По дате публикации
Эксплуатируемые и новые серьёзные CVE: июль 2004 г.
22 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
53В плане | CVE-2004-0397Готовый эксплойт | Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrasubversion · subversion | Высокая7,5 | — | 75,2 % | 7 июл. 2004 г. |
36Наблюдать | CVE-2004-0399Proof of concept | Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cauuniversity of cambridge · exim | Высокая7,5 | — | 20,5 % | 7 июл. 2004 г. |
54В плане | CVE-2004-0420Эксплойта нет | The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attmicrosoft · ie | Критическая10,0 | — | 46,0 % | 7 июл. 2004 г. |
40В плане | CVE-2004-0430Готовый эксплойт | Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a Loginapple · mac os x | Средняя5,1 | — | 41,3 % | 7 июл. 2004 г. |
44В плане | CVE-2004-0444Эксплойта нет | Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 20symantec · client firewall | Критическая10,0 | — | 12,7 % | 7 июл. 2004 г. |
13Наблюдать | CVE-2004-0445Proof of concept | The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Nsymantec · client firewall | Низкая2,6 | — | 11,0 % | 7 июл. 2004 г. |
25Наблюдать | CVE-2004-0474Proof of concept | Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic microsoft · windows xp | Средняя5,1 | — | 16,2 % | 7 июл. 2004 г. |
23Наблюдать | CVE-2004-0475Эксплойта нет | The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double bamicrosoft · ie | Средняя5,1 | — | 10,0 % | 7 июл. 2004 г. |
28Наблюдать | CVE-2004-0479Proof of concept | Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disablesmicrosoft · ie | Средняя5,0 | — | 25,7 % | 7 июл. 2004 г. |
17Наблюдать | CVE-2004-0484Proof of concept | mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a formicrosoft · internet explorer | Низкая2,6 | — | 21,8 % | 7 июл. 2004 г. |
41В плане | CVE-2004-0488Эксплойта нет | Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust tapache · http server · CWE-787 | Высокая7,5 | — | 37,6 % | 7 июл. 2004 г. |
39Наблюдать | CVE-2003-1048Эксплойта нет | Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (microsoft · internet explorer · CWE-415 | Высокая7,8 | — | 26,6 % | 27 июл. 2004 г. |
42В плане | CVE-2004-0566Эксплойта нет | Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits valmicrosoft · internet explorer | Высокая7,5 | — | 38,4 % | 27 июл. 2004 г. |
36Наблюдать | CVE-2004-0594Proof of concept | The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enahp · hp-ux · CWE-367 | Средняя5,1 | — | 54,8 % | 27 июл. 2004 г. |
41В плане | CVE-2004-0595Proof of concept | The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restrictiphp · php | Средняя6,8 | — | 45,1 % | 27 июл. 2004 г. |
49В плане | CVE-2004-0600Proof of concept | Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via ansamba · samba | Критическая10,0 | — | 29,4 % | 27 июл. 2004 г. |
41В плане | CVE-2004-0695Готовый эксплойт | Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long4d · webstar | Высокая7,5 | — | 38,1 % | 27 июл. 2004 г. |
29Наблюдать | CVE-2004-0723Эксплойта нет | Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between microsoft · java virtual machine | Средняя6,4 | — | 13,0 % | 27 июл. 2004 г. |
33Наблюдать | CVE-2004-0726Эксплойта нет | The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone vimicrosoft · windows 2000 | Высокая7,5 | — | 11,4 % | 27 июл. 2004 г. |
42В плане | CVE-2004-0727Proof of concept | Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers microsoft · internet explorer | Высокая7,5 | — | 39,7 % | 27 июл. 2004 г. |
27Наблюдать | CVE-2004-0728Proof of concept | The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of semicrosoft · systems management server | Средняя5,0 | — | 24,7 % | 27 июл. 2004 г. |
49В плане | CVE-2004-0735Готовый эксплойт | Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlelectronic arts · medal of honor allied assault | Высокая7,5 | — | 62,1 % | 27 июл. 2004 г. |
- CVE-2004-039753В плане
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitra
ВысокаяCVSS 7,5Готовый эксплойтEPSS 75 %subversion · subversion7 июл. 2004 г.
