İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2000: sömürülen ve yeni ciddi CVE kayıtları

33 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2000-0999
    44Planlayın

    Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privilege

    KritikCVSS 10,0İstismar yokEPSS %11

    openbsd · openssh11 Ara 2000

  • CVE-2000-1003
    14İzleyin

    NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to retu

    DüşükCVSS 2,6İstismar yokEPSS %12

    microsoft · windows 9511 Ara 2000

  • CVE-2000-1006
    24İzleyin

    Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause

    OrtaCVSS 5,0İstismar yokEPSS %14

    microsoft · exchange server11 Ara 2000

  • CVE-2000-1014
    33İzleyin

    Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitra

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    sco · unixware11 Ara 2000

  • CVE-2000-1029
    44Planlayın

    Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    isc · bind11 Ara 2000

  • CVE-2000-1034
    48Planlayın

    Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFi

    KritikCVSS 10,0İstismar yokEPSS %27

    microsoft · windows 200011 Ara 2000

  • CVE-2000-1035
    44Planlayın

    Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    typsoft · typsoft11 Ara 2000

  • CVE-2000-1053
    43Planlayın

    Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack an

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    macromedia · jrun11 Ara 2000

  • CVE-2000-1058
    25İzleyin

    Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial

    OrtaCVSS 5,0Kavram kanıtıEPSS %16

    hp · openview network node manager11 Ara 2000

  • CVE-2000-1061
    23İzleyin

    Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a

    OrtaCVSS 5,1Kavram kanıtıEPSS %10

    microsoft · ie11 Ara 2000

  • CVE-1999-1579
    27İzleyin

    The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote

    OrtaCVSS 5,0İstismar yokEPSS %21

    microsoft · windows nt14 Ara 2000

  • CVE-2000-0817
    35İzleyin

    Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · network monitor19 Ara 2000

  • CVE-2000-0884
    49Planlayın

    IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed UR

    YüksekCVSS 7,5Kavram kanıtıEPSS %63

    microsoft · internet information server19 Ara 2000

  • CVE-2000-0885
    34İzleyin

    Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIF

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · systems management server19 Ara 2000

  • CVE-2000-0886
    51Planlayın

    IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with ope

    YüksekCVSS 7,5Kavram kanıtıEPSS %68

    microsoft · internet information server19 Ara 2000

  • CVE-2000-0887
    27İzleyin

    named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request

    OrtaCVSS 5,0Kavram kanıtıEPSS %22

    isc · bind19 Ara 2000

  • CVE-2000-0909
    33İzleyin

    Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    university of washington · pine19 Ara 2000

  • CVE-2000-0913
    31İzleyin

    mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a

    OrtaCVSS 5,0İstismar yokEPSS %35

    apache · http server19 Ara 2000

  • CVE-2000-0917
    64Bu hafta

    Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.

    KritikCVSS 10,0SilahlaştırılmışEPSS %78

    caldera · openlinux ebuilder19 Ara 2000

  • CVE-2000-0929
    24İzleyin

    Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    microsoft · windows media player19 Ara 2000

  • CVE-2000-0941
    44Planlayın

    Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" paramete

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    kootenay web inc · kootenay web inc whois19 Ara 2000

  • CVE-2000-0942
    27İzleyin

    The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS)

    OrtaCVSS 5,1Kavram kanıtıEPSS %22

    microsoft · indexing service19 Ara 2000

  • CVE-2000-0944
    42Planlayın

    CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, w

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    cgi · script center news update19 Ara 2000

  • CVE-2000-0945
    62Bu hafta

    The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication w

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    cisco · catalyst 3500 xl19 Ara 2000

  • CVE-2000-0951
    33İzleyin

    A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web ro

    OrtaCVSS 5,0Kavram kanıtıEPSS %44

    microsoft · internet information services19 Ara 2000

  • CVE-2000-0967
    46Planlayın

    PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering

    KritikCVSS 10,0Kavram kanıtıEPSS %20

    php · php19 Ara 2000

  • CVE-2000-0970
    44Planlayın

    IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijac

    YüksekCVSS 7,5İstismar yokEPSS %45

    microsoft · internet information server19 Ara 2000

  • CVE-2000-0973
    45Planlayın

    Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by fo

    KritikCVSS 10,0Kavram kanıtıEPSS %18

    daniel stenberg · curl19 Ara 2000

  • CVE-2000-0979
    48Planlayın

    File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows

    OrtaCVSS 6,4SilahlaştırılmışEPSS %75

    microsoft · windows 9519 Ara 2000

  • CVE-2000-0980
    24İzleyin

    NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · windows 9519 Ara 2000

  • CVE-2000-0982
    34İzleyin

    Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allo

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · internet explorer19 Ara 2000

  • CVE-2000-0983
    26İzleyin

    Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequen

    OrtaCVSS 5,0Kavram kanıtıEPSS %20

    microsoft · netmeeting19 Ara 2000

  • CVE-2000-1227
    24İzleyin

    Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · windows 200031 Ara 2000