İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2002: sömürülen ve yeni ciddi CVE kayıtları

78 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2002-1183
    36İzleyin

    Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to e

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    microsoft · windows 9811 Ara 2002

  • CVE-2002-1185
    26İzleyin

    Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers t

    OrtaCVSS 5,0İstismar yokEPSS %21

    microsoft · ie11 Ara 2002

  • CVE-2002-1186
    26İzleyin

    Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remo

    OrtaCVSS 5,0İstismar yokEPSS %19

    microsoft · ie11 Ara 2002

  • CVE-2002-1187
    32İzleyin

    Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the loca

    OrtaCVSS 6,8Kavram kanıtıEPSS %15

    microsoft · internet explorer11 Ara 2002

  • CVE-2002-1188
    29İzleyin

    Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user infor

    OrtaCVSS 6,4İstismar yokEPSS %12

    microsoft · internet explorer11 Ara 2002

  • CVE-2002-1254
    46Planlayın

    Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system o

    YüksekCVSS 7,5Kavram kanıtıEPSS %53

    microsoft · ie11 Ara 2002

  • CVE-2002-1317
    37İzleyin

    Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of

    YüksekCVSS 7,5Kavram kanıtıEPSS %24

    xfree86 project · x11r611 Ara 2002

  • CVE-2002-1318
    56Planlayın

    Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an

    KritikCVSS 10,0SilahlaştırılmışEPSS %51

    samba · samba11 Ara 2002

  • CVE-2002-1255
    24İzleyin

    Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid h

    OrtaCVSS 5,0İstismar yokEPSS %14

    microsoft · outlook18 Ara 2002

  • CVE-2002-1262
    34İzleyin

    Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · internet explorer18 Ara 2002

  • CVE-2002-1338
    27İzleyin

    The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist,

    OrtaCVSS 5,0İstismar yokEPSS %23

    microsoft · office web components18 Ara 2002

  • CVE-2002-1339
    24İzleyin

    The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to

    OrtaCVSS 5,0İstismar yokEPSS %11

    microsoft · office web components18 Ara 2002

  • CVE-2002-1340
    24İzleyin

    The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the

    OrtaCVSS 5,0İstismar yokEPSS %11

    microsoft · office web components18 Ara 2002

  • CVE-2002-1643
    52Planlayın

    Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a

    YüksekCVSS 7,5SilahlaştırılmışEPSS %74

    realnetworks · helix universal server19 Ara 2002

  • CVE-2002-1257
    45Planlayın

    Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java appl

    KritikCVSS 10,0İstismar yokEPSS %15

    microsoft · windows 200023 Ara 2002

  • CVE-2002-1258
    25İzleyin

    Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other application

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · windows 200023 Ara 2002

  • CVE-2002-1260
    35İzleyin

    The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · windows 200023 Ara 2002

  • CVE-2002-1325
    24İzleyin

    Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet tha

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · windows 200023 Ara 2002

  • CVE-2002-1357
    43Planlayın

    Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote a

    KritikCVSS 10,0İstismar yokEPSS %9

    cisco · ios23 Ara 2002

  • CVE-2002-1359
    64Bu hafta

    Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial o

    KritikCVSS 10,0SilahlaştırılmışEPSS %80

    cisco · ios23 Ara 2002

  • CVE-2002-1361
    44Planlayın

    overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary c

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    sun · cobalt raq 423 Ara 2002

  • CVE-2002-1374
    36İzleyin

    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    oracle · mysql23 Ara 2002

  • CVE-2002-1375
    37İzleyin

    The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long resp

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    oracle · mysql23 Ara 2002

  • CVE-2002-1327
    37İzleyin

    Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA

    YüksekCVSS 7,5İstismar yokEPSS %23

    microsoft · windows xp26 Ara 2002

  • CVE-2002-1368
    35İzleyin

    Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute a

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    easy software products · cups26 Ara 2002

