Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: декабрь 2002 г.

78 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2002-1183
    36Наблюдать

    Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to e

    ВысокаяCVSS 7,5Proof of conceptEPSS 19 %

    microsoft · windows 9811 дек. 2002 г.

  • CVE-2002-1185
    26Наблюдать

    Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers t

    СредняяCVSS 5,0Эксплойта нетEPSS 21 %

    microsoft · ie11 дек. 2002 г.

  • CVE-2002-1186
    26Наблюдать

    Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remo

    СредняяCVSS 5,0Эксплойта нетEPSS 19 %

    microsoft · ie11 дек. 2002 г.

  • CVE-2002-1187
    32Наблюдать

    Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the loca

    СредняяCVSS 6,8Proof of conceptEPSS 15 %

    microsoft · internet explorer11 дек. 2002 г.

  • CVE-2002-1188
    29Наблюдать

    Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user infor

    СредняяCVSS 6,4Эксплойта нетEPSS 12 %

    microsoft · internet explorer11 дек. 2002 г.

  • CVE-2002-1254
    46В плане

    Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system o

    ВысокаяCVSS 7,5Proof of conceptEPSS 53 %

    microsoft · ie11 дек. 2002 г.

  • CVE-2002-1317
    37Наблюдать

    Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of

    ВысокаяCVSS 7,5Proof of conceptEPSS 24 %

    xfree86 project · x11r611 дек. 2002 г.

  • CVE-2002-1318
    56В плане

    Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an

    КритическаяCVSS 10,0Готовый эксплойтEPSS 51 %

    samba · samba11 дек. 2002 г.

  • CVE-2002-1255
    24Наблюдать

    Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid h

    СредняяCVSS 5,0Эксплойта нетEPSS 14 %

    microsoft · outlook18 дек. 2002 г.

  • CVE-2002-1262
    34Наблюдать

    Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary

    ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %

    microsoft · internet explorer18 дек. 2002 г.

  • CVE-2002-1338
    27Наблюдать

    The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist,

    СредняяCVSS 5,0Эксплойта нетEPSS 23 %

    microsoft · office web components18 дек. 2002 г.

  • CVE-2002-1339
    24Наблюдать

    The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to

    СредняяCVSS 5,0Эксплойта нетEPSS 11 %

    microsoft · office web components18 дек. 2002 г.

  • CVE-2002-1340
    24Наблюдать

    The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the

    СредняяCVSS 5,0Эксплойта нетEPSS 11 %

    microsoft · office web components18 дек. 2002 г.

  • CVE-2002-1643
    52В плане

    Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 74 %

    realnetworks · helix universal server19 дек. 2002 г.

  • CVE-2002-1257
    45В плане

    Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java appl

    КритическаяCVSS 10,0Эксплойта нетEPSS 15 %

    microsoft · windows 200023 дек. 2002 г.

  • CVE-2002-1258
    25Наблюдать

    Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other application

    СредняяCVSS 5,0Эксплойта нетEPSS 15 %

    microsoft · windows 200023 дек. 2002 г.

  • CVE-2002-1260
    35Наблюдать

    The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security

    ВысокаяCVSS 7,5Эксплойта нетEPSS 15 %

    microsoft · windows 200023 дек. 2002 г.

  • CVE-2002-1325
    24Наблюдать

    Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet tha

    СредняяCVSS 5,0Эксплойта нетEPSS 13 %

    microsoft · windows 200023 дек. 2002 г.

  • CVE-2002-1357
    43В плане

    Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote a

    КритическаяCVSS 10,0Эксплойта нетEPSS 9 %

    cisco · ios23 дек. 2002 г.

  • CVE-2002-1359
    64На этой неделе

    Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial o

    КритическаяCVSS 10,0Готовый эксплойтEPSS 80 %

    cisco · ios23 дек. 2002 г.

  • CVE-2002-1361
    44В плане

    overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary c

    КритическаяCVSS 10,0Proof of conceptEPSS 11 %

    sun · cobalt raq 423 дек. 2002 г.

  • CVE-2002-1374
    36Наблюдать

    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force

    ВысокаяCVSS 7,5Proof of conceptEPSS 20 %

    oracle · mysql23 дек. 2002 г.

  • CVE-2002-1375
    37Наблюдать

    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long resp

    ВысокаяCVSS 7,5Proof of conceptEPSS 23 %

    oracle · mysql23 дек. 2002 г.

  • CVE-2002-1327
    37Наблюдать

    Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA

    ВысокаяCVSS 7,5Эксплойта нетEPSS 23 %

    microsoft · windows xp26 дек. 2002 г.

  • CVE-2002-1368
    35Наблюдать

    Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute a

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    easy software products · cups26 дек. 2002 г.

  • CVE-2002-1623
    35Наблюдать

    The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initia

    СредняяCVSS 5,0Эксплойта нетEPSS 48 %

    checkpoint · vpn-1 firewall-131 дек. 2002 г.

