İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2000: sömürülen ve yeni ciddi CVE kayıtları

18 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2000-0347
    25İzleyin

    Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    microsoft · windows 952 May 2000

  • CVE-2000-0413
    33İzleyin

    The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML,

    OrtaCVSS 5,0Kavram kanıtıEPSS %43

    microsoft · frontpage6 May 2000

  • CVE-2000-0304
    29İzleyin

    Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malform

    OrtaCVSS 5,0İstismar yokEPSS %29

    microsoft · internet information server10 May 2000

  • CVE-2000-0408
    37İzleyin

    IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file

    OrtaCVSS 5,0Kavram kanıtıEPSS %57

    microsoft · internet information server11 May 2000

  • CVE-2000-0419
    36İzleyin

    The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via t

    YüksekCVSS 7,5İstismar yokEPSS %21

    microsoft · access11 May 2000

  • CVE-2000-0457
    46Planlayın

    ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spac

    YüksekCVSS 7,5Kavram kanıtıEPSS %52

    microsoft · internet information server11 May 2000

  • CVE-1999-0980
    27İzleyin

    Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumera

    OrtaCVSS 5,0Kavram kanıtıEPSS %23

    microsoft · windows nt16 May 2000

  • CVE-2000-0389
    45Planlayın

    Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    cygnus · cygnus network security16 May 2000

  • CVE-2000-0464
    34İzleyin

    Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing c

    YüksekCVSS 7,6İstismar yokEPSS %13

    microsoft · internet explorer17 May 2000

  • CVE-2000-0465
    26İzleyin

    Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to rea

    OrtaCVSS 5,1Kavram kanıtıEPSS %20

    microsoft · internet explorer17 May 2000

  • CVE-2000-0305
    43Planlayın

    Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by se

    YüksekCVSS 7,8Kavram kanıtıEPSS %38

    be · beos19 May 2000

  • CVE-2000-0443
    33İzleyin

    The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a ..

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    hp · jetadmin24 May 2000

  • CVE-2000-0491
    45Planlayın

    Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a de

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    gnome · gdm24 May 2000

  • CVE-2000-0403
    25İzleyin

    The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · windows nt25 May 2000

  • CVE-2000-0404
    25İzleyin

    The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · terminal server25 May 2000

  • CVE-2000-0402
    40Planlayın

    The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file

    DüşükCVSS 2,1SilahlaştırılmışEPSS %90

    microsoft · sql server30 May 2000

  • CVE-2000-0495
    30İzleyin

    Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Med

    OrtaCVSS 5,0Kavram kanıtıEPSS %32

    microsoft · windows media services30 May 2000

  • CVE-2000-0505
    34İzleyin

    The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large

    OrtaCVSS 5,0Kavram kanıtıEPSS %46

    apache · http server31 May 2000