Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: декабрь 2004 г.

84 записей · 1 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2003-1208
    44В плане

    Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session par

    КритическаяCVSS 10,0Эксплойта нетEPSS 13 %

    oracle · oracle9i3 дек. 2004 г.

  • CVE-2004-0393
    45В плане

    Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format s

    КритическаяCVSS 10,0Proof of conceptEPSS 17 %

    rlpr · rlpr6 дек. 2004 г.

  • CVE-2004-0608
    62На этой неделе

    The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2

    КритическаяCVSS 10,0Готовый эксплойтEPSS 73 %

    nerf arena blast · nerf arena blast6 дек. 2004 г.

  • CVE-2004-0610
    24Наблюдать

    The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusa

    СредняяCVSS 5,0Эксплойта нетEPSS 14 %

    microsoft · mn-500 wireless base station6 дек. 2004 г.

  • CVE-2004-0627
    61На этой неделе

    The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scr

    КритическаяCVSS 10,0Proof of conceptEPSS 69 %

    mysql · mysql6 дек. 2004 г.

  • CVE-2004-0633
    25Наблюдать

    The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer ov

    СредняяCVSS 5,0Proof of conceptEPSS 17 %

    ethereal group · ethereal6 дек. 2004 г.

  • CVE-2004-1319
    28Наблюдать

    The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a windo

    СредняяCVSS 5,0Эксплойта нетEPSS 26 %

    nortel · ip softphone 205015 дек. 2004 г.

  • CVE-2004-1324
    15Наблюдать

    The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone

    НизкаяCVSS 2,6Proof of conceptEPSS 16 %

    microsoft · windows media player18 дек. 2004 г.

  • CVE-2004-1325
    25Наблюдать

    The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the

    СредняяCVSS 5,0Proof of conceptEPSS 15 %

    microsoft · windows media player18 дек. 2004 г.

  • CVE-2005-0066
    23Наблюдать

    The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router i

    СредняяCVSS 5,0Эксплойта нетEPSS 10 %

    tcp · tcp22 дек. 2004 г.

  • CVE-2005-0067
    24Наблюдать

    The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for att

    СредняяCVSS 5,0Эксплойта нетEPSS 13 %

    tcp · tcp22 дек. 2004 г.

  • CVE-2005-0068
    36Наблюдать

    The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to f

    СредняяCVSS 5,0Эксплойта нетEPSS 54 %

    tcp · tcp22 дек. 2004 г.

  • CVE-2004-0816
    33Наблюдать

    Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (app

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    linux · linux kernel23 дек. 2004 г.

  • CVE-2004-0841
    35Наблюдать

    Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use dra

    СредняяCVSS 5,0Proof of conceptEPSS 48 %

    avaya · ip600 media servers23 дек. 2004 г.

  • CVE-2004-0842
    47В плане

    Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash

    ВысокаяCVSS 7,5Proof of conceptEPSS 56 %

    avaya · ip600 media servers23 дек. 2004 г.

  • CVE-2004-0867
    35Наблюдать

    Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which c

    ВысокаяCVSS 7,5Эксплойта нетEPSS 17 %

    mozilla · firefox23 дек. 2004 г.

  • CVE-2004-1305
    38Наблюдать

    The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote

    СредняяCVSS 5,0Proof of conceptEPSS 58 %

    nortel · ip softphone 205023 дек. 2004 г.

  • CVE-2004-1361
    26Наблюдать

    Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers

    СредняяCVSS 5,0Эксплойта нетEPSS 20 %

    microsoft · windows 200023 дек. 2004 г.

  • CVE-2004-1373
    51В плане

    Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrar

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 70 %

    nullsoft · shoutcast server23 дек. 2004 г.

  • CVE-2004-1317
    48В плане

    Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbit

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 60 %

    netcat · netcat27 дек. 2004 г.

  • CVE-2004-0465
    24Наблюдать

    Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to rea

    СредняяCVSS 5,0Proof of conceptEPSS 12 %

    openconnect · webconnect31 дек. 2004 г.

  • CVE-2004-0567
    51В плане

    The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and

    ВысокаяCVSS 7,5Proof of conceptEPSS 68 %

    microsoft · windows 200031 дек. 2004 г.

  • CVE-2004-0826
    37Наблюдать

    Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modif

    ВысокаяCVSS 7,5Эксплойта нетEPSS 22 %

    netscape · certificate server31 дек. 2004 г.

  • CVE-2004-0985
    46В плане

    Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable

    КритическаяCVSS 10,0Эксплойта нетEPSS 20 %

    microsoft · ie31 дек. 2004 г.

  • CVE-2004-1043
    33Наблюдать

    Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help

    СредняяCVSS 5,0Proof of conceptEPSS 44 %

    microsoft · internet explorer31 дек. 2004 г.

  • CVE-2004-1049
    29Наблюдать

    Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp,

    СредняяCVSS 5,1Эксплойта нетEPSS 30 %

    microsoft · windows 200031 дек. 2004 г.