  • CVE-2002-1634
    25Наблюдать

    Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield

    СредняяCVSS 5,0Proof of conceptEPSS 16 %

    novell · netware31 дек. 2002 г.

  • CVE-2002-1660
    33Наблюдать

    calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command paramet

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    jelsoft · vbulletin31 дек. 2002 г.

  • CVE-2002-1671
    24Наблюдать

    Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the getData method of th

    СредняяCVSS 5,0Эксплойта нетEPSS 12 %

    microsoft · internet explorer31 дек. 2002 г.

  • CVE-2002-1688
    25Наблюдать

    The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other user

    СредняяCVSS 5,0Proof of conceptEPSS 17 %

    microsoft · internet explorer31 дек. 2002 г.

  • CVE-2002-1694
    24Наблюдать

    Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow rem

    СредняяCVSS 5,0Эксплойта нетEPSS 12 %

    microsoft · internet information server31 дек. 2002 г.

  • CVE-2002-1695
    24Наблюдать

    Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to m

    СредняяCVSS 5,0Эксплойта нетEPSS 13 %

    microsoft · internet information server31 дек. 2002 г.

  • CVE-2002-1698
    25Наблюдать

    Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via a long F

    СредняяCVSS 5,0Эксплойта нетEPSS 15 %

    microsoft · msn messenger31 дек. 2002 г.

  • CVE-2002-1700
    24Наблюдать

    Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbi

    СредняяCVSS 4,3Proof of conceptEPSS 24 %

    macromedia · coldfusion31 дек. 2002 г.

  • CVE-2002-1705
    25Наблюдать

    Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading Style Sheet (CSS) w

    СредняяCVSS 5,0Proof of conceptEPSS 17 %

    microsoft · internet explorer31 дек. 2002 г.

  • CVE-2002-1712
    28Наблюдать

    Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets

    СредняяCVSS 5,0Proof of conceptEPSS 25 %

    microsoft · windows 200031 дек. 2002 г.

  • CVE-2002-1714
    26Наблюдать

    Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" w

    СредняяCVSS 5,0Proof of conceptEPSS 19 %

    microsoft · ie31 дек. 2002 г.

  • CVE-2002-1716
    24Наблюдать

    The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using th

    СредняяCVSS 5,0Эксплойта нетEPSS 14 %

    microsoft · office31 дек. 2002 г.

  • CVE-2002-1717
    25Наблюдать

    Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.c

    СредняяCVSS 5,0Эксплойта нетEPSS 16 %

    microsoft · internet information services31 дек. 2002 г.

  • CVE-2002-1718
    24Наблюдать

    Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file,

    СредняяCVSS 5,0Эксплойта нетEPSS 14 %

    microsoft · internet information services31 дек. 2002 г.

  • CVE-2002-1744
    40В плане

    Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existen

    СредняяCVSS 5,0Proof of conceptEPSS 65 %

    microsoft · internet information services31 дек. 2002 г.

  • CVE-2002-1745
    36Наблюдать

    Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with exten

    ВысокаяCVSS 7,5Эксплойта нетEPSS 19 %

    microsoft · internet information services31 дек. 2002 г.

  • CVE-2002-1753
    40В плане

    csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup paramete

    ВысокаяCVSS 7,5Эксплойта нетEPSS 32 %

    cgiscript · csnews professional31 дек. 2002 г.

  • CVE-2002-1762
    25Наблюдать

    Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans i

    СредняяCVSS 5,0Эксплойта нетEPSS 15 %

    microsoft · baseline security analyzer31 дек. 2002 г.

  • CVE-2002-1769
    34Наблюдать

    Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remo

    ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %

    microsoft · site server31 дек. 2002 г.

  • CVE-2002-1783
    25Наблюдать

    CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for

    СредняяCVSS 5,0Эксплойта нетEPSS 16 %

    php · php31 дек. 2002 г.

  • CVE-2002-1790
    30Наблюдать

    The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send

    СредняяCVSS 5,0Proof of conceptEPSS 33 %

    microsoft · exchange server31 дек. 2002 г.

  • CVE-2002-1795
    22Наблюдать

    Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote

    СредняяCVSS 4,3Эксплойта нетEPSS 16 %

    microsoft · tsac activex control31 дек. 2002 г.

  • CVE-2002-1809
    35Наблюдать

    The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote a

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    oracle · mysql31 дек. 2002 г.

  • CVE-2002-1823
    33Наблюдать

    Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary code via a long HTTP re

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    lonerunner · zeroo http server31 дек. 2002 г.

  • CVE-2002-1831
    27Наблюдать

    Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that cont

    СредняяCVSS 5,0Proof of conceptEPSS 22 %

    microsoft · msn messenger31 дек. 2002 г.

  • CVE-2002-1847
    40В плане

    Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands

    ВысокаяCVSS 7,5Proof of conceptEPSS 33 %

    microsoft · windows media player31 дек. 2002 г.

