İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2003: sömürülen ve yeni ciddi CVE kayıtları

19 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2002-1456
    33İzleyin

    Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    khaled mardam-bey · mirc9 Haz 2003

  • CVE-2002-1564
    23İzleyin

    Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains scr

    OrtaCVSS 5,0İstismar yokEPSS %11

    microsoft · internet explorer9 Haz 2003

  • CVE-2003-0189
    25İzleyin

    The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt f

    OrtaCVSS 5,0İstismar yokEPSS %15

    apache · http server9 Haz 2003

  • CVE-2003-0223
    32İzleyin

    Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0,

    OrtaCVSS 6,8İstismar yokEPSS %17

    microsoft · internet information server9 Haz 2003

  • CVE-2003-0224
    45Planlayın

    Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web pa

    KritikCVSS 10,0İstismar yokEPSS %18

    microsoft · internet information services9 Haz 2003

  • CVE-2003-0225
    32İzleyin

    The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when construct

    OrtaCVSS 5,0İstismar yokEPSS %38

    microsoft · internet information server9 Haz 2003

  • CVE-2003-0226
    33İzleyin

    Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request wit

    OrtaCVSS 5,0Kavram kanıtıEPSS %43

    microsoft · internet information services9 Haz 2003

  • CVE-2003-0227
    30İzleyin

    The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Wind

    OrtaCVSS 5,0Kavram kanıtıEPSS %34

    microsoft · windows 20009 Haz 2003

  • CVE-2003-0240
    49Planlayın

    The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and m

    KritikCVSS 10,0Kavram kanıtıEPSS %29

    axis · 2100 network camera9 Haz 2003

  • CVE-2003-0245
    39İzleyin

    Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attac

    OrtaCVSS 5,0Kavram kanıtıEPSS %63

    apache · http server9 Haz 2003

  • CVE-2003-0309
    45Planlayın

    Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web d

    YüksekCVSS 7,5Kavram kanıtıEPSS %49

    microsoft · internet explorer9 Haz 2003

  • CVE-2003-0195
    23İzleyin

    CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    slackware · slackware linux16 Haz 2003

  • CVE-2003-0270
    40Planlayın

    The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protect

    YüksekCVSS 7,6SilahlaştırılmışEPSS %10

    apple · 802.11n16 Haz 2003

  • CVE-2003-0276
    23İzleyin

    Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GET r

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    pi3 · pi3web16 Haz 2003

  • CVE-2003-0280
    44Planlayın

    Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    youngzsoft · cmailserver16 Haz 2003

  • CVE-2003-0282
    17İzleyin

    Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two .

    DüşükCVSS 2,6Kavram kanıtıEPSS %21

    info-zip · unzip16 Haz 2003

  • CVE-2003-0344
    54Planlayın

    Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters

    YüksekCVSS 7,5SilahlaştırılmışEPSS %81

    microsoft · ie16 Haz 2003

  • CVE-2003-0407
    45Planlayın

    Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string.

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    gnome · batalla naval30 Haz 2003

  • CVE-2003-0411
    38İzleyin

    Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase "

    YüksekCVSS 7,5Kavram kanıtıEPSS %25

    oracle · sun one application server30 Haz 2003