İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2002: sömürülen ve yeni ciddi CVE kayıtları

24 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2002-1604
    34İzleyin

    Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environmen

    YüksekCVSS 7,5İstismar yokEPSS %14

    hp · hp-ux2 Eyl 2002

  • CVE-2002-1605
    34İzleyin

    Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environm

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    hp · hp-ux2 Eyl 2002

  • CVE-2002-0654
    38İzleyin

    Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a reques

    OrtaCVSS 5,0Kavram kanıtıEPSS %58

    apache · http server5 Eyl 2002

  • CVE-2002-0679
    47Planlayın

    Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitr

    KritikCVSS 10,0İstismar yokEPSS %23

    caldera · unixware5 Eyl 2002

  • CVE-2002-0721
    54Planlayın

    Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, w

    KritikCVSS 10,0Kavram kanıtıEPSS %46

    microsoft · data engine5 Eyl 2002

  • CVE-2002-0857
    34İzleyin

    Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to

    YüksekCVSS 7,5İstismar yokEPSS %13

    oracle · database server5 Eyl 2002

  • CVE-2002-0859
    38İzleyin

    Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary c

    YüksekCVSS 7,5Kavram kanıtıEPSS %26

    microsoft · jet5 Eyl 2002

  • CVE-2002-0647
    37İzleyin

    Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allow

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    microsoft · internet explorer24 Eyl 2002

  • CVE-2002-0648
    35İzleyin

    The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitra

    OrtaCVSS 5,0Kavram kanıtıEPSS %48

    microsoft · internet explorer24 Eyl 2002

  • CVE-2002-0691
    34İzleyin

    Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a l

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer24 Eyl 2002

  • CVE-2002-0722
    34İzleyin

    Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to misrepresent the source of a file in the File Download dialogue bo

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer24 Eyl 2002

  • CVE-2002-0723
    35İzleyin

    Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attacker

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    microsoft · internet explorer24 Eyl 2002

  • CVE-2002-0724
    38İzleyin

    Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a den

    YüksekCVSS 7,5Kavram kanıtıEPSS %25

    microsoft · windows 200024 Eyl 2002

  • CVE-2002-0726
    35İzleyin

    Buffer overflow in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5İstismar yokEPSS %17

    microsoft · tsac activex control24 Eyl 2002

  • CVE-2002-0727
    36İzleyin

    The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, whi

    YüksekCVSS 7,5İstismar yokEPSS %18

    microsoft · office web components24 Eyl 2002

  • CVE-2002-0860
    26İzleyin

    The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbi

    OrtaCVSS 5,0İstismar yokEPSS %18

    microsoft · office web components24 Eyl 2002

  • CVE-2002-0861
    35İzleyin

    Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · office web components24 Eyl 2002

  • CVE-2002-0974
    24İzleyin

    Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses upldd

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    microsoft · windows xp24 Eyl 2002

  • CVE-2002-0975
    34İzleyin

    Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitra

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · directx files viewer control24 Eyl 2002

  • CVE-2002-0976
    29İzleyin

    Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet

    OrtaCVSS 6,4Kavram kanıtıEPSS %14

    microsoft · internet explorer24 Eyl 2002

  • CVE-2002-0977
    33İzleyin

    Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to execute arbitrary code via a

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · file transfer manager24 Eyl 2002

  • CVE-2002-0980
    38İzleyin

    The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows

    YüksekCVSS 7,5Kavram kanıtıEPSS %26

    microsoft · internet explorer24 Eyl 2002

  • CVE-2002-1120
    50Planlayın

    Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %66

    savant · savant web server24 Eyl 2002

  • CVE-2002-1123
    53Planlayın

    Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attacker

    YüksekCVSS 7,5SilahlaştırılmışEPSS %77

    microsoft · data engine24 Eyl 2002