,6 | 10 Eyl 1999 |
56Planlayın | CVE-1999-1053Silahlaştırılmış | guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execapache · http server | Yüksek7,5 | — | %85,2 | 13 Eyl 1999 |
42Planlayın | CVE-1999-0886Kavram kanıtı | The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.microsoft · windows nt · CWE-16 | Kritik9,0 | — | %21,5 | 17 Eyl 1999 |
34İzleyin | CVE-1999-0909İstismar yok | Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the microsoft · terminal server · CWE-264 | Yüksek7,5 | — | %12,0 | 20 Eyl 1999 |
34İzleyin | CVE-1999-0777İstismar yok | IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.microsoft · commercial internet system · CWE-264 | Yüksek7,5 | — | %11,9 | 23 Eyl 1999 |
38İzleyin | CVE-1999-1484Kavram kanıtı | Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the metmicrosoft · msn setup bulletin board services | Yüksek7,5 | — | %26,9 | 24 Eyl 1999 |
26İzleyin | CVE-1999-1578Kavram kanıtı | Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remotemicrosoft · internet explorer | Orta5,1 | — | %19,4 | 24 Eyl 1999 |
34İzleyin | CVE-1999-1576Kavram kanıtı | Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute adobe · acrobat reader | Yüksek7,5 | — | %12,8 | 27 Eyl 1999 |
- CVE-1999-089133İzleyin
The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.
OrtaCVSS 5,0Kavram kanıtıEPSS %42microsoft · internet explorer1 Eyl 1999
- CVE-1999-070247Planlayın
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportEx
KritikCVSS 10,0Kavram kanıtıEPSS %24microsoft · internet explorer10 Eyl 1999
- CVE-1999-157531İzleyin
The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb
OrtaCVSS 5,1Kavram kanıtıEPSS %35microsoft · internet explorer10 Eyl 1999
- CVE-1999-105356Planlayın
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to exec
YüksekCVSS 7,5SilahlaştırılmışEPSS %85apache · http server13 Eyl 1999
- CVE-1999-088642Planlayın
The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.
KritikCVSS 9,0Kavram kanıtıEPSS %21microsoft · windows nt17 Eyl 1999
- CVE-1999-090934İzleyin
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the
YüksekCVSS 7,5İstismar yokEPSS %12microsoft · terminal server20 Eyl 1999
- CVE-1999-077734İzleyin
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
YüksekCVSS 7,5İstismar yokEPSS %11microsoft · commercial internet system23 Eyl 1999
- CVE-1999-148438İzleyin
Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the met
YüksekCVSS 7,5Kavram kanıtıEPSS %26microsoft · msn setup bulletin board services24 Eyl 1999
- CVE-1999-157826İzleyin
Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote
OrtaCVSS 5,1Kavram kanıtıEPSS %19microsoft · internet explorer24 Eyl 1999
- CVE-1999-157634İzleyin
Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute
YüksekCVSS 7,5Kavram kanıtıEPSS %12adobe · acrobat reader27 Eyl 1999