  • CVE-2004-1050
    60На этой неделе

    Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes

    КритическаяCVSS 10,0Proof of conceptEPSS 67 %

    avaya · ip600 media servers31 дек. 2004 г.

  • CVE-2004-1104
    41В плане

    Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a

    ВысокаяCVSS 7,5Proof of conceptEPSS 35 %

    microsoft · ie31 дек. 2004 г.

  • CVE-2004-1155
    34Наблюдать

    Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another wind

    ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %

    microsoft · ie31 дек. 2004 г.

  • CVE-2004-1166
    42В плане

    CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP comma

    ВысокаяCVSS 7,5Proof of conceptEPSS 39 %

    microsoft · ie31 дек. 2004 г.

  • CVE-2004-1173
    34Наблюдать

    Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Dynamic HTM

    ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %

    microsoft · internet explorer31 дек. 2004 г.

  • CVE-2004-1306
    26Наблюдать

    Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote a

    СредняяCVSS 5,1Proof of conceptEPSS 19 %

    microsoft · windows 200031 дек. 2004 г.

  • CVE-2004-1388
    50В плане

    Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attack

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 68 %

    berlios · gps daemon31 дек. 2004 г.

  • CVE-2004-1389
    40В плане

    Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCente

    СредняяCVSS 6,0Готовый эксплойтEPSS 9 %

    veritas · netbackup31 дек. 2004 г.

  • CVE-2004-1392
    23Наблюдать

    PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    php · php31 дек. 2004 г.

  • CVE-2004-1423
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virt

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    php-calendar · php-calendar31 дек. 2004 г.

  • CVE-2004-1437
    34Наблюдать

    Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attackers to execute arbitr

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    pavuk · pavuk31 дек. 2004 г.

  • CVE-2004-1439
    35Наблюдать

    Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as (1) USER, (2) PASS, (3)

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    sapporoworks · black jumbodog31 дек. 2004 г.

  • CVE-2004-1456
    34Наблюдать

    filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    cvstrac · cvstrac31 дек. 2004 г.

  • CVE-2004-1464
    60На этой неделе

    Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a craf

    СредняяCVSS 5,9KEVГотовый эксплойтEPSS 4 %

    cisco · ios31 дек. 2004 г.

  • CVE-2004-1491
    24Наблюдать

    Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a short

    СредняяCVSS 5,0Proof of conceptEPSS 12 %

    opera · opera browser31 дек. 2004 г.

  • CVE-2004-1520
    45В плане

    Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE comman

    СредняяCVSS 4,6Готовый эксплойтEPSS 88 %

    ipswitch · imail31 дек. 2004 г.

  • CVE-2004-1546
    29Наблюдать

    Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a long (1) SAML, SOML

    СредняяCVSS 5,0Proof of conceptEPSS 31 %

    alt-n · mdaemon31 дек. 2004 г.

  • CVE-2004-1550
    40В плане

    Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obta

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 18 %

    motorola · wr850g31 дек. 2004 г.

  • CVE-2004-1558
    51В плане

    Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash)

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 71 %

    ypops · ypops31 дек. 2004 г.

  • CVE-2004-1560
    28Наблюдать

    Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433

    СредняяCVSS 5,0Proof of conceptEPSS 25 %

    microsoft · sql server31 дек. 2004 г.

  • CVE-2004-1561
    53В плане

    Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of he

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 77 %

    icecast · icecast31 дек. 2004 г.

  • CVE-2004-1584
    23Наблюдать

    CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify e

    СредняяCVSS 5,0Proof of conceptEPSS 11 %

    wordpress · wordpress31 дек. 2004 г.

  • CVE-2004-1782
    39Наблюдать

    athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass paramete

    ВысокаяCVSS 7,5Proof of conceptEPSS 28 %

    david maciejak · athena web registration31 дек. 2004 г.

  • CVE-2004-1789
    20Наблюдать

    Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web s

    СредняяCVSS 4,3Proof of conceptEPSS 11 %

    zyxel · zywall1031 дек. 2004 г.

  • CVE-2004-1812
    54В плане

    Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attacker

    КритическаяCVSS 10,0Эксплойта нетEPSS 45 %

    broadcom · unicenter tng31 дек. 2004 г.

  • CVE-2004-1892
    33Наблюдать

    Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attacke

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    emule · emule31 дек. 2004 г.

  • CVE-2004-1898
    45В плане

    Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a

    КритическаяCVSS 10,0Proof of conceptEPSS 16 %

    tildeslash · monit31 дек. 2004 г.

  • CVE-2004-2074
    40В плане

    Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1

    СредняяCVSS 5,0Готовый эксплойтEPSS 35 %

    bolintech · dream ftp server31 дек. 2004 г.

  • CVE-2004-2104
    24Наблюдать

    Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP a

    СредняяCVSS 5,0Proof of conceptEPSS 11 %

    novell · netware31 дек. 2004 г.

