Yayın tarihine göre
Eylül 2003: sömürülen ve yeni ciddi CVE kayıtları
9 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
52Planlayın | CVE-2003-0528İstismar yok | Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to executmicrosoft · windows 2000 | Kritik10,0 | — | %41,0 | 17 Eyl 2003 |
52Planlayın | CVE-2003-0715İstismar yok | Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to executmicrosoft · windows 2000 | Kritik10,0 | — | %40,3 | 17 Eyl 2003 |
34İzleyin | CVE-2003-0720Kavram kanıtı | Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type.university of washington · pine | Yüksek7,5 | — | %12,8 | 17 Eyl 2003 |
43Planlayın | CVE-2003-0693İstismar yok | A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code bopenbsd · openssh | Kritik10,0 | — | %11,4 | 22 Eyl 2003 |
67Bu hafta | CVE-2003-0722Silahlaştırılmış | The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solsticsun · solaris | Kritik10,0 | — | %88,7 | 22 Eyl 2003 |
31İzleyin | CVE-2003-0768İstismar yok | Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null chmicrosoft · asp.net | Orta6,8 | — | %12,9 | 22 Eyl 2003 |
33İzleyin | CVE-2003-0770Kavram kanıtı | FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, wikonboard.com · ikonboard | Yüksek7,5 | — | %11,0 | 22 Eyl 2003 |
55Planlayın | CVE-2003-0772Kavram kanıtı | Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary codipswitch · ws ftp server | Yüksek7,5 | — | %84,8 | 22 Eyl 2003 |
60Bu hafta | CVE-2003-0780Kavram kanıtı | Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privilmysql · mysql | Kritik9,0 | — | %78,3 | 22 Eyl 2003 |
- CVE-2003-052852Planlayın
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execut
KritikCVSS 10,0İstismar yokEPSS %41microsoft · windows 200017 Eyl 2003
- CVE-2003-071552Planlayın
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execut
KritikCVSS 10,0İstismar yokEPSS %40microsoft · windows 200017 Eyl 2003
- CVE-2003-072034İzleyin
Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type.
YüksekCVSS 7,5Kavram kanıtıEPSS %12university of washington · pine17 Eyl 2003
- CVE-2003-069343Planlayın
A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code b
KritikCVSS 10,0İstismar yokEPSS %11openbsd · openssh22 Eyl 2003
- CVE-2003-072267Bu hafta
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstic
KritikCVSS 10,0SilahlaştırılmışEPSS %88sun · solaris22 Eyl 2003
- CVE-2003-076831İzleyin
Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null ch
OrtaCVSS 6,8İstismar yokEPSS %12microsoft · asp.net22 Eyl 2003
- CVE-2003-077033İzleyin
FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, w
YüksekCVSS 7,5Kavram kanıtıEPSS %11ikonboard.com · ikonboard22 Eyl 2003
- CVE-2003-077255Planlayın
Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary cod
YüksekCVSS 7,5Kavram kanıtıEPSS %84ipswitch · ws ftp server22 Eyl 2003
- CVE-2003-078060Bu hafta
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privil
KritikCVSS 9,0Kavram kanıtıEPSS %78mysql · mysql22 Eyl 2003