İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 1999: sömürülen ve yeni ciddi CVE kayıtları

27 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-1999-0819
    24İzleyin

    NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    microsoft · windows 20001 Ara 1999

  • CVE-1999-0858
    24İzleyin

    Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) s

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · internet explorer2 Ara 1999

  • CVE-1999-0989
    34İzleyin

    Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protoc

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    microsoft · ie6 Ara 1999

  • CVE-1999-0981
    24İzleyin

    Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to acces

    OrtaCVSS 5,1Kavram kanıtıEPSS %13

    microsoft · internet explorer8 Ara 1999

  • CVE-1999-0977
    44Planlayın

    Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    sun · solaris10 Ara 1999

  • CVE-1999-0995
    38İzleyin

    Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids

    YüksekCVSS 7,8İstismar yokEPSS %21

    microsoft · windows nt16 Ara 1999

  • CVE-2000-0024
    29İzleyin

    IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via esc

    OrtaCVSS 6,4İstismar yokEPSS %12

    microsoft · internet information server21 Ara 1999

  • CVE-2000-0025
    30İzleyin

    IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includ

    OrtaCVSS 5,0İstismar yokEPSS %34

    microsoft · internet information server21 Ara 1999

  • CVE-2000-0002
    44Planlayın

    Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    zbsoft · zbserver22 Ara 1999

  • CVE-2000-0028
    17İzleyin

    Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAnd

    DüşükCVSS 2,6Kavram kanıtıEPSS %23

    microsoft · ie23 Ara 1999

  • CVE-2000-0010
    43Planlayın

    WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    tony greenwood · webwho\+26 Ara 1999

  • CVE-1999-0154
    32İzleyin

    IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a .

    OrtaCVSS 5,0Kavram kanıtıEPSS %40

    microsoft · internet information server31 Ara 1999

  • CVE-1999-0815
    25İzleyin

    Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a larg

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · windows nt31 Ara 1999

  • CVE-1999-1035
    25İzleyin

    IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET"

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · internet information server31 Ara 1999

  • CVE-1999-1043
    24İzleyin

    Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote atta

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · exchange server31 Ara 1999

  • CVE-1999-1093
    24İzleyin

    Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote atta

    OrtaCVSS 5,1İstismar yokEPSS %12

    microsoft · internet explorer31 Ara 1999

  • CVE-1999-1094
    36İzleyin

    Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" pr

    YüksekCVSS 7,5İstismar yokEPSS %18

    microsoft · internet explorer31 Ara 1999

  • CVE-1999-1105
    26İzleyin

    Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in

    OrtaCVSS 5,0İstismar yokEPSS %21

    microsoft · windows 9531 Ara 1999

  • CVE-1999-1127
    35İzleyin

    Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (r

    YüksekCVSS 7,5İstismar yokEPSS %17

    microsoft · windows nt31 Ara 1999

  • CVE-1999-1132
    25İzleyin

    Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information

    OrtaCVSS 5,0İstismar yokEPSS %18

    microsoft · windows nt31 Ara 1999

  • CVE-1999-1148
    25İzleyin

    FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connec

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · internet information server31 Ara 1999

  • CVE-1999-1157
    24İzleyin

    Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet,

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · windows nt31 Ara 1999

  • CVE-1999-1223
    27İzleyin

    IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (for

    OrtaCVSS 5,0İstismar yokEPSS %23

    microsoft · internet information server31 Ara 1999

  • CVE-1999-1451
    25İzleyin

    The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · internet information server31 Ara 1999

  • CVE-1999-1472
    25İzleyin

    Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynam

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · internet explorer31 Ara 1999

  • CVE-1999-1588
    42Planlayın

    Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long s

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    sun · solaris31 Ara 1999

  • CVE-1999-1591
    33İzleyin

    Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication cre

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · internet information server31 Ara 1999