İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2001: sömürülen ve yeni ciddi CVE kayıtları

17 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2001-1138
    33İzleyin

    Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary fil

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    randy parker · power up html7 Eyl 2001

  • CVE-2001-0999
    34İzleyin

    Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is te

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · outlook express12 Eyl 2001

  • CVE-2001-1013
    40Planlayın

    Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no publi

    OrtaCVSS 5,0SilahlaştırılmışEPSS %65

    redhat · linux12 Eyl 2001

  • CVE-2001-1112
    33İzleyin

    Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of ch

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    khamil landross and zack jones · eftp12 Eyl 2001

  • CVE-2001-0986
    34İzleyin

    SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, fil

    OrtaCVSS 5,0Kavram kanıtıEPSS %48

    microsoft · index server14 Eyl 2001

  • CVE-2001-0506
    49Planlayın

    Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for

    YüksekCVSS 7,2Kavram kanıtıEPSS %68

    microsoft · internet information server20 Eyl 2001

  • CVE-2001-0508
    30İzleyin

    Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request.

    OrtaCVSS 5,0İstismar yokEPSS %32

    microsoft · internet information services20 Eyl 2001

  • CVE-2001-0509
    25İzleyin

    Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT

    OrtaCVSS 5,0İstismar yokEPSS %16

    microsoft · exchange server20 Eyl 2001

  • CVE-2001-0541
    35İzleyin

    Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Wind

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · windows media player20 Eyl 2001

  • CVE-2001-0543
    26İzleyin

    Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via

    OrtaCVSS 5,0İstismar yokEPSS %18

    microsoft · exchange server20 Eyl 2001

  • CVE-2001-0546
    25İzleyin

    Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · isa server20 Eyl 2001

  • CVE-2001-0552
    48Planlayın

    ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands

    KritikCVSS 10,0Kavram kanıtıEPSS %26

    hp · openview network node manager20 Eyl 2001

  • CVE-2001-0643
    23İzleyin

    Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    microsoft · internet explorer20 Eyl 2001

  • CVE-2001-0658
    34İzleyin

    Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · isa server20 Eyl 2001

  • CVE-2001-0690
    34İzleyin

    Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    conectiva · linux20 Eyl 2001

  • CVE-2001-0700
    34İzleyin

    Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MIME header.

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    w3m · w3m20 Eyl 2001

  • CVE-2001-0709
    31İzleyin

    Microsoft IIS 4.0 and before, when installed on a FAT partition, allows a remote attacker to obtain source code of ASP files via a URL encod

    OrtaCVSS 5,0İstismar yokEPSS %35

    microsoft · internet information server20 Eyl 2001