İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2000: sömürülen ve yeni ciddi CVE kayıtları

21 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2000-1204
    23İzleyin

    Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source

    OrtaCVSS 5,0İstismar yokEPSS %10

    apache · http server13 Eki 2000

  • CVE-2000-0676
    26İzleyin

    Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a conne

    OrtaCVSS 5,0Kavram kanıtıEPSS %20

    netscape · communicator20 Eki 2000

  • CVE-2000-0681
    55Planlayın

    Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extensi

    KritikCVSS 10,0İstismar yokEPSS %50

    bea · weblogic server20 Eki 2000

  • CVE-2000-0684
    44Planlayın

    BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP c

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    bea · weblogic server20 Eki 2000

  • CVE-2000-0685
    44Planlayın

    BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Ja

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    bea · weblogic server20 Eki 2000

  • CVE-2000-0690
    43Planlayın

    Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile pa

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    cgi script center · auction weaver20 Eki 2000

  • CVE-2000-0697
    43Planlayın

    The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    sun · solaris answerbook220 Eki 2000

  • CVE-2000-0699
    44Planlayın

    Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via fo

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    hp · hp-ux20 Eki 2000

  • CVE-2000-0704
    44Planlayın

    Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    omron · worldview20 Eki 2000

  • CVE-2000-0709
    28İzleyin

    The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some compo

    OrtaCVSS 5,0İstismar yokEPSS %25

    microsoft · frontpage20 Eki 2000

  • CVE-2000-0710
    28İzleyin

    The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the serv

    OrtaCVSS 5,0İstismar yokEPSS %26

    microsoft · frontpage20 Eki 2000

  • CVE-2000-0711
    40Planlayın

    Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attacker

    YüksekCVSS 7,5Kavram kanıtıEPSS %33

    netscape · communicator20 Eki 2000

  • CVE-2000-0733
    44Planlayın

    Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execut

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    sgi · irix20 Eki 2000

  • CVE-2000-0742
    26İzleyin

    The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet

    OrtaCVSS 5,0İstismar yokEPSS %18

    microsoft · windows 9520 Eki 2000

  • CVE-2000-0743
    44Planlayın

    Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    university of minnesota · gopherd20 Eki 2000

  • CVE-2000-0745
    34İzleyin

    admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by req

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    francisco burzi · php-nuke20 Eki 2000

  • CVE-2000-0746
    33İzleyin

    Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks.

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · frontpage20 Eki 2000

  • CVE-2000-0759
    33İzleyin

    Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates

    OrtaCVSS 6,4Kavram kanıtıEPSS %25

    apache · tomcat20 Eki 2000

  • CVE-2000-0760
    44Planlayın

    The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexist

    OrtaCVSS 6,4Kavram kanıtıEPSS %62

    apache · tomcat20 Eki 2000

  • CVE-2000-0770
    30İzleyin

    IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, whi

    OrtaCVSS 6,4İstismar yokEPSS %15

    microsoft · internet information server20 Eki 2000

  • CVE-2000-0778
    46Planlayın

    IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header,

    OrtaCVSS 5,0Kavram kanıtıEPSS %87

    microsoft · internet information services20 Eki 2000