По дате публикации
Эксплуатируемые и новые серьёзные CVE: сентябрь 2004 г.
11 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
31Наблюдать | CVE-2004-0637Proof of concept | Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload packoracle · oracle8i · CWE-94 | Средняя6,5 | — | 17,8 % | 2 сент. 2004 г. |
24Наблюдать | CVE-2004-1675Proof of concept | Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command witsolarwinds · serv-u file server · CWE-20 | Средняя5,0 | — | 12,3 % | 11 сент. 2004 г. |
23Наблюдать | CVE-2004-1686Эксплойта нет | Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTMLmicrosoft · ie | Средняя5,0 | — | 10,2 % | 15 сент. 2004 г. |
25Наблюдать | CVE-2004-0809Эксплойта нет | The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain seqapache · http server | Средняя5,0 | — | 17,1 % | 16 сент. 2004 г. |
33Наблюдать | CVE-2004-0866Эксплойта нет | Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which ckde · konqueror | Высокая7,5 | — | 10,0 % | 16 сент. 2004 г. |
24Наблюдать | CVE-2004-0869Эксплойта нет | Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/Smicrosoft · ie | Средняя5,0 | — | 14,7 % | 16 сент. 2004 г. |
43В плане | CVE-2004-1695Proof of concept | EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URLemulive · server4 | Критическая10,0 | — | 10,0 % | 20 сент. 2004 г. |
52В плане | CVE-2004-0200Proof of concept | Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remotemicrosoft · .net framework | Критическая9,3 | — | 49,0 % | 28 сент. 2004 г. |
28Наблюдать | CVE-2004-0558Proof of concept | The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hangeasy software products · cups | Средняя5,0 | — | 26,7 % | 28 сент. 2004 г. |
43В плане | CVE-2004-0573Эксплойта нет | Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 almicrosoft · frontpage | Высокая7,5 | — | 42,3 % | 28 сент. 2004 г. |
34Наблюдать | CVE-2004-0691Proof of concept | Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial oftrolltech · qt | Высокая7,5 | — | 14,6 % | 28 сент. 2004 г. |
- CVE-2004-063731Наблюдать
Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload pack
СредняяCVSS 6,5Proof of conceptEPSS 17 %oracle · oracle8i2 сент. 2004 г.
- CVE-2004-167524Наблюдать
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command wit
СредняяCVSS 5,0Proof of conceptEPSS 12 %solarwinds · serv-u file server11 сент. 2004 г.
- CVE-2004-168623Наблюдать
Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML
СредняяCVSS 5,0Эксплойта нетEPSS 10 %microsoft · ie15 сент. 2004 г.
- CVE-2004-080925Наблюдать
The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain seq
СредняяCVSS 5,0Эксплойта нетEPSS 17 %apache · http server16 сент. 2004 г.
- CVE-2004-086633Наблюдать
Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which c
ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %kde · konqueror16 сент. 2004 г.
- CVE-2004-086924Наблюдать
Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/S
СредняяCVSS 5,0Эксплойта нетEPSS 14 %microsoft · ie16 сент. 2004 г.
- CVE-2004-169543В плане
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL
КритическаяCVSS 10,0Proof of conceptEPSS 10 %emulive · server420 сент. 2004 г.
- CVE-2004-020052В плане
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote
КритическаяCVSS 9,3Proof of conceptEPSS 49 %microsoft · .net framework28 сент. 2004 г.
- CVE-2004-055828Наблюдать
The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang
СредняяCVSS 5,0Proof of conceptEPSS 26 %easy software products · cups28 сент. 2004 г.
- CVE-2004-057343В плане
Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 al
ВысокаяCVSS 7,5Эксплойта нетEPSS 42 %microsoft · frontpage28 сент. 2004 г.
- CVE-2004-069134Наблюдать
Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of
ВысокаяCVSS 7,5Proof of conceptEPSS 14 %trolltech · qt28 сент. 2004 г.