İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2003: sömürülen ve yeni ciddi CVE kayıtları

26 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2002-0842
    34İzleyin

    Format string vulnerability in certain third party modifications to mod_dav for logging bad gateway messages (e.g.

    YüksekCVSS 7,5İstismar yokEPSS %14

    oracle · application server3 Mar 2003

  • CVE-2003-0078
    24İzleyin

    ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block ciphe

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    openssl · openssl3 Mar 2003

  • CVE-2003-0095
    44Planlayın

    Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a lo

    KritikCVSS 10,0İstismar yokEPSS %13

    oracle · database server3 Mar 2003

  • CVE-2003-0096
    41Planlayın

    Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code

    KritikCVSS 9,0İstismar yokEPSS %15

    oracle · database server3 Mar 2003

  • CVE-2003-0101
    45Planlayın

    miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    usermin · usermin3 Mar 2003

  • CVE-2002-1337
    62Bu hafta

    Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related t

    KritikCVSS 10,0Kavram kanıtıEPSS %72

    sendmail · sendmail7 Mar 2003

  • CVE-2003-0009
    32İzleyin

    Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary sc

    OrtaCVSS 6,8Kavram kanıtıEPSS %16

    microsoft · windows me7 Mar 2003

  • CVE-2003-0033
    44Planlayın

    Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmente

    KritikCVSS 10,0İstismar yokEPSS %11

    snort · snort7 Mar 2003

  • CVE-2003-0050
    51Planlayın

    parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute

    YüksekCVSS 7,5SilahlaştırılmışEPSS %68

    apple · darwin streaming server7 Mar 2003

  • CVE-2003-0107
    38İzleyin

    Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnp

    YüksekCVSS 7,5Kavram kanıtıEPSS %25

    zlib · zlib7 Mar 2003

  • CVE-2003-0108
    23İzleyin

    isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    lbl · tcpdump7 Mar 2003

  • CVE-2003-0020
    25İzleyin

    Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences int

    OrtaCVSS 5,0İstismar yokEPSS %16

    apache · http server18 Mar 2003

  • CVE-2003-0122
    23İzleyin

    Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via

    OrtaCVSS 5,0İstismar yokEPSS %10

    ibm · lotus domino18 Mar 2003

  • CVE-2003-0125
    23İzleyin

    Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service (reb

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    multitech · routefinder 550 vpn18 Mar 2003

  • CVE-2003-0010
    37İzleyin

    Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating sy

    YüksekCVSS 7,5İstismar yokEPSS %23

    microsoft · windows 200024 Mar 2003

  • CVE-2003-0011
    24İzleyin

    Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 a

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · isa server24 Mar 2003

  • CVE-2003-0128
    25İzleyin

    The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denia

    OrtaCVSS 5,0Kavram kanıtıEPSS %16

    ximian · evolution24 Mar 2003

  • CVE-2003-0129
    23İzleyin

    Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (memory consumption) via a mail mess

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    ximian · evolution24 Mar 2003

  • CVE-2003-0130
    23İzleyin

    The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters,

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    ximian · evolution24 Mar 2003

  • CVE-2003-0150
    49Planlayın

    MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE"

    KritikCVSS 9,0Kavram kanıtıEPSS %44

    oracle · mysql24 Mar 2003

  • CVE-2003-0028
    35İzleyin

    Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived fr

    YüksekCVSS 7,5İstismar yokEPSS %15

    gnu · glibc25 Mar 2003

  • CVE-2002-1542
    24İzleyin

    SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly tr

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    solarwinds · tftp server31 Mar 2003

  • CVE-2002-1549
    33İzleyin

    Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    light httpd · light httpd31 Mar 2003

  • CVE-2002-1560
    43Planlayın

    index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    martin bauer · gbook31 Mar 2003

  • CVE-2003-0085
    66Bu hafta

    Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, al

    KritikCVSS 10,0Kavram kanıtıEPSS %86

    samba · samba31 Mar 2003

  • CVE-2003-0109
    56Planlayın

    Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote

    YüksekCVSS 7,5SilahlaştırılmışEPSS %85

    microsoft · windows 200031 Mar 2003