  • CVE-2002-1623
    35İzleyin

    The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initia

    OrtaCVSS 5,0İstismar yokEPSS %48

    checkpoint · vpn-1 firewall-131 Ara 2002

  • CVE-2002-1634
    25İzleyin

    Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield

    OrtaCVSS 5,0Kavram kanıtıEPSS %16

    novell · netware31 Ara 2002

  • CVE-2002-1660
    33İzleyin

    calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command paramet

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    jelsoft · vbulletin31 Ara 2002

  • CVE-2002-1671
    24İzleyin

    Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the getData method of th

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · internet explorer31 Ara 2002

  • CVE-2002-1688
    25İzleyin

    The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other user

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    microsoft · internet explorer31 Ara 2002

  • CVE-2002-1694
    24İzleyin

    Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow rem

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · internet information server31 Ara 2002

  • CVE-2002-1695
    24İzleyin

    Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to m

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · internet information server31 Ara 2002

  • CVE-2002-1698
    25İzleyin

    Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via a long F

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · msn messenger31 Ara 2002

  • CVE-2002-1700
    24İzleyin

    Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbi

    OrtaCVSS 4,3Kavram kanıtıEPSS %24

    macromedia · coldfusion31 Ara 2002

  • CVE-2002-1705
    25İzleyin

    Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading Style Sheet (CSS) w

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    microsoft · internet explorer31 Ara 2002

  • CVE-2002-1712
    28İzleyin

    Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets

    OrtaCVSS 5,0Kavram kanıtıEPSS %25

    microsoft · windows 200031 Ara 2002

  • CVE-2002-1714
    26İzleyin

    Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" w

    OrtaCVSS 5,0Kavram kanıtıEPSS %19

    microsoft · ie31 Ara 2002

  • CVE-2002-1716
    24İzleyin

    The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using th

    OrtaCVSS 5,0İstismar yokEPSS %14

    microsoft · office31 Ara 2002

  • CVE-2002-1717
    25İzleyin

    Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.c

    OrtaCVSS 5,0İstismar yokEPSS %16

    microsoft · internet information services31 Ara 2002

  • CVE-2002-1718
    24İzleyin

    Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file,

    OrtaCVSS 5,0İstismar yokEPSS %14

    microsoft · internet information services31 Ara 2002

  • CVE-2002-1744
    40Planlayın

    Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existen

    OrtaCVSS 5,0Kavram kanıtıEPSS %65

    microsoft · internet information services31 Ara 2002

  • CVE-2002-1745
    36İzleyin

    Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with exten

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · internet information services31 Ara 2002

  • CVE-2002-1753
    40Planlayın

    csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup paramete

    YüksekCVSS 7,5İstismar yokEPSS %32

    cgiscript · csnews professional31 Ara 2002

  • CVE-2002-1762
    25İzleyin

    Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans i

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · baseline security analyzer31 Ara 2002

  • CVE-2002-1769
    34İzleyin

    Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remo

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · site server31 Ara 2002

  • CVE-2002-1783
    25İzleyin

    CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for

    OrtaCVSS 5,0İstismar yokEPSS %16

    php · php31 Ara 2002

  • CVE-2002-1790
    30İzleyin

    The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send

    OrtaCVSS 5,0Kavram kanıtıEPSS %33

    microsoft · exchange server31 Ara 2002

  • CVE-2002-1795
    22İzleyin

    Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · tsac activex control31 Ara 2002

  • CVE-2002-1809
    35İzleyin

    The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote a

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    oracle · mysql31 Ara 2002

  • CVE-2002-1823
    33İzleyin

    Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary code via a long HTTP re

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    lonerunner · zeroo http server31 Ara 2002

  • CVE-2002-1831
    27İzleyin

    Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that cont

    OrtaCVSS 5,0Kavram kanıtıEPSS %22

    microsoft · msn messenger31 Ara 2002

  • CVE-2002-1847
    40Planlayın

    Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands

    YüksekCVSS 7,5Kavram kanıtıEPSS %33

    microsoft · windows media player31 Ara 2002

  • CVE-2002-1850
    35İzleyin

    mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumpti

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    apache · http server31 Ara 2002

  • CVE-2002-1864
    40Planlayın

    Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".."

