İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2001: sömürülen ve yeni ciddi CVE kayıtları

22 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2001-1453
    33İzleyin

    Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host paramete

    YüksekCVSS 7,5İstismar yokEPSS %11

    oracle · mysql9 Şub 2001

  • CVE-2000-1090
    25İzleyin

    Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses t

    OrtaCVSS 5,0İstismar yokEPSS %16

    microsoft · internet information server12 Şub 2001

  • CVE-2001-0004
    28İzleyin

    IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested

    OrtaCVSS 5,0İstismar yokEPSS %28

    microsoft · internet information server12 Şub 2001

  • CVE-2001-0008
    44Planlayın

    Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    borland software · interbase12 Şub 2001

  • CVE-2001-0010
    49Planlayın

    Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.

    KritikCVSS 10,0Kavram kanıtıEPSS %31

    isc · bind12 Şub 2001

  • CVE-2001-0013
    43Planlayın

    Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

    KritikCVSS 10,0İstismar yokEPSS %10

    isc · bind12 Şub 2001

  • CVE-2001-0014
    24İzleyin

    Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attacker

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · windows 200012 Şub 2001

  • CVE-2001-0022
    44Planlayın

    simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    leif m. wright · simplestguest.cgi12 Şub 2001

  • CVE-2001-0023
    44Planlayın

    everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config p

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    leif m. wright · everythingform.cgi12 Şub 2001

  • CVE-2001-0025
    44Planlayın

    ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    leif m. wright · ad.cgi12 Şub 2001

  • CVE-2001-0053
    45Planlayın

    One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    david madore · ftpd-bsd12 Şub 2001

  • CVE-2001-0083
    25İzleyin

    Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memor

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · windows media services12 Şub 2001

  • CVE-2001-0096
    26İzleyin

    FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Ma

    OrtaCVSS 5,0İstismar yokEPSS %20

    microsoft · internet information server12 Şub 2001

  • CVE-2001-0098
    64Bu hafta

    Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a

    KritikCVSS 10,0Kavram kanıtıEPSS %78

    bea · weblogic server12 Şub 2001

  • CVE-2001-0099
    44Planlayın

    bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    brian stanback · bsguest.cgi12 Şub 2001

  • CVE-2001-0100
    45Planlayın

    bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    brian stanback · bslist.cgi12 Şub 2001

  • CVE-2001-0021
    44Planlayın

    MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    endymion · mailman webmail16 Şub 2001

  • CVE-2001-0041
    35İzleyin

    Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of fail

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    cisco · catos16 Şub 2001

  • CVE-2001-0050
    44Planlayın

    Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    colten edwards · bitchx16 Şub 2001

  • CVE-2001-0054
    24İzleyin

    Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appen

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    solarwinds · serv-u file server16 Şub 2001

  • CVE-2001-0089
    14İzleyin

    Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form

    DüşükCVSS 2,6Kavram kanıtıEPSS %14

    microsoft · internet explorer16 Şub 2001

  • CVE-2001-0092
    14İzleyin

    A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remot

    DüşükCVSS 2,6İstismar yokEPSS %12

    microsoft · internet explorer16 Şub 2001