İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2003: sömürülen ve yeni ciddi CVE kayıtları

26 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2003-0542
    37İzleyin

    Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration

    YüksekCVSS 7,2İstismar yokEPSS %30

    apache · http server3 Kas 2003

  • CVE-2003-0789
    44Planlayın

    mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send t

    KritikCVSS 10,0İstismar yokEPSS %12

    apache · http server3 Kas 2003

  • CVE-2003-0899
    46Planlayın

    Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contai

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    acme · thttpd3 Kas 2003

  • CVE-2003-1192
    61Bu hafta

    Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request.

    KritikCVSS 10,0SilahlaştırılmışEPSS %69

    truenorth software · ia webmail server3 Kas 2003

  • CVE-2003-1141
    50Planlayın

    Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %68

    network instruments · niprint lpd-lpr print server4 Kas 2003

  • CVE-2003-0543
    28İzleyin

    Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with

    OrtaCVSS 5,0Kavram kanıtıEPSS %27

    openssl · openssl17 Kas 2003

  • CVE-2003-0545
    65Bu hafta

    Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code

    KritikCVSS 9,8İstismar yokEPSS %87

    openssl · openssl17 Kas 2003

  • CVE-2003-0659
    41Planlayın

    Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_D

    YüksekCVSS 7,2Kavram kanıtıEPSS %43

    microsoft · windows 200017 Kas 2003

  • CVE-2003-0660
    37İzleyin

    The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls wh

    YüksekCVSS 7,5İstismar yokEPSS %24

    microsoft · windows 200017 Kas 2003

  • CVE-2003-0662
    48Planlayın

    Buffer overflow in Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and earlier allows remote attackers to execute

    KritikCVSS 9,3İstismar yokEPSS %38

    microsoft · windows 200017 Kas 2003

  • CVE-2003-0711
    41Planlayın

    Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remo

    YüksekCVSS 7,5İstismar yokEPSS %37

    microsoft · windows 200017 Kas 2003

  • CVE-2003-0712
    23İzleyin

    Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web

    OrtaCVSS 4,3İstismar yokEPSS %19

    microsoft · exchange server17 Kas 2003

  • CVE-2003-0714
    53Planlayın

    The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion)

    YüksekCVSS 7,5SilahlaştırılmışEPSS %77

    microsoft · exchange server17 Kas 2003

  • CVE-2003-0717
    48Planlayın

    The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers t

    YüksekCVSS 7,5Kavram kanıtıEPSS %60

    microsoft · windows 200017 Kas 2003

  • CVE-2003-0809
    38İzleyin

    Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows rem

    YüksekCVSS 7,5Kavram kanıtıEPSS %27

    microsoft · ie17 Kas 2003

  • CVE-2003-0813
    25İzleyin

    A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a d

    OrtaCVSS 5,1İstismar yokEPSS %16

    microsoft · windows 200017 Kas 2003

  • CVE-2003-0831
    54Planlayın

    ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote att

    KritikCVSS 9,0Kavram kanıtıEPSS %58

    proftpd project · proftpd17 Kas 2003

  • CVE-2003-0838
    41Planlayın

    Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window an

    YüksekCVSS 7,5Kavram kanıtıEPSS %37

    microsoft · ie17 Kas 2003

  • CVE-2003-0839
    24İzleyin

    Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitra

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · windows 2003 server17 Kas 2003

  • CVE-2003-0845
    35İzleyin

    Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, a

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    jboss · jboss17 Kas 2003

  • CVE-2003-0849
    33İzleyin

    Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified l

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    gnu · cfengine17 Kas 2003

  • CVE-2003-0853
    23İzleyin

    An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary cod

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    gnu · fileutils17 Kas 2003

  • CVE-2003-0865
    34İzleyin

    Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a lon

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    mpg123 · mpg12317 Kas 2003

  • CVE-2003-0866
    30İzleyin

    The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via

    OrtaCVSS 5,0Kavram kanıtıEPSS %34

    apache · tomcat17 Kas 2003

  • CVE-2003-0870
    35İzleyin

    Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escap

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    opera · opera browser17 Kas 2003

  • CVE-2003-0896
    34İzleyin

    The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier all

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    sun · jre17 Kas 2003