İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2001: sömürülen ve yeni ciddi CVE kayıtları

15 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2001-0731
    37İzleyin

    Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the

    OrtaCVSS 5,0Kavram kanıtıEPSS %56

    apache · http server1 Eki 2001

  • CVE-2001-0746
    45Planlayın

    Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of servi

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    iplanet · iplanet web server18 Eki 2001

  • CVE-2001-0763
    35İzleyin

    Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, w

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    debian · debian linux18 Eki 2001

  • CVE-2001-0775
    35İzleyin

    Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format imag

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    xli · xli18 Eki 2001

  • CVE-2001-0779
    59Planlayın

    Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.

    KritikCVSS 10,0Kavram kanıtıEPSS %62

    sun · solaris18 Eki 2001

  • CVE-2001-0505
    30İzleyin

    Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large

    OrtaCVSS 5,0İstismar yokEPSS %33

    microsoft · services30 Eki 2001

  • CVE-2001-0540
    41Planlayın

    Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via

    OrtaCVSS 5,0İstismar yokEPSS %71

    microsoft · terminal server30 Eki 2001

  • CVE-2001-0545
    25İzleyin

    IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a l

    OrtaCVSS 5,0İstismar yokEPSS %18

    microsoft · internet information server30 Eki 2001

  • CVE-2001-0660
    27İzleyin

    Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by direc

    OrtaCVSS 5,0İstismar yokEPSS %21

    microsoft · exchange server30 Eki 2001

  • CVE-2001-0662
    27İzleyin

    RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.

    OrtaCVSS 5,0İstismar yokEPSS %22

    microsoft · windows nt30 Eki 2001

  • CVE-2001-0664
    35İzleyin

    Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses,

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    microsoft · internet explorer30 Eki 2001

  • CVE-2001-0665
    34İzleyin

    Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · ie30 Eki 2001

  • CVE-2001-0667
    33İzleyin

    Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute command

    YüksekCVSS 7,3İstismar yokEPSS %14

    microsoft · internet explorer30 Eki 2001

  • CVE-2001-0718
    33İzleyin

    Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restric

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · excel30 Eki 2001

  • CVE-2001-0730
    24İzleyin

    split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with

    OrtaCVSS 5,0İstismar yokEPSS %11

    apache · http server30 Eki 2001