İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2002: sömürülen ve yeni ciddi CVE kayıtları

27 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2002-0018
    45Planlayın

    In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify th

    KritikCVSS 10,0İstismar yokEPSS %16

    microsoft · windows 20008 Mar 2002

  • CVE-2002-0020
    35İzleyin

    Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol op

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · interix8 Mar 2002

  • CVE-2002-0021
    25İzleyin

    Network Product Identification (PID) Checker in Microsoft Office v.

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · office8 Mar 2002

  • CVE-2002-0022
    42Planlayın

    Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute

    YüksekCVSS 7,5İstismar yokEPSS %39

    microsoft · internet explorer8 Mar 2002

  • CVE-2002-0023
    32İzleyin

    Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which

    OrtaCVSS 5,0Kavram kanıtıEPSS %38

    microsoft · internet explorer8 Mar 2002

  • CVE-2002-0025
    24İzleyin

    Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote attackers to modify whi

    OrtaCVSS 5,0İstismar yokEPSS %14

    microsoft · internet explorer8 Mar 2002

  • CVE-2002-0026
    34İzleyin

    Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer8 Mar 2002

  • CVE-2002-0027
    36İzleyin

    Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · internet explorer8 Mar 2002

  • CVE-2002-0049
    29İzleyin

    Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to r

    OrtaCVSS 6,4İstismar yokEPSS %13

    microsoft · exchange server8 Mar 2002

  • CVE-2002-0050
    34İzleyin

    Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long auth

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · commerce server8 Mar 2002

  • CVE-2002-0052
    27İzleyin

    Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read

    OrtaCVSS 5,0İstismar yokEPSS %22

    microsoft · internet explorer8 Mar 2002

  • CVE-2002-0053
    41Planlayın

    Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a

    YüksekCVSS 7,5İstismar yokEPSS %35

    microsoft · windows 20008 Mar 2002

  • CVE-2002-0054
    37İzleyin

    SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses t

    YüksekCVSS 7,5İstismar yokEPSS %22

    microsoft · exchange server8 Mar 2002

  • CVE-2002-0055
    31İzleyin

    SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via

    OrtaCVSS 5,0İstismar yokEPSS %37

    microsoft · exchange server8 Mar 2002

  • CVE-2002-0056
    37İzleyin

    Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenData

    YüksekCVSS 7,5İstismar yokEPSS %24

    microsoft · sql server8 Mar 2002

  • CVE-2002-0057
    27İzleyin

    XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attacke

    OrtaCVSS 5,0İstismar yokEPSS %23

    microsoft · internet explorer8 Mar 2002

  • CVE-2002-0081
    37İzleyin

    Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attack

    YüksekCVSS 7,5İstismar yokEPSS %24

    php · php8 Mar 2002

  • CVE-2002-0070
    36İzleyin

    Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a cu

    YüksekCVSS 7,6İstismar yokEPSS %18

    microsoft · windows 200015 Mar 2002

  • CVE-2002-0082
    39İzleyin

    The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory us

    YüksekCVSS 7,5Kavram kanıtıEPSS %29

    apache-ssl · apache-ssl15 Mar 2002

  • CVE-2002-0083
    43Planlayın

    Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    immunix · immunix15 Mar 2002

  • CVE-2002-0084
    34İzleyin

    Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mou

    YüksekCVSS 7,2İstismar yokEPSS %20

    sun · solaris15 Mar 2002

  • CVE-2002-0076
    38İzleyin

    Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet conta

    YüksekCVSS 7,5İstismar yokEPSS %26

    hp · java jre-jdk19 Mar 2002

  • CVE-2002-0061
    45Planlayın

    Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters

    YüksekCVSS 7,5Kavram kanıtıEPSS %50

    apache · http server21 Mar 2002

  • CVE-2002-0101
    24İzleyin

    Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showMo

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · internet explorer25 Mar 2002

  • CVE-2002-0128
    33İzleyin

    cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, vi

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    sambar · sambar server25 Mar 2002

  • CVE-2002-0163
    35İzleyin

    Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    squid · squid26 Mar 2002

  • CVE-2002-0078
    37İzleyin

    The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone

    YüksekCVSS 7,5İstismar yokEPSS %21

    microsoft · internet explorer29 Mar 2002