İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2002: sömürülen ve yeni ciddi CVE kayıtları

20 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2002-1592
    24İzleyin

    The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that

    OrtaCVSS 5,0İstismar yokEPSS %12

    apache · http server6 May 2002

  • CVE-2002-0154
    37İzleyin

    Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or

    YüksekCVSS 7,5İstismar yokEPSS %24

    microsoft · sql server16 May 2002

  • CVE-2002-0201
    26İzleyin

    Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a

    OrtaCVSS 5,0Kavram kanıtıEPSS %21

    cyberstop · cyberstop web server16 May 2002

  • CVE-2002-0224
    28İzleyin

    The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through S

    OrtaCVSS 5,0İstismar yokEPSS %26

    microsoft · internet information services16 May 2002

  • CVE-2002-0228
    26İzleyin

    Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as

    OrtaCVSS 5,0İstismar yokEPSS %19

    microsoft · msn messenger16 May 2002

  • CVE-2002-1056
    36İzleyin

    Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editi

    YüksekCVSS 7,5İstismar yokEPSS %18

    microsoft · outlook16 May 2002

  • CVE-2002-0033
    47Planlayın

    Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with

    KritikCVSS 10,0Kavram kanıtıEPSS %23

    sun · solaris29 May 2002

  • CVE-2002-0155
    37İzleyin

    Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, all

    YüksekCVSS 7,5İstismar yokEPSS %24

    microsoft · msn chat control29 May 2002

  • CVE-2002-0188
    35İzleyin

    Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · internet explorer29 May 2002

  • CVE-2002-0189
    34İzleyin

    Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    microsoft · internet explorer29 May 2002

  • CVE-2002-0190
    37İzleyin

    Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code under fewer security restrictions via a malf

    YüksekCVSS 7,5İstismar yokEPSS %24

    microsoft · internet explorer29 May 2002

  • CVE-2002-0191
    29İzleyin

    Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" character via script cont

    OrtaCVSS 5,0Kavram kanıtıEPSS %28

    microsoft · internet explorer29 May 2002

  • CVE-2002-0193
    40Planlayın

    Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type

    YüksekCVSS 7,5Kavram kanıtıEPSS %33

    microsoft · internet explorer29 May 2002

  • CVE-2002-0242
    33İzleyin

    Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script via an Extended HTML F

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · internet explorer29 May 2002

  • CVE-2002-0252
    33İzleyin

    Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    apple · quicktime29 May 2002

  • CVE-2002-0263
    34İzleyin

    Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary code via a long boundary value in a multip

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    ezne.net · ezboard 200029 May 2002

  • CVE-2002-0269
    33İzleyin

    Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · internet explorer29 May 2002

  • CVE-2002-0283
    29İzleyin

    Windows XP with port 445 open allows remote attackers to cause a denial of service (CPU consumption) via a flood of TCP SYN packets containi

    OrtaCVSS 5,0İstismar yokEPSS %28

    microsoft · windows xp31 May 2002

  • CVE-2002-0285
    34İzleyin

    Outlook Express 5.5 and 6.0 on Windows treats a carriage return ("CR") in a message header as if it were a valid carriage return/line feed c

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · outlook express31 May 2002

  • CVE-2002-0289
    24İzleyin

    Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP re

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    bbshareware.com · phusion webserver31 May 2002