İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2002: sömürülen ve yeni ciddi CVE kayıtları

30 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2002-0186
    47Planlayın

    Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data querie

    YüksekCVSS 7,5Kavram kanıtıEPSS %55

    microsoft · sql server3 Tem 2002

  • CVE-2002-0187
    34İzleyin

    Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via t

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    microsoft · sql server3 Tem 2002

  • CVE-2002-0364
    40Planlayın

    Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing

    YüksekCVSS 7,5İstismar yokEPSS %33

    microsoft · internet information server3 Tem 2002

  • CVE-2002-0371
    46Planlayın

    Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attacke

    YüksekCVSS 7,5Kavram kanıtıEPSS %54

    microsoft · internet explorer3 Tem 2002

  • CVE-2002-0372
    34İzleyin

    Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's (IE

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · windows media player3 Tem 2002

  • CVE-2002-0392
    59Planlayın

    Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrar

    YüksekCVSS 7,5SilahlaştırılmışEPSS %95

    apache · http server3 Tem 2002

  • CVE-2002-0540
    36İzleyin

    Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and mod

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    nortel · cvx 1800 multi-service access switch3 Tem 2002

  • CVE-2002-0559
    34İzleyin

    Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or e

    YüksekCVSS 7,5İstismar yokEPSS %13

    oracle · application server3 Tem 2002

  • CVE-2002-0563
    35İzleyin

    The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authent

    OrtaCVSS 5,0İstismar yokEPSS %51

    oracle · application server3 Tem 2002

  • CVE-2002-0568
    31İzleyin

    Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information i

    DüşükCVSS 2,1İstismar yokEPSS %75

    oracle · application server3 Tem 2002

  • CVE-2002-0569
    36İzleyin

    Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL

    YüksekCVSS 7,5İstismar yokEPSS %18

    oracle · application server3 Tem 2002

  • CVE-2002-0620
    24İzleyin

    Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrar

    OrtaCVSS 5,0İstismar yokEPSS %14

    microsoft · commerce server3 Tem 2002

  • CVE-2002-0621
    25İzleyin

    Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause

    OrtaCVSS 5,0İstismar yokEPSS %16

    microsoft · commerce server3 Tem 2002

  • CVE-2002-0622
    36İzleyin

    The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · commerce server3 Tem 2002

  • CVE-2002-0623
    36İzleyin

    Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · commerce server3 Tem 2002

  • CVE-2002-0639
    44Planlayın

    Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentica

    KritikCVSS 9,8İstismar yokEPSS %18

    openbsd · openssh3 Tem 2002

  • CVE-2002-0640
    48Planlayın

    Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses du

    KritikCVSS 10,0Kavram kanıtıEPSS %28

    openbsd · openssh3 Tem 2002

  • CVE-2002-0651
    34İzleyin

    Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to

    YüksekCVSS 7,5İstismar yokEPSS %13

    isc · bind3 Tem 2002

  • CVE-2002-0665
    43Planlayın

    Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL.

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    macromedia · jrun11 Tem 2002

  • CVE-2002-0624
    37İzleyin

    Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000,

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    microsoft · msde23 Tem 2002

  • CVE-2002-0641
    33İzleyin

    Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows att

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · msde23 Tem 2002

  • CVE-2002-0642
    42Planlayın

    The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop

    YüksekCVSS 7,2İstismar yokEPSS %48

    microsoft · msde23 Tem 2002

  • CVE-2002-0682
    34İzleyin

    Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL w

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    apache · tomcat23 Tem 2002

  • CVE-2002-0369
    48Planlayın

    Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly execute arbitrary code

    KritikCVSS 10,0İstismar yokEPSS %26

    microsoft · .net framework26 Tem 2002

  • CVE-2002-0409
    28İzleyin

    orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote at

    OrtaCVSS 5,0İstismar yokEPSS %28

    microsoft · .net framework26 Tem 2002

  • CVE-2002-0436
    44Planlayın

    sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    sun · solaris26 Tem 2002

  • CVE-2002-0444
    34İzleyin

    Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incom

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · windows 2000 terminal services26 Tem 2002

  • CVE-2002-0448
    24İzleyin

    Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    xerver · xerver26 Tem 2002

  • CVE-2002-0702
    49Planlayın

    Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUP

    KritikCVSS 10,0Kavram kanıtıEPSS %31

    isc · dhcpd26 Tem 2002

  • CVE-2002-0717
    33İzleyin

    PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with c

    YüksekCVSS 7,5İstismar yokEPSS %11

    php · php26 Tem 2002