  • CVE-2002-1850
    35Наблюдать

    mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumpti

    ВысокаяCVSS 7,5Proof of conceptEPSS 17 %

    apache · http server31 дек. 2002 г.

  • CVE-2002-1864
    40В плане

    Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".."

    СредняяCVSS 5,0Готовый эксплойтEPSS 17 %

    sws · sws simple web server31 дек. 2002 г.

  • CVE-2002-1873
    24Наблюдать

    Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash

    СредняяCVSS 5,0Эксплойта нетEPSS 13 %

    microsoft · exchange server31 дек. 2002 г.

  • CVE-2002-1908
    24Наблюдать

    Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that

    СредняяCVSS 5,0Эксплойта нетEPSS 13 %

    microsoft · internet information services31 дек. 2002 г.

  • CVE-2002-1918
    45В плане

    Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with

    КритическаяCVSS 10,0Эксплойта нетEPSS 16 %

    microsoft · data access components31 дек. 2002 г.

  • CVE-2002-1932
    34Наблюдать

    Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)"

    ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %

    microsoft · windows 200031 дек. 2002 г.

  • CVE-2002-1954
    21Наблюдать

    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML

    СредняяCVSS 4,3Proof of conceptEPSS 11 %

    php · php31 дек. 2002 г.

  • CVE-2002-1973
    42В плане

    Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static lib

    ВысокаяCVSS 7,5Proof of conceptEPSS 40 %

    microsoft · foundation class library31 дек. 2002 г.

  • CVE-2002-1993
    44В плане

    webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the followup parameter.

    КритическаяCVSS 10,0Proof of conceptEPSS 11 %

    affordable web space design · affordable web space design webbbs31 дек. 2002 г.

  • CVE-2002-2006
    29Наблюдать

    The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and

    СредняяCVSS 5,0Proof of conceptEPSS 30 %

    apache · tomcat31 дек. 2002 г.

  • CVE-2002-2007
    32Наблюдать

    The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory

    СредняяCVSS 5,0Proof of conceptEPSS 41 %

    apache · tomcat31 дек. 2002 г.

  • CVE-2002-2029
    37Наблюдать

    PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and pos

    ВысокаяCVSS 7,5Proof of conceptEPSS 23 %

    apache · http server31 дек. 2002 г.

  • CVE-2002-2031
    26Наблюдать

    Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files

    СредняяCVSS 5,0Proof of conceptEPSS 20 %

    microsoft · internet explorer31 дек. 2002 г.

  • CVE-2002-2062
    21Наблюдать

    Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with "Enable folder view

    СредняяCVSS 4,3Proof of conceptEPSS 13 %

    microsoft · internet explorer31 дек. 2002 г.

  • CVE-2002-2073
    21Наблюдать

    Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to

    СредняяCVSS 4,3Proof of conceptEPSS 12 %

    microsoft · site server31 дек. 2002 г.

  • CVE-2002-2077
    25Наблюдать

    The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, which may allow remote

    СредняяCVSS 5,0Эксплойта нетEPSS 15 %

    microsoft · windows 200031 дек. 2002 г.

  • CVE-2002-2081
    25Наблюдать

    cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file w

    СредняяCVSS 5,0Эксплойта нетEPSS 15 %

    microsoft · site server31 дек. 2002 г.

  • CVE-2002-2100
    23Наблюдать

    Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that

    СредняяCVSS 5,0Эксплойта нетEPSS 11 %

    microsoft · outlook31 дек. 2002 г.

  • CVE-2002-2101
    33Наблюдать

    Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "ja

    ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %

    microsoft · outlook31 дек. 2002 г.

  • CVE-2002-2117
    24Наблюдать

    Microsoft Windows XP allows remote attackers to cause a denial of service (CPU consumption) by flooding UDP port 500 (ISAKMP).

    СредняяCVSS 5,0Эксплойта нетEPSS 11 %

    microsoft · windows xp31 дек. 2002 г.

  • CVE-2002-2164
    27Наблюдать

    Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long <A HR

    СредняяCVSS 5,0Proof of conceptEPSS 21 %

    microsoft · outlook express31 дек. 2002 г.

  • CVE-2002-2226
    49В плане

    Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 63 %

    tftpd32 · tftpd3231 дек. 2002 г.

  • CVE-2002-2268
    53В плане

    Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.

    КритическаяCVSS 9,4Готовый эксплойтEPSS 51 %

    netdave · webster http server31 дек. 2002 г.

  • CVE-2002-2281
    43В плане

    Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java comma

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    symantec · java31 дек. 2002 г.

  • CVE-2002-2328
    33Наблюдать

    Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service

    ВысокаяCVSS 7,1Эксплойта нетEPSS 16 %

    microsoft · windows 200031 дек. 2002 г.

  • CVE-2002-2380
    28Наблюдать

    NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undoc

    СредняяCVSS 6,4Эксплойта нетEPSS 10 %

    microsoft · network firmware31 дек. 2002 г.