- CVE-2004-039936Наблюдать
Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cau
ВысокаяCVSS 7,5Proof of conceptEPSS 20 %university of cambridge · exim7 июл. 2004 г.
- CVE-2004-042054В плане
The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote att
КритическаяCVSS 10,0Эксплойта нетEPSS 46 %microsoft · ie7 июл. 2004 г.
- CVE-2004-043040В плане
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a Login
СредняяCVSS 5,1Готовый эксплойтEPSS 41 %apple · mac os x7 июл. 2004 г.
- CVE-2004-044444В плане
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 20
КритическаяCVSS 10,0Эксплойта нетEPSS 12 %symantec · client firewall7 июл. 2004 г.
- CVE-2004-044513Наблюдать
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, N
НизкаяCVSS 2,6Proof of conceptEPSS 11 %symantec · client firewall7 июл. 2004 г.
- CVE-2004-047425Наблюдать
Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic
СредняяCVSS 5,1Proof of conceptEPSS 16 %microsoft · windows xp7 июл. 2004 г.
- CVE-2004-047523Наблюдать
The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double ba
СредняяCVSS 5,1Эксплойта нетEPSS 10 %microsoft · ie7 июл. 2004 г.
- CVE-2004-047928Наблюдать
Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables
СредняяCVSS 5,0Proof of conceptEPSS 25 %microsoft · ie7 июл. 2004 г.
- CVE-2004-048417Наблюдать
mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a for
НизкаяCVSS 2,6Proof of conceptEPSS 21 %microsoft · internet explorer7 июл. 2004 г.
- CVE-2004-048841В плане
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust t
ВысокаяCVSS 7,5Эксплойта нетEPSS 37 %apache · http server7 июл. 2004 г.
- CVE-2003-104839Наблюдать
Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (
ВысокаяCVSS 7,8Эксплойта нетEPSS 26 %microsoft · internet explorer27 июл. 2004 г.
- CVE-2004-056642В плане
Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits val
ВысокаяCVSS 7,5Эксплойта нетEPSS 38 %microsoft · internet explorer27 июл. 2004 г.
- CVE-2004-059436Наблюдать
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is ena
СредняяCVSS 5,1Proof of conceptEPSS 54 %hp · hp-ux27 июл. 2004 г.
- CVE-2004-059541В плане
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricti
СредняяCVSS 6,8Proof of conceptEPSS 45 %php · php27 июл. 2004 г.
- CVE-2004-060049В плане
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an
КритическаяCVSS 10,0Proof of conceptEPSS 29 %samba · samba27 июл. 2004 г.
- CVE-2004-069541В плане
Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long
ВысокаяCVSS 7,5Готовый эксплойтEPSS 38 %4d · webstar27 июл. 2004 г.
- CVE-2004-072329Наблюдать
Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between
СредняяCVSS 6,4Эксплойта нетEPSS 13 %microsoft · java virtual machine27 июл. 2004 г.
- CVE-2004-072633Наблюдать
The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone vi
ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %microsoft · windows 200027 июл. 2004 г.
- CVE-2004-072742В плане
Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers
ВысокаяCVSS 7,5Proof of conceptEPSS 39 %microsoft · internet explorer27 июл. 2004 г.
- CVE-2004-072827Наблюдать
The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of se
СредняяCVSS 5,0Proof of conceptEPSS 24 %microsoft · systems management server27 июл. 2004 г.
- CVE-2004-073549В плане
Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earl
ВысокаяCVSS 7,5Готовый эксплойтEPSS 62 %electronic arts · medal of honor allied assault27 июл. 2004 г.