İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2002: sömürülen ve yeni ciddi CVE kayıtları

28 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2002-0696
    34İzleyin

    Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual F

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · visual foxpro4 Eki 2002

  • CVE-2002-0862
    32İzleyin

    The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft produc

    OrtaCVSS 6,8Kavram kanıtıEPSS %15

    microsoft · windows 20004 Eki 2002

  • CVE-2002-0936
    28İzleyin

    The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP

    OrtaCVSS 5,0Kavram kanıtıEPSS %27

    apache · tomcat4 Eki 2002

  • CVE-2002-0965
    51Planlayın

    Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrar

    YüksekCVSS 7,5SilahlaştırılmışEPSS %69

    oracle · oracle9i4 Eki 2002

  • CVE-2002-1048
    34İzleyin

    HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP reque

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    hp · jetdirect4 Eki 2002

  • CVE-2002-1059
    48Planlayın

    Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via

    YüksekCVSS 7,5SilahlaştırılmışEPSS %60

    van dyke technologies · securecrt4 Eki 2002

  • CVE-2002-1076
    34İzleyin

    Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    ipswitch · imail4 Eki 2002

  • CVE-2002-1077
    23İzleyin

    IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request witho

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    ipswitch · imail4 Eki 2002

  • CVE-2002-1131
    38İzleyin

    Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1)

    YüksekCVSS 7,5Kavram kanıtıEPSS %25

    squirrelmail · squirrelmail4 Eki 2002

  • CVE-2002-0370
    43Planlayın

    Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code v

    YüksekCVSS 7,5İstismar yokEPSS %43

    allume systems division · stuffit expander10 Eki 2002

  • CVE-2002-0692
    35İzleyin

    Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers t

    YüksekCVSS 7,5İstismar yokEPSS %18

    microsoft · frontpage server extensions10 Eki 2002

  • CVE-2002-0693
    39İzleyin

    Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0

    YüksekCVSS 7,5Kavram kanıtıEPSS %31

    microsoft · windows 200010 Eki 2002

  • CVE-2002-0694
    34İzleyin

    The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000,

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · windows 200010 Eki 2002

  • CVE-2002-0840
    56Planlayın

    Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalNam

    OrtaCVSS 6,8Kavram kanıtıEPSS %95

    apache · http server11 Eki 2002

  • CVE-2002-0843
    36İzleyin

    Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a maliciou

    YüksekCVSS 7,5İstismar yokEPSS %21

    apache · http server11 Eki 2002

  • CVE-2002-0863
    27İzleyin

    Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext sessi

    OrtaCVSS 5,0İstismar yokEPSS %21

    microsoft · .net windows server11 Eki 2002

  • CVE-2002-0864
    25İzleyin

    The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote

    OrtaCVSS 5,0İstismar yokEPSS %16

    microsoft · .net windows server11 Eki 2002

  • CVE-2002-0865
    36İzleyin

    A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.o

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · virtual machine11 Eki 2002

  • CVE-2002-0866
    42Planlayın

    Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and

    YüksekCVSS 7,5Kavram kanıtıEPSS %41

    microsoft · virtual machine11 Eki 2002

  • CVE-2002-0867
    28İzleyin

    Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet E

    OrtaCVSS 5,0İstismar yokEPSS %27

    microsoft · virtual machine11 Eki 2002

  • CVE-2002-1140
    24İzleyin

    The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote atta

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · services11 Eki 2002

  • CVE-2002-1141
    24İzleyin

    An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 200

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · services11 Eki 2002

  • CVE-2002-1148
    26İzleyin

    The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read sou

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    apache · tomcat11 Eki 2002

  • CVE-2002-1156
    24İzleyin

    Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI ena

    OrtaCVSS 5,0İstismar yokEPSS %14

    apache · http server11 Eki 2002

  • CVE-2001-1451
    28İzleyin

    Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, all

    OrtaCVSS 5,0İstismar yokEPSS %27

    microsoft · windows 200022 Eki 2002

  • CVE-2002-1179
    37İzleyin

    Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    microsoft · outlook express28 Eki 2002

  • CVE-2002-1214
    45Planlayın

    Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and pos

    YüksekCVSS 7,5SilahlaştırılmışEPSS %49

    microsoft · windows 200028 Eki 2002

  • CVE-2002-1217
    45Planlayın

    Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute ar

    YüksekCVSS 7,5Kavram kanıtıEPSS %49

    microsoft · internet explorer28 Eki 2002