По дате публикации
Эксплуатируемые и новые серьёзные CVE: сентябрь 2002 г.
24 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
34Наблюдать | CVE-2002-1604Эксплойта нет | Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environmenhp · hp-ux | Высокая7,5 | — | 14,9 % | 2 сент. 2002 г. |
34Наблюдать | CVE-2002-1605Proof of concept | Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environmhp · hp-ux | Высокая7,5 | — | 13,3 % | 2 сент. 2002 г. |
38Наблюдать | CVE-2002-0654Proof of concept | Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a requesapache · http server | Средняя5,0 | — | 58,6 % | 5 сент. 2002 г. |
47В плане | CVE-2002-0679Эксплойта нет | Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrcaldera · unixware | Критическая10,0 | — | 23,2 % | 5 сент. 2002 г. |
54В плане | CVE-2002-0721Proof of concept | Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, wmicrosoft · data engine | Критическая10,0 | — | 46,3 % | 5 сент. 2002 г. |
34Наблюдать | CVE-2002-0857Эксплойта нет | Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers tooracle · database server | Высокая7,5 | — | 13,7 % | 5 сент. 2002 г. |
38Наблюдать | CVE-2002-0859Proof of concept | Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary cmicrosoft · jet | Высокая7,5 | — | 26,1 % | 5 сент. 2002 г. |
37Наблюдать | CVE-2002-0647Proof of concept | Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allowmicrosoft · internet explorer | Высокая7,5 | — | 23,3 % | 24 сент. 2002 г. |
35Наблюдать | CVE-2002-0648Proof of concept | The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitramicrosoft · internet explorer | Средняя5,0 | — | 48,4 % | 24 сент. 2002 г. |
34Наблюдать | CVE-2002-0691Эксплойта нет | Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a lmicrosoft · internet explorer | Высокая7,5 | — | 13,8 % | 24 сент. 2002 г. |
34Наблюдать | CVE-2002-0722Эксплойта нет | Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to misrepresent the source of a file in the File Download dialogue bomicrosoft · internet explorer | Высокая7,5 | — | 13,0 % | 24 сент. 2002 г. |
35Наблюдать | CVE-2002-0723Proof of concept | Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attackermicrosoft · internet explorer | Высокая7,5 | — | 15,0 % | 24 сент. 2002 г. |
38Наблюдать | CVE-2002-0724Proof of concept | Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denmicrosoft · windows 2000 | Высокая7,5 | — | 25,6 % | 24 сент. 2002 г. |
35Наблюдать | CVE-2002-0726Эксплойта нет | Buffer overflow in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to execute arbitrary code via microsoft · tsac activex control | Высокая7,5 | — | 17,3 % | 24 сент. 2002 г. |
36Наблюдать | CVE-2002-0727Эксплойта нет | The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, whimicrosoft · office web components | Высокая7,5 | — | 18,8 % | 24 сент. 2002 г. |
26Наблюдать | CVE-2002-0860Эксплойта нет | The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbimicrosoft · office web components | Средняя5,0 | — | 18,7 % | 24 сент. 2002 г. |
35Наблюдать | CVE-2002-0861Эксплойта нет | Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even microsoft · office web components | Высокая7,5 | — | 15,8 % | 24 сент. 2002 г. |
24Наблюдать | CVE-2002-0974Proof of concept | Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses uplddmicrosoft · windows xp | Средняя5,0 | — | 14,9 % | 24 сент. 2002 г. |
34Наблюдать | CVE-2002-0975Эксплойта нет | Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitramicrosoft · directx files viewer control | Высокая7,5 | — | 12,7 % | 24 сент. 2002 г. |
29Наблюдать | CVE-2002-0976Proof of concept | Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet microsoft · internet explorer | Средняя6,4 | — | 14,3 % | 24 сент. 2002 г. |
33Наблюдать | CVE-2002-0977Эксплойта нет | Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to execute arbitrary code via a microsoft · file transfer manager | Высокая7,5 | — | 10,9 % | 24 сент. 2002 г. |
38Наблюдать | CVE-2002-0980Proof of concept | The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allowsmicrosoft · internet explorer | Высокая7,5 | — | 26,6 % | 24 сент. 2002 г. |
50В плане | CVE-2002-1120Готовый эксплойт | Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.savant · savant web server | Высокая7,5 | — | 66,5 % | 24 сент. 2002 г. |
53В плане | CVE-2002-1123Готовый эксплойт | Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackermicrosoft · data engine | Высокая7,5 | — | 77,7 % | 24 сент. 2002 г. |
- CVE-2002-160434Наблюдать
Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environmen
ВысокаяCVSS 7,5Эксплойта нетEPSS 14 %hp · hp-ux2 сент. 2002 г.
