Yayın tarihine göre
Temmuz 2000: sömürülen ve yeni ciddi CVE kayıtları
15 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
69Bu hafta | CVE-2000-0573Silahlaştırılmış | The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to exechp · hp-ux | Kritik10,0 | — | %96,2 | 7 Tem 2000 |
38İzleyin | CVE-2000-0574Kavram kanıtı | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the seopenbsd · ftpd | Orta5,0 | — | %58,8 | 7 Tem 2000 |
40Planlayın | CVE-2000-0649Silahlaştırılmış | IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected bymicrosoft · internet information server · CWE-200 | Düşük2,6 | — | %76,5 | 13 Tem 2000 |
27İzleyin | CVE-2000-0631İstismar yok | An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing microsoft · internet information server | Orta5,0 | — | %24,7 | 14 Tem 2000 |
26İzleyin | CVE-2000-0662İstismar yok | Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using tmicrosoft · internet explorer | Orta5,0 | — | %21,3 | 14 Tem 2000 |
48Planlayın | CVE-2000-0666Kavram kanıtı | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote atconectiva · linux | Kritik10,0 | — | %26,3 | 16 Tem 2000 |
40Planlayın | CVE-2000-0630Kavram kanıtı | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment microsoft · internet information server | Orta5,0 | — | %68,2 | 17 Tem 2000 |
40Planlayın | CVE-2000-0665Silahlaştırılmış | GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.gamsoft · telsrv | Orta5,0 | — | %50,9 | 17 Tem 2000 |
30İzleyin | CVE-2000-0567Kavram kanıtı | Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an emicrosoft · outlook | Orta5,0 | — | %32,3 | 18 Tem 2000 |
44Planlayın | CVE-2000-0622Kavram kanıtı | Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commandsoreilly · website professional | Kritik10,0 | — | %12,9 | 19 Tem 2000 |
37İzleyin | CVE-2000-0621İstismar yok | Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformemicrosoft · outlook | Yüksek7,5 | — | %22,1 | 20 Tem 2000 |
28İzleyin | CVE-2000-0653Kavram kanıtı | Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express winmicrosoft · outlook express | Orta5,0 | — | %26,8 | 20 Tem 2000 |
23İzleyin | CVE-2000-0672İstismar yok | The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary apache · tomcat | Orta5,0 | — | %10,0 | 20 Tem 2000 |
24İzleyin | CVE-2000-0655Kavram kanıtı | Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image cnetscape · communicator | Orta5,0 | — | %12,7 | 25 Tem 2000 |
30İzleyin | CVE-2000-0673Kavram kanıtı | The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sendimicrosoft · windows 2000 | Orta5,0 | — | %33,4 | 27 Tem 2000 |
- CVE-2000-057369Bu hafta
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to exec
KritikCVSS 10,0SilahlaştırılmışEPSS %96hp · hp-ux7 Tem 2000
- CVE-2000-057438İzleyin
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the se
OrtaCVSS 5,0Kavram kanıtıEPSS %58openbsd · ftpd7 Tem 2000
- CVE-2000-064940Planlayın
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by
DüşükCVSS 2,6SilahlaştırılmışEPSS %76microsoft · internet information server13 Tem 2000
- CVE-2000-063127İzleyin
An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing
OrtaCVSS 5,0İstismar yokEPSS %24microsoft · internet information server14 Tem 2000
- CVE-2000-066226İzleyin
Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using t
OrtaCVSS 5,0İstismar yokEPSS %21microsoft · internet explorer14 Tem 2000
- CVE-2000-066648Planlayın
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote at
KritikCVSS 10,0Kavram kanıtıEPSS %26conectiva · linux16 Tem 2000
- CVE-2000-063040Planlayın
IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment
OrtaCVSS 5,0Kavram kanıtıEPSS %68microsoft · internet information server17 Tem 2000
- CVE-2000-066540Planlayın
GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
OrtaCVSS 5,0SilahlaştırılmışEPSS %50gamsoft · telsrv17 Tem 2000
- CVE-2000-056730İzleyin
Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an e
OrtaCVSS 5,0Kavram kanıtıEPSS %32microsoft · outlook18 Tem 2000
- CVE-2000-062244Planlayın
Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands
KritikCVSS 10,0Kavram kanıtıEPSS %12oreilly · website professional19 Tem 2000
- CVE-2000-062137İzleyin
Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malforme
YüksekCVSS 7,5İstismar yokEPSS %22microsoft · outlook20 Tem 2000
- CVE-2000-065328İzleyin
Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express win
OrtaCVSS 5,0Kavram kanıtıEPSS %26microsoft · outlook express20 Tem 2000
- CVE-2000-067223İzleyin
The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary
OrtaCVSS 5,0İstismar yokEPSS %10apache · tomcat20 Tem 2000
- CVE-2000-065524İzleyin
Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image c
OrtaCVSS 5,0Kavram kanıtıEPSS %12netscape · communicator25 Tem 2000
- CVE-2000-067330İzleyin
The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sendi
OrtaCVSS 5,0Kavram kanıtıEPSS %33microsoft · windows 200027 Tem 2000