İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2001: sömürülen ve yeni ciddi CVE kayıtları

32 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2001-0945
    26İzleyin

    Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message

    OrtaCVSS 5,0İstismar yokEPSS %19

    microsoft · outlook express3 Ara 2001

  • CVE-2001-0663
    29İzleyin

    Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop

    OrtaCVSS 5,0Kavram kanıtıEPSS %31

    microsoft · windows 20006 Ara 2001

  • CVE-2001-0719
    35İzleyin

    Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming F

    YüksekCVSS 7,5İstismar yokEPSS %17

    microsoft · windows media player6 Ara 2001

  • CVE-2001-0721
    25İzleyin

    Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or c

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · windows 986 Ara 2001

  • CVE-2001-0722
    33İzleyin

    Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie

    OrtaCVSS 6,4Kavram kanıtıEPSS %27

    microsoft · internet explorer6 Ara 2001

  • CVE-2001-0726
    35İzleyin

    Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script,

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · exchange server6 Ara 2001

  • CVE-2001-0800
    56Planlayın

    lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.

    KritikCVSS 10,0SilahlaştırılmışEPSS %54

    sgi · irix6 Ara 2001

  • CVE-2001-0803
    66Bu hafta

    Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to exec

    KritikCVSS 10,0SilahlaştırılmışEPSS %85

    open group · cde common desktop environment6 Ara 2001

  • CVE-2001-0815
    34İzleyin

    Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    activestate · activeperl6 Ara 2001

  • CVE-2001-0817
    43Planlayın

    Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and ga

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · hp-ux6 Ara 2001

  • CVE-2001-0820
    34İzleyin

    Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log f

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    gaztek · ghttp6 Ara 2001

  • CVE-2001-0829
    24İzleyin

    A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, w

    OrtaCVSS 5,1İstismar yokEPSS %12

    apache · tomcat6 Ara 2001

  • CVE-2001-0836
    34İzleyin

    Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    oracle · application server web cache6 Ara 2001

  • CVE-2001-0846
    52Planlayın

    Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator templa

    KritikCVSS 10,0İstismar yokEPSS %41

    lotus · domino6 Ara 2001

  • CVE-2001-0951
    28İzleyin

    Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 wit

    OrtaCVSS 5,0Kavram kanıtıEPSS %27

    microsoft · windows 20007 Ara 2001

  • CVE-2001-1186
    30İzleyin

    Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than t

    OrtaCVSS 5,0Kavram kanıtıEPSS %34

    microsoft · internet information services11 Ara 2001

  • CVE-2001-0797
    68Bu hafta

    Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large numbe

    KritikCVSS 10,0SilahlaştırılmışEPSS %94

    sgi · irix12 Ara 2001

  • CVE-2001-0874
    27İzleyin

    Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's dom

    OrtaCVSS 5,0İstismar yokEPSS %21

    microsoft · internet explorer13 Ara 2001

  • CVE-2001-0727
    39İzleyin

    Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields

    YüksekCVSS 7,5İstismar yokEPSS %31

    microsoft · internet explorer14 Ara 2001

  • CVE-2001-0542
    34İzleyin

    Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functi

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · sql server20 Ara 2001

  • CVE-2001-0876
    45Planlayın

    Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NO

    YüksekCVSS 7,5Kavram kanıtıEPSS %49

    microsoft · windows 9820 Ara 2001

  • CVE-2001-0877
    33İzleyin

    Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP a

    OrtaCVSS 5,0İstismar yokEPSS %43

    microsoft · windows 9820 Ara 2001

  • CVE-2001-1217
    36İzleyin

    Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive

    OrtaCVSS 5,0İstismar yokEPSS %54

    oracle · application server21 Ara 2001

  • CVE-2001-1489
    25İzleyin

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a l

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    microsoft · ie31 Ara 2001

  • CVE-2001-1500
    34İzleyin

    ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which a

    YüksekCVSS 7,5İstismar yokEPSS %12

    proftpd project · proftpd31 Ara 2001

  • CVE-2001-1501
    32İzleyin

    The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory co

    OrtaCVSS 5,0Kavram kanıtıEPSS %38

    proftpd project · proftpd31 Ara 2001

  • CVE-2001-1533
    26İzleyin

    Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmente

    OrtaCVSS 5,3İstismar yokEPSS %18

    microsoft · isa server31 Ara 2001

  • CVE-2001-1539
    24İzleyin

    Stack consumption vulnerability in Internet Explorer The JavaScript settimeout function in Internet Explorer allows remote attackers to caus

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · internet explorer31 Ara 2001

  • CVE-2001-1547
    34İzleyin

    Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, does not block email a

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · outlook express31 Ara 2001

  • CVE-2001-1552
    24İzleyin

    ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Pr

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · windows me31 Ara 2001

  • CVE-2001-1571
    24İzleyin

    The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain t

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · windows xp31 Ara 2001

  • CVE-2001-1583
    65Bu hafta

    lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control

    KritikCVSS 10,0SilahlaştırılmışEPSS %83

    sun · sunos31 Ara 2001