    OrtaCVSS 5,0SilahlaştırılmışEPSS %17

    sws · sws simple web server31 Ara 2002

  • CVE-2002-1873
    24İzleyin

    Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · exchange server31 Ara 2002

  • CVE-2002-1908
    24İzleyin

    Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · internet information services31 Ara 2002

  • CVE-2002-1918
    45Planlayın

    Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with

    KritikCVSS 10,0İstismar yokEPSS %16

    microsoft · data access components31 Ara 2002

  • CVE-2002-1932
    34İzleyin

    Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)"

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · windows 200031 Ara 2002

  • CVE-2002-1954
    21İzleyin

    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML

    OrtaCVSS 4,3Kavram kanıtıEPSS %11

    php · php31 Ara 2002

  • CVE-2002-1973
    42Planlayın

    Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static lib

    YüksekCVSS 7,5Kavram kanıtıEPSS %40

    microsoft · foundation class library31 Ara 2002

  • CVE-2002-1993
    44Planlayın

    webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the followup parameter.

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    affordable web space design · affordable web space design webbbs31 Ara 2002

  • CVE-2002-2006
    29İzleyin

    The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and

    OrtaCVSS 5,0Kavram kanıtıEPSS %30

    apache · tomcat31 Ara 2002

  • CVE-2002-2007
    32İzleyin

    The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory

    OrtaCVSS 5,0Kavram kanıtıEPSS %41

    apache · tomcat31 Ara 2002

  • CVE-2002-2029
    37İzleyin

    PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and pos

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    apache · http server31 Ara 2002

  • CVE-2002-2031
    26İzleyin

    Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files

    OrtaCVSS 5,0Kavram kanıtıEPSS %20

    microsoft · internet explorer31 Ara 2002

  • CVE-2002-2062
    21İzleyin

    Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with "Enable folder view

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    microsoft · internet explorer31 Ara 2002

  • CVE-2002-2073
    21İzleyin

    Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to

    OrtaCVSS 4,3Kavram kanıtıEPSS %12

    microsoft · site server31 Ara 2002

  • CVE-2002-2077
    25İzleyin

    The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, which may allow remote

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · windows 200031 Ara 2002

  • CVE-2002-2081
    25İzleyin

    cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file w

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · site server31 Ara 2002

  • CVE-2002-2100
    23İzleyin

    Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that

    OrtaCVSS 5,0İstismar yokEPSS %11

    microsoft · outlook31 Ara 2002

  • CVE-2002-2101
    33İzleyin

    Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "ja

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · outlook31 Ara 2002

  • CVE-2002-2117
    24İzleyin

    Microsoft Windows XP allows remote attackers to cause a denial of service (CPU consumption) by flooding UDP port 500 (ISAKMP).

    OrtaCVSS 5,0İstismar yokEPSS %11

    microsoft · windows xp31 Ara 2002

  • CVE-2002-2164
    27İzleyin

    Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long <A HR

    OrtaCVSS 5,0Kavram kanıtıEPSS %21

    microsoft · outlook express31 Ara 2002

  • CVE-2002-2226
    49Planlayın

    Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %63

    tftpd32 · tftpd3231 Ara 2002

  • CVE-2002-2268
    53Planlayın

    Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.

    KritikCVSS 9,4SilahlaştırılmışEPSS %51

    netdave · webster http server31 Ara 2002

  • CVE-2002-2281
    43Planlayın

    Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java comma

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    symantec · java31 Ara 2002

  • CVE-2002-2328
    33İzleyin

    Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service

    YüksekCVSS 7,1İstismar yokEPSS %16

    microsoft · windows 200031 Ara 2002

  • CVE-2002-2380
    28İzleyin

    NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undoc

    OrtaCVSS 6,4İstismar yokEPSS %10

    microsoft · network firmware31 Ara 2002