İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2003: sömürülen ve yeni ciddi CVE kayıtları

30 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2003-0469
    43Planlayın

    Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service

    YüksekCVSS 7,5Kavram kanıtıEPSS %44

    microsoft · windows 20007 Ağu 2003

  • CVE-2003-0471
    48Planlayın

    Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a lo

    YüksekCVSS 7,5SilahlaştırılmışEPSS %60

    alt-n · webadmin7 Ağu 2003

  • CVE-2003-0478
    44Planlayın

    Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3)

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    bahamut · ircd7 Ağu 2003

  • CVE-2003-0487
    33İzleyin

    Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbit

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    kerio · kerio mailserver7 Ağu 2003

  • CVE-2003-0500
    45Planlayın

    SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers t

    KritikCVSS 10,0Kavram kanıtıEPSS %18

    proftpd project · proftpd7 Ağu 2003

  • CVE-2003-0505
    24İzleyin

    Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · netmeeting7 Ağu 2003

  • CVE-2003-0506
    23İzleyin

    Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malfo

    OrtaCVSS 5,0İstismar yokEPSS %10

    microsoft · netmeeting7 Ağu 2003

  • CVE-2003-0507
    38İzleyin

    Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and

    YüksekCVSS 7,5İstismar yokEPSS %26

    microsoft · windows 20007 Ağu 2003

  • CVE-2001-1410
    35İzleyin

    Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which c

    OrtaCVSS 5,0Kavram kanıtıEPSS %50

    microsoft · internet explorer18 Ağu 2003

  • CVE-2003-0252
    44Planlayın

    Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a d

    KritikCVSS 9,8İstismar yokEPSS %15

    linux-nfs · nfs-utils18 Ağu 2003

  • CVE-2003-0345
    40Planlayın

    Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possib

    YüksekCVSS 7,5İstismar yokEPSS %34

    microsoft · windows 200018 Ağu 2003

  • CVE-2003-0352
    60Bu hafta

    Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execut

    YüksekCVSS 7,5SilahlaştırılmışEPSS %98

    microsoft · windows 200018 Ağu 2003

  • CVE-2003-0519
    23İzleyin

    Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial of service (freeze)

    OrtaCVSS 5,0İstismar yokEPSS %10

    microsoft · internet explorer18 Ağu 2003

  • CVE-2003-0526
    34İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject

    OrtaCVSS 6,8Kavram kanıtıEPSS %22

    microsoft · isa server18 Ağu 2003

  • CVE-2003-0558
    47Planlayın

    Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %56

    leapware · leapftp18 Ağu 2003

  • CVE-2003-0567
    36İzleyin

    Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence o

    YüksekCVSS 7,8Kavram kanıtıEPSS %16

    cisco · ios18 Ağu 2003

  • CVE-2003-0231
    31İzleyin

    Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long re

    OrtaCVSS 5,0Kavram kanıtıEPSS %36

    microsoft · data engine27 Ağu 2003

  • CVE-2003-0346
    40Planlayın

    Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a M

    YüksekCVSS 7,5İstismar yokEPSS %32

    microsoft · directx27 Ağu 2003

  • CVE-2003-0353
    37İzleyin

    Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arb

    YüksekCVSS 7,5İstismar yokEPSS %21

    microsoft · data access components27 Ağu 2003

  • CVE-2003-0460
    24İzleyin

    The rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly ignore certain control characters that are r

    OrtaCVSS 5,0İstismar yokEPSS %13

    apache · http server27 Ağu 2003

  • CVE-2003-0466
    62Bu hafta

    Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code,

    KritikCVSS 9,8Kavram kanıtıEPSS %78

    redhat · wu ftpd27 Ağu 2003

  • CVE-2003-0530
    39İzleyin

    Buffer overflow in the BR549.DLL ActiveX control for Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to execute arbitrary

    YüksekCVSS 7,5İstismar yokEPSS %30

    microsoft · ie27 Ağu 2003

  • CVE-2003-0531
    38İzleyin

    Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser

    YüksekCVSS 7,5İstismar yokEPSS %26

    microsoft · ie27 Ağu 2003

  • CVE-2003-0532
    37İzleyin

    Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remo

    YüksekCVSS 7,5İstismar yokEPSS %22

    microsoft · ie27 Ağu 2003

  • CVE-2003-0540
    26İzleyin

    The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelo

    OrtaCVSS 5,0Kavram kanıtıEPSS %21

    wietse venema · postfix27 Ağu 2003

  • CVE-2003-0562
    24İzleyin

    Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service (ABEND)

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    novell · netware27 Ağu 2003

  • CVE-2003-0604
    34İzleyin

    Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote a

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · windows media player27 Ağu 2003

  • CVE-2003-0605
    48Planlayın

    The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use

    YüksekCVSS 7,5Kavram kanıtıEPSS %58

    microsoft · windows 200027 Ağu 2003

  • CVE-2003-0619
    23İzleyin

    Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of s

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    linux · linux kernel27 Ağu 2003

  • CVE-2003-0701
    39İzleyin

    Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers

    YüksekCVSS 7,5Kavram kanıtıEPSS %30

    microsoft · ie27 Ağu 2003