Yayın tarihine göre
Ocak 2000: sömürülen ve yeni ciddi CVE kayıtları
16 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
24İzleyin | CVE-2000-0082İstismar yok | WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.microsoft · webtv | Orta5,0 | — | %14,5 | 2 Oca 2000 |
34İzleyin | CVE-2000-0053İstismar yok | Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.microsoft · commercial internet system | Yüksek7,5 | — | %14,6 | 4 Oca 2000 |
43Planlayın | CVE-2000-0059Kavram kanıtı | PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remotephp · php | Kritik10,0 | — | %10,9 | 4 Oca 2000 |
34İzleyin | CVE-2000-0085İstismar yok | Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNmicrosoft · hotmail | Yüksek7,5 | — | %14,9 | 4 Oca 2000 |
46Planlayın | CVE-2000-0061Kavram kanıtı | Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been lomicrosoft · internet explorer | Kritik10,0 | — | %19,8 | 7 Oca 2000 |
44Planlayın | CVE-2000-1220Kavram kanıtı | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing ssgi · irix | Kritik10,0 | — | %14,2 | 8 Oca 2000 |
45Planlayın | CVE-2000-1221Kavram kanıtı | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostnamsgi · irix | Kritik10,0 | — | %16,7 | 8 Oca 2000 |
46Planlayın | CVE-2000-0081İstismar yok | Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimicrosoft · hotmail | Kritik10,0 | — | %18,9 | 10 Oca 2000 |
28İzleyin | CVE-2000-0071İstismar yok | IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensimicrosoft · internet information server | Orta5,0 | — | %28,0 | 11 Oca 2000 |
44Planlayın | CVE-2000-0065Kavram kanıtı | Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.avtronics · inetserv | Kritik10,0 | — | %12,8 | 17 Oca 2000 |
44Planlayın | CVE-2000-0091Kavram kanıtı | Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or passworinter7 · vpopmail | Kritik10,0 | — | %12,8 | 21 Oca 2000 |
23İzleyin | CVE-2000-0115İstismar yok | IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.microsoft · internet information server | Orta5,0 | — | %10,0 | 21 Oca 2000 |
31İzleyin | CVE-2000-0097Kavram kanıtı | The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argumicrosoft · index server | Orta5,0 | — | %35,8 | 26 Oca 2000 |
35İzleyin | CVE-2000-0098İstismar yok | Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file tmicrosoft · index server | Orta5,0 | — | %48,5 | 26 Oca 2000 |
34İzleyin | CVE-2000-0126Kavram kanıtı | Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a ..microsoft · internet information server | Orta5,0 | — | %45,6 | 26 Oca 2000 |
16İzleyin | CVE-2000-0132Kavram kanıtı | Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.microsoft · virtual machine · CWE-200 | Düşük2,6 | — | %19,0 | 31 Oca 2000 |
- CVE-2000-008224İzleyin
WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.
OrtaCVSS 5,0İstismar yokEPSS %14microsoft · webtv2 Oca 2000
- CVE-2000-005334İzleyin
Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.
YüksekCVSS 7,5İstismar yokEPSS %14microsoft · commercial internet system4 Oca 2000
- CVE-2000-005943Planlayın
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote
KritikCVSS 10,0Kavram kanıtıEPSS %10php · php4 Oca 2000
- CVE-2000-008534İzleyin
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYN
YüksekCVSS 7,5İstismar yokEPSS %14microsoft · hotmail4 Oca 2000
- CVE-2000-006146Planlayın
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been lo
KritikCVSS 10,0Kavram kanıtıEPSS %19microsoft · internet explorer7 Oca 2000
- CVE-2000-122044Planlayın
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing s
KritikCVSS 10,0Kavram kanıtıEPSS %14sgi · irix8 Oca 2000
- CVE-2000-122145Planlayın
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostnam
KritikCVSS 10,0Kavram kanıtıEPSS %16sgi · irix8 Oca 2000
- CVE-2000-008146Planlayın
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadeci
KritikCVSS 10,0İstismar yokEPSS %18microsoft · hotmail10 Oca 2000
- CVE-2000-007128İzleyin
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensi
OrtaCVSS 5,0İstismar yokEPSS %28microsoft · internet information server11 Oca 2000
- CVE-2000-006544Planlayın
Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.
KritikCVSS 10,0Kavram kanıtıEPSS %12avtronics · inetserv17 Oca 2000
- CVE-2000-009144Planlayın
Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or passwor
KritikCVSS 10,0Kavram kanıtıEPSS %12inter7 · vpopmail21 Oca 2000
- CVE-2000-011523İzleyin
IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
OrtaCVSS 5,0İstismar yokEPSS %10microsoft · internet information server21 Oca 2000
- CVE-2000-009731İzleyin
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argu
OrtaCVSS 5,0Kavram kanıtıEPSS %35microsoft · index server26 Oca 2000
- CVE-2000-009835İzleyin
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file t
OrtaCVSS 5,0İstismar yokEPSS %48microsoft · index server26 Oca 2000
- CVE-2000-012634İzleyin
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a ..
OrtaCVSS 5,0Kavram kanıtıEPSS %45microsoft · internet information server26 Oca 2000
- CVE-2000-013216İzleyin
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
DüşükCVSS 2,6Kavram kanıtıEPSS %19microsoft · virtual machine31 Oca 2000