Yayın tarihine göre
Kasım 2002: sömürülen ve yeni ciddi CVE kayıtları
19 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
27İzleyin | CVE-2002-0386Kavram kanıtı | The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of servioracle · application server | Orta5,0 | — | %21,9 | 4 Kas 2002 |
33İzleyin | CVE-2002-1157İstismar yok | Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled,mod ssl · mod ssl | Yüksek7,5 | — | %11,1 | 4 Kas 2002 |
24İzleyin | CVE-2002-1209Kavram kanıtı | Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files visolarwinds · tftp server | Orta5,0 | — | %12,9 | 4 Kas 2002 |
45Planlayın | CVE-2002-1235İstismar yok | The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and eamit · kerberos 5 | Kritik10,0 | — | %15,1 | 4 Kas 2002 |
37İzleyin | CVE-2002-0869İstismar yok | Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attmicrosoft · internet information server | Yüksek7,5 | — | %23,6 | 12 Kas 2002 |
39İzleyin | CVE-2002-1181İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 thromicrosoft · internet information server | Orta6,8 | — | %39,4 | 12 Kas 2002 |
31İzleyin | CVE-2002-1182İstismar yok | IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a large amount of memomicrosoft · internet information services | Orta5,0 | — | %36,0 | 12 Kas 2002 |
53Planlayın | CVE-2002-1142Silahlaştırılmış | Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Intermicrosoft · data access components | Yüksek7,5 | — | %76,0 | 29 Kas 2002 |
34İzleyin | CVE-2002-1219İstismar yok | Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitraisc · bind | Yüksek7,5 | — | %12,3 | 29 Kas 2002 |
36İzleyin | CVE-2002-1286İstismar yok | The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different microsoft · java virtual machine | Yüksek7,5 | — | %20,5 | 29 Kas 2002 |
26İzleyin | CVE-2002-1287İstismar yok | Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial ofmicrosoft · java virtual machine | Orta5,0 | — | %20,1 | 29 Kas 2002 |
25İzleyin | CVE-2002-1288İstismar yok | The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet microsoft · java virtual machine | Orta5,0 | — | %17,4 | 29 Kas 2002 |
35İzleyin | CVE-2002-1289İstismar yok | The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial omicrosoft · java virtual machine | Yüksek7,5 | — | %16,3 | 29 Kas 2002 |
29İzleyin | CVE-2002-1290İstismar yok | The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard vimicrosoft · java virtual machine | Orta6,4 | — | %14,3 | 29 Kas 2002 |
26İzleyin | CVE-2002-1291İstismar yok | The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares vimicrosoft · java virtual machine | Orta5,0 | — | %18,3 | 29 Kas 2002 |
37İzleyin | CVE-2002-1292İstismar yok | The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Stanmicrosoft · java virtual machine | Yüksek7,5 | — | %22,4 | 29 Kas 2002 |
35İzleyin | CVE-2002-1293İstismar yok | The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loadermicrosoft · java virtual machine | Yüksek7,5 | — | %15,4 | 29 Kas 2002 |
34İzleyin | CVE-2002-1294İstismar yok | The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javascript, which allows microsoft · java virtual machine | Yüksek7,5 | — | %14,7 | 29 Kas 2002 |
35İzleyin | CVE-2002-1295İstismar yok | The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly cmicrosoft · java virtual machine | Yüksek7,5 | — | %15,4 | 29 Kas 2002 |
- CVE-2002-038627İzleyin
The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of servi
OrtaCVSS 5,0Kavram kanıtıEPSS %21oracle · application server4 Kas 2002
- CVE-2002-115733İzleyin
Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled,
YüksekCVSS 7,5İstismar yokEPSS %11mod ssl · mod ssl4 Kas 2002
- CVE-2002-120924İzleyin
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files vi
OrtaCVSS 5,0Kavram kanıtıEPSS %12solarwinds · tftp server4 Kas 2002
- CVE-2002-123545Planlayın
The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and ea
KritikCVSS 10,0İstismar yokEPSS %15mit · kerberos 54 Kas 2002
- CVE-2002-086937İzleyin
Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote att
YüksekCVSS 7,5İstismar yokEPSS %23microsoft · internet information server12 Kas 2002
- CVE-2002-118139İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 thro
OrtaCVSS 6,8İstismar yokEPSS %39microsoft · internet information server12 Kas 2002
- CVE-2002-118231İzleyin
IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a large amount of memo
OrtaCVSS 5,0İstismar yokEPSS %36microsoft · internet information services12 Kas 2002
- CVE-2002-114253Planlayın
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Inter
YüksekCVSS 7,5SilahlaştırılmışEPSS %76microsoft · data access components29 Kas 2002
- CVE-2002-121934İzleyin
Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitra
YüksekCVSS 7,5İstismar yokEPSS %12isc · bind29 Kas 2002
- CVE-2002-128636İzleyin
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different
YüksekCVSS 7,5İstismar yokEPSS %20microsoft · java virtual machine29 Kas 2002
- CVE-2002-128726İzleyin
Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of
OrtaCVSS 5,0İstismar yokEPSS %20microsoft · java virtual machine29 Kas 2002
- CVE-2002-128825İzleyin
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet
OrtaCVSS 5,0İstismar yokEPSS %17microsoft · java virtual machine29 Kas 2002
- CVE-2002-128935İzleyin
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial o
YüksekCVSS 7,5İstismar yokEPSS %16microsoft · java virtual machine29 Kas 2002
- CVE-2002-129029İzleyin
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard vi
OrtaCVSS 6,4İstismar yokEPSS %14microsoft · java virtual machine29 Kas 2002
- CVE-2002-129126İzleyin
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares vi
OrtaCVSS 5,0İstismar yokEPSS %18microsoft · java virtual machine29 Kas 2002
- CVE-2002-129237İzleyin
The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Stan
YüksekCVSS 7,5İstismar yokEPSS %22microsoft · java virtual machine29 Kas 2002
- CVE-2002-129335İzleyin
The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader
YüksekCVSS 7,5İstismar yokEPSS %15microsoft · java virtual machine29 Kas 2002
- CVE-2002-129434İzleyin
The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javascript, which allows
YüksekCVSS 7,5İstismar yokEPSS %14microsoft · java virtual machine29 Kas 2002
- CVE-2002-129535İzleyin
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly c
YüksekCVSS 7,5İstismar yokEPSS %15microsoft · java virtual machine29 Kas 2002