İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2002: sömürülen ve yeni ciddi CVE kayıtları

36 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2000-1209
    66Bu hafta

    The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE)

    KritikCVSS 10,0SilahlaştırılmışEPSS %87

    microsoft · data engine12 Ağu 2002

  • CVE-2002-0391
    56Planlayın

    Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including di

    KritikCVSS 9,8İstismar yokEPSS %58

    sun · solaris12 Ağu 2002

  • CVE-2002-0419
    31İzleyin

    Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force

    OrtaCVSS 5,0Kavram kanıtıEPSS %37

    microsoft · internet information server12 Ağu 2002

  • CVE-2002-0421
    26İzleyin

    IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing prog

    OrtaCVSS 5,0İstismar yokEPSS %20

    microsoft · windows nt12 Ağu 2002

  • CVE-2002-0422
    40Planlayın

    IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by

    DüşükCVSS 2,6SilahlaştırılmışEPSS %51

    microsoft · internet information services12 Ağu 2002

  • CVE-2002-0461
    27İzleyin

    Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript in a web page that

    OrtaCVSS 5,0Kavram kanıtıEPSS %23

    microsoft · internet explorer12 Ağu 2002

  • CVE-2002-0472
    24İzleyin

    MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remo

    OrtaCVSS 5,0İstismar yokEPSS %11

    microsoft · msn messenger12 Ağu 2002

  • CVE-2002-0481
    23İzleyin

    An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute J

    OrtaCVSS 5,1İstismar yokEPSS %10

    microsoft · outlook12 Ağu 2002

  • CVE-2002-0495
    44Planlayın

    csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup para

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    cgiscript · cssearch professional12 Ağu 2002

  • CVE-2002-0500
    25İzleyin

    Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc pro

    OrtaCVSS 5,0İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2002

  • CVE-2002-0516
    43Planlayın

    SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a co

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    squirrelmail · squirrelmail12 Ağu 2002

  • CVE-2002-0617
    23İzleyin

    The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a d

    OrtaCVSS 5,1İstismar yokEPSS %10

    microsoft · excel12 Ağu 2002

  • CVE-2002-0618
    34İzleyin

    The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · excel12 Ağu 2002

  • CVE-2002-0619
    35İzleyin

    The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Vis

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · office12 Ağu 2002

  • CVE-2002-0644
    33İzleyin

    Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allo

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    microsoft · data engine12 Ağu 2002

  • CVE-2002-0649
    55Planlayın

    Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote atta

    YüksekCVSS 7,5SilahlaştırılmışEPSS %84

    microsoft · data engine12 Ağu 2002

  • CVE-2002-0650
    25İzleyin

    The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "p

    OrtaCVSS 5,0İstismar yokEPSS %18

    microsoft · sql server12 Ağu 2002

  • CVE-2002-0656
    57Planlayın

    Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a larg

    YüksekCVSS 7,5Kavram kanıtıEPSS %89

    openssl · openssl12 Ağu 2002

  • CVE-2002-0659
    31İzleyin

    The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invali

    OrtaCVSS 5,0Kavram kanıtıEPSS %36

    openssl · openssl12 Ağu 2002

  • CVE-2002-0661
    51Planlayın

    Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    apache · http server12 Ağu 2002

  • CVE-2002-0695
    35İzleyin

    Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · data access components12 Ağu 2002

  • CVE-2002-0697
    45Planlayın

    Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP clien

    KritikCVSS 10,0İstismar yokEPSS %17

    microsoft · metadirectory services12 Ağu 2002

  • CVE-2002-0698
    36İzleyin

    Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an

    YüksekCVSS 7,5İstismar yokEPSS %20

    microsoft · exchange server12 Ağu 2002

  • CVE-2002-0719
    33İzleyin

    SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to exe

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · content management server12 Ağu 2002

  • CVE-2002-0729
    23İzleyin

    Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator

    OrtaCVSS 5,0İstismar yokEPSS %10

    microsoft · sql server12 Ağu 2002

  • CVE-2002-0736
    49Planlayın

    Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and ac

    KritikCVSS 10,0İstismar yokEPSS %31

    microsoft · backoffice12 Ağu 2002

  • CVE-2002-0748
    23İzleyin

    LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two n

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    national instruments · labview12 Ağu 2002

  • CVE-2002-0749
    33İzleyin

    CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    cgiscript.net · csmailto12 Ağu 2002

  • CVE-2002-0764
    41Planlayın

    Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php tha

    YüksekCVSS 7,5Kavram kanıtıEPSS %38

    phorum · phorum12 Ağu 2002

  • CVE-2002-0777
    43Planlayın

    Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind D

    KritikCVSS 10,0İstismar yokEPSS %10

    ipswitch · imail12 Ağu 2002

  • CVE-2002-0799
    34İzleyin

    Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    youngzsoft · cmailserver12 Ağu 2002

  • CVE-2002-0814
    34İzleyin

    Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    vmware · gsx server12 Ağu 2002

  • CVE-2002-0823
    38İzleyin

    Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX cont

    YüksekCVSS 7,5Kavram kanıtıEPSS %26

    microsoft · windows help12 Ağu 2002

  • CVE-2002-0826
    34İzleyin

    Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command.

    YüksekCVSS 7,5İstismar yokEPSS %12

    progress · ws ftp server12 Ağu 2002

  • CVE-2002-0845
    34İzleyin

    Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chun

    YüksekCVSS 7,5İstismar yokEPSS %13

    iplanet · iplanet web server12 Ağu 2002

  • CVE-2002-1444
    14İzleyin

    The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with a

    DüşükCVSS 2,6Kavram kanıtıEPSS %13

    google · toolbar15 Ağu 2002