Yayın tarihine göre
Mayıs 2003: sömürülen ve yeni ciddi CVE kayıtları
17 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
25İzleyin | CVE-2003-0110İstismar yok | The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Servemicrosoft · isa server | Orta5,0 | — | %17,9 | 5 May 2003 |
41Planlayın | CVE-2003-0111Kavram kanıtı | The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allomicrosoft · virtual machine | Yüksek7,5 | — | %35,8 | 5 May 2003 |
47Planlayın | CVE-2003-0196İstismar yok | Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discosamba · samba | Kritik10,0 | — | %22,7 | 5 May 2003 |
65Bu hafta | CVE-2003-0201Silahlaştırılmış | Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG samba · samba | Kritik10,0 | — | %84,6 | 5 May 2003 |
52Planlayın | CVE-2003-0209Kavram kanıtı | Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code vsmoothwall · smoothwall | Kritik10,0 | — | %38,6 | 5 May 2003 |
42Planlayın | CVE-2003-0113Kavram kanıtı | Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTPmicrosoft · ie | Yüksek7,5 | — | %39,3 | 12 May 2003 |
24İzleyin | CVE-2003-0114İstismar yok | The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically upload files from the locmicrosoft · ie | Orta5,0 | — | %14,6 | 12 May 2003 |
33İzleyin | CVE-2003-0115İstismar yok | Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party rendering, which could amicrosoft · ie | Yüksek7,5 | — | %11,5 | 12 May 2003 |
28İzleyin | CVE-2003-0116İstismar yok | Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which allmicrosoft · ie | Orta5,0 | — | %25,2 | 12 May 2003 |
43Planlayın | CVE-2003-0190Silahlaştırılmış | OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, whichopenbsd · openssh · CWE-203 | Orta5,0 | — | %76,7 | 12 May 2003 |
51Planlayın | CVE-2003-0213Silahlaştırılmış | ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which poptop · pptp server | Yüksek7,5 | — | %70,9 | 12 May 2003 |
51Planlayın | CVE-2003-0220Silahlaştırılmış | Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to ekerio · personal firewall 2 | Yüksek7,5 | — | %69,0 | 12 May 2003 |
39İzleyin | CVE-2003-0222İstismar yok | Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitraryoracle · database server · CWE-119 | Kritik9,0 | — | %11,0 | 12 May 2003 |
36İzleyin | CVE-2003-0233İstismar yok | Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the Lmicrosoft · ie | Yüksek7,5 | — | %18,8 | 12 May 2003 |
44Planlayın | CVE-2003-0228Kavram kanıtı | Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to emicrosoft · windows media player | Yüksek7,5 | — | %46,3 | 27 May 2003 |
33İzleyin | CVE-2003-0263Kavram kanıtı | Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitrary code via long (1floosietek · ftgatepro | Yüksek7,5 | — | %11,5 | 27 May 2003 |
52Planlayın | CVE-2003-0264Silahlaştırılmış | Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe,seattle lab software · slmail | Yüksek7,5 | — | %71,7 | 27 May 2003 |
- CVE-2003-011025İzleyin
The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Serve
OrtaCVSS 5,0İstismar yokEPSS %17microsoft · isa server5 May 2003
- CVE-2003-011141Planlayın
The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allo
YüksekCVSS 7,5Kavram kanıtıEPSS %35microsoft · virtual machine5 May 2003
- CVE-2003-019647Planlayın
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as disco
KritikCVSS 10,0İstismar yokEPSS %22samba · samba5 May 2003
- CVE-2003-020165Bu hafta
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG
KritikCVSS 10,0SilahlaştırılmışEPSS %84samba · samba5 May 2003
- CVE-2003-020952Planlayın
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code v
KritikCVSS 10,0Kavram kanıtıEPSS %38smoothwall · smoothwall5 May 2003
- CVE-2003-011342Planlayın
Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP
YüksekCVSS 7,5Kavram kanıtıEPSS %39microsoft · ie12 May 2003
- CVE-2003-011424İzleyin
The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically upload files from the loc
OrtaCVSS 5,0İstismar yokEPSS %14microsoft · ie12 May 2003
- CVE-2003-011533İzleyin
Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party rendering, which could a
YüksekCVSS 7,5İstismar yokEPSS %11microsoft · ie12 May 2003
- CVE-2003-011628İzleyin
Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which all
OrtaCVSS 5,0İstismar yokEPSS %25microsoft · ie12 May 2003
- CVE-2003-019043Planlayın
OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which
OrtaCVSS 5,0SilahlaştırılmışEPSS %76openbsd · openssh12 May 2003
- CVE-2003-021351Planlayın
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which
YüksekCVSS 7,5SilahlaştırılmışEPSS %70poptop · pptp server12 May 2003
- CVE-2003-022051Planlayın
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to e
YüksekCVSS 7,5SilahlaştırılmışEPSS %69kerio · personal firewall 212 May 2003
- CVE-2003-022239İzleyin
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary
KritikCVSS 9,0İstismar yokEPSS %11oracle · database server12 May 2003
- CVE-2003-023336İzleyin
Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the L
YüksekCVSS 7,5İstismar yokEPSS %18microsoft · ie12 May 2003
- CVE-2003-022844Planlayın
Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to e
YüksekCVSS 7,5Kavram kanıtıEPSS %46microsoft · windows media player27 May 2003
- CVE-2003-026333İzleyin
Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitrary code via long (1
YüksekCVSS 7,5Kavram kanıtıEPSS %11floosietek · ftgatepro27 May 2003
- CVE-2003-026452Planlayın
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe,
YüksekCVSS 7,5SilahlaştırılmışEPSS %71seattle lab software · slmail27 May 2003