  • CVE-2004-2111
    60На этой неделе

    Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via

    ВысокаяCVSS 8,5Готовый эксплойтEPSS 86 %

    solarwinds · serv-u file server31 дек. 2004 г.

  • CVE-2004-2115
    45В плане

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitra

    СредняяCVSS 6,8Proof of conceptEPSS 58 %

    oracle · http server31 дек. 2004 г.

  • CVE-2004-2137
    28Наблюдать

    Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients o

    СредняяCVSS 5,0Эксплойта нетEPSS 26 %

    microsoft · outlook express31 дек. 2004 г.

  • CVE-2004-2167
    34Наблюдать

    Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the exp

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    latex2rtf · latex2rtf31 дек. 2004 г.

  • CVE-2004-2179
    24Наблюдать

    asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a

    СредняяCVSS 5,0Эксплойта нетEPSS 12 %

    microsoft · frontpage31 дек. 2004 г.

  • CVE-2004-2221
    40В плане

    Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTT

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 34 %

    mercantec · softcart31 дек. 2004 г.

  • CVE-2004-2262
    34Наблюдать

    ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary co

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    e107 · e10731 дек. 2004 г.

  • CVE-2004-2271
    52В плане

    Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 71 %

    minishare · minimal http server31 дек. 2004 г.

  • CVE-2004-2275
    44В плане

    i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter.

    КритическаяCVSS 10,0Proof of conceptEPSS 12 %

    i-mall commerce · i-mall.cgi31 дек. 2004 г.

  • CVE-2004-2289
    47В плане

    Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellCl

    КритическаяCVSS 10,0Proof of conceptEPSS 23 %

    microsoft · windows xp31 дек. 2004 г.

  • CVE-2004-2291
    33Наблюдать

    Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Hel

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    microsoft · ie31 дек. 2004 г.

  • CVE-2004-2292
    24Наблюдать

    Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a long STATUS command to

    СредняяCVSS 5,0Эксплойта нетEPSS 12 %

    alt-n · mdaemon31 дек. 2004 г.

  • CVE-2004-2299
    33Наблюдать

    Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    omnicron · omnihttpd31 дек. 2004 г.

  • CVE-2004-2307
    24Наблюдать

    Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI wit

    СредняяCVSS 5,0Эксплойта нетEPSS 14 %

    microsoft · internet explorer31 дек. 2004 г.

  • CVE-2004-2364
    23Наблюдать

    Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs tha

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    phpx · phpx31 дек. 2004 г.

  • CVE-2004-2383
    26Наблюдать

    Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events

    СредняяCVSS 5,1Proof of conceptEPSS 19 %

    microsoft · ie31 дек. 2004 г.

  • CVE-2004-2416
    48В плане

    Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 60 %

    youngzsoft · ccproxy31 дек. 2004 г.

  • CVE-2004-2425
    34Наблюдать

    Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    axis · 2100 network camera31 дек. 2004 г.

  • CVE-2004-2434
    30Наблюдать

    Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with "::{" (colon colon

    СредняяCVSS 5,0Proof of conceptEPSS 32 %

    microsoft · ie31 дек. 2004 г.

  • CVE-2004-2442
    23Наблюдать

    Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earl

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    f-secure · f-secure anti-virus31 дек. 2004 г.

  • CVE-2004-2466
    42В плане

    chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly

    СредняяCVSS 5,0Готовый эксплойтEPSS 74 %

    efs software · easy chat server31 дек. 2004 г.

  • CVE-2004-2482
    24Наблюдать

    Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does no

    СредняяCVSS 5,0Эксплойта нетEPSS 12 %

    microsoft · outlook31 дек. 2004 г.

  • CVE-2004-2501
    34Наблюдать

    Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute a

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    mailenable · mailenable enterprise31 дек. 2004 г.

  • CVE-2004-2532
    45В плане

    Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary

    КритическаяCVSS 10,0Proof of conceptEPSS 15 %

    solarwinds · serv-u file server31 дек. 2004 г.

  • CVE-2004-2549
    23Наблюдать

    Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    nortel · wlan access point 222031 дек. 2004 г.

  • CVE-2004-2652
    34Наблюдать

    The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remo

    ВысокаяCVSS 7,8Proof of conceptEPSS 11 %

    sourcefire · snort31 дек. 2004 г.

  • CVE-2004-2685
    33Наблюдать

    Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p) com

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    youngzsoft · ccproxy31 дек. 2004 г.

  • CVE-2004-2687
    63На этой неделе

    distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute a

    КритическаяCVSS 9,3Готовый эксплойтEPSS 88 %

    apple · xcode31 дек. 2004 г.

  • CVE-2004-2691
    40В плане

    Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of

    ВысокаяCVSS 7,1Готовый эксплойтEPSS 39 %

    3com · 3c17205-us31 дек. 2004 г.