- CVE-2002-160534Наблюдать
Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environm
ВысокаяCVSS 7,5Proof of conceptEPSS 13 %hp · hp-ux2 сент. 2002 г.
- CVE-2002-065438Наблюдать
Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a reques
СредняяCVSS 5,0Proof of conceptEPSS 58 %apache · http server5 сент. 2002 г.
- CVE-2002-067947В плане
Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitr
КритическаяCVSS 10,0Эксплойта нетEPSS 23 %caldera · unixware5 сент. 2002 г.
- CVE-2002-072154В плане
Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, w
КритическаяCVSS 10,0Proof of conceptEPSS 46 %microsoft · data engine5 сент. 2002 г.
- CVE-2002-085734Наблюдать
Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to
ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %oracle · database server5 сент. 2002 г.
- CVE-2002-085938Наблюдать
Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary c
ВысокаяCVSS 7,5Proof of conceptEPSS 26 %microsoft · jet5 сент. 2002 г.
- CVE-2002-064737Наблюдать
Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allow
ВысокаяCVSS 7,5Proof of conceptEPSS 23 %microsoft · internet explorer24 сент. 2002 г.
- CVE-2002-064835Наблюдать
The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitra
СредняяCVSS 5,0Proof of conceptEPSS 48 %microsoft · internet explorer24 сент. 2002 г.
- CVE-2002-069134Наблюдать
Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a l
ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %microsoft · internet explorer24 сент. 2002 г.
- CVE-2002-072234Наблюдать
Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to misrepresent the source of a file in the File Download dialogue bo
ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %microsoft · internet explorer24 сент. 2002 г.
- CVE-2002-072335Наблюдать
Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attacker
ВысокаяCVSS 7,5Proof of conceptEPSS 15 %microsoft · internet explorer24 сент. 2002 г.
- CVE-2002-072438Наблюдать
Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a den
ВысокаяCVSS 7,5Proof of conceptEPSS 25 %microsoft · windows 200024 сент. 2002 г.
- CVE-2002-072635Наблюдать
Buffer overflow in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to execute arbitrary code via
ВысокаяCVSS 7,5Эксплойта нетEPSS 17 %microsoft · tsac activex control24 сент. 2002 г.
- CVE-2002-072736Наблюдать
The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, whi
ВысокаяCVSS 7,5Эксплойта нетEPSS 18 %microsoft · office web components24 сент. 2002 г.
- CVE-2002-086026Наблюдать
The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbi
СредняяCVSS 5,0Эксплойта нетEPSS 18 %microsoft · office web components24 сент. 2002 г.
- CVE-2002-086135Наблюдать
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even
ВысокаяCVSS 7,5Эксплойта нетEPSS 15 %microsoft · office web components24 сент. 2002 г.
- CVE-2002-097424Наблюдать
Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses upldd
СредняяCVSS 5,0Proof of conceptEPSS 14 %microsoft · windows xp24 сент. 2002 г.
- CVE-2002-097534Наблюдать
Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitra
ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %microsoft · directx files viewer control24 сент. 2002 г.
- CVE-2002-097629Наблюдать
Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet
СредняяCVSS 6,4Proof of conceptEPSS 14 %microsoft · internet explorer24 сент. 2002 г.
- CVE-2002-097733Наблюдать
Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to execute arbitrary code via a
ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %microsoft · file transfer manager24 сент. 2002 г.
- CVE-2002-098038Наблюдать
The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows
ВысокаяCVSS 7,5Proof of conceptEPSS 26 %microsoft · internet explorer24 сент. 2002 г.
- CVE-2002-112050В плане
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
ВысокаяCVSS 7,5Готовый эксплойтEPSS 66 %savant · savant web server24 сент. 2002 г.
- CVE-2002-112353В плане
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attacker
ВысокаяCVSS 7,5Готовый эксплойтEPSS 77 %microsoft · data engine24 сент. 2002 г.