İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2003: sömürülen ve yeni ciddi CVE kayıtları

30 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2003-0886
    44Planlayın

    Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    hylafax · hylafax1 Ara 2003

  • CVE-2003-0812
    55Planlayın

    Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary

    YüksekCVSS 7,5SilahlaştırılmışEPSS %82

    microsoft · windows 200015 Ara 2003

  • CVE-2003-0820
    38İzleyin

    Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names

    YüksekCVSS 7,5İstismar yokEPSS %26

    microsoft · word15 Ara 2003

  • CVE-2003-0821
    36İzleyin

    Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · word15 Ara 2003

  • CVE-2003-0822
    55Planlayın

    Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attack

    YüksekCVSS 7,5SilahlaştırılmışEPSS %83

    microsoft · frontpage server extensions15 Ara 2003

  • CVE-2003-0824
    31İzleyin

    Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePo

    OrtaCVSS 5,0İstismar yokEPSS %36

    microsoft · frontpage server extensions15 Ara 2003

  • CVE-2003-0962
    37İzleyin

    Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibl

    YüksekCVSS 7,5İstismar yokEPSS %23

    andrew tridgell · rsync15 Ara 2003

  • CVE-2003-1200
    50Planlayın

    Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a lon

    YüksekCVSS 7,5SilahlaştırılmışEPSS %65

    alt-n · mdaemon29 Ara 2003

  • CVE-2003-1083
    46Planlayın

    Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.

    KritikCVSS 10,0Kavram kanıtıEPSS %21

    tildeslash · monit31 Ara 2003

  • CVE-2003-1096
    43Planlayın

    The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    cisco · leap31 Ara 2003

  • CVE-2003-1105
    15İzleyin

    Unknown vulnerability in Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to cause a denial of service (browser or Outlook

    DüşükCVSS 2,6İstismar yokEPSS %17

    microsoft · ie31 Ara 2003

  • CVE-2003-1118
    35İzleyin

    Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (client crash) and exec

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    university of california · seti at home31 Ara 2003

  • CVE-2003-1123
    33İzleyin

    Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applet

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    sun · jdk31 Ara 2003

  • CVE-2003-1172
    29İzleyin

    Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allows remote attackers to

    OrtaCVSS 5,0Kavram kanıtıEPSS %30

    apache · cocoon31 Ara 2003

  • CVE-2003-1177
    34İzleyin

    Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    atrium software · mercur mailserver31 Ara 2003

  • CVE-2003-1228
    34İzleyin

    Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote atta

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    mathopd · mathopd31 Ara 2003

  • CVE-2003-1236
    45Planlayın

    Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    tanne · tanne31 Ara 2003

  • CVE-2003-1275
    25İzleyin

    Pocket Internet Explorer (PIE) 3.0 allows remote attackers to cause a denial of service (crash) via a Javascript function that uses the obje

    OrtaCVSS 5,0Kavram kanıtıEPSS %16

    microsoft · pocket ie31 Ara 2003

  • CVE-2003-1303
    24İzleyin

    Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to ca

    OrtaCVSS 5,0İstismar yokEPSS %12

    php · php31 Ara 2003

  • CVE-2003-1336
    48Planlayın

    Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    mirc · mirc31 Ara 2003

  • CVE-2003-1337
    34İzleyin

    Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP

    YüksekCVSS 7,5İstismar yokEPSS %12

    aprelium technologies · abyss web server31 Ara 2003

  • CVE-2003-1339
    55Planlayın

    Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attack

    KritikCVSS 10,0Kavram kanıtıEPSS %48

    ezmeeting · ezmeeting31 Ara 2003

  • CVE-2003-1378
    40Planlayın

    Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary pr

    YüksekCVSS 8,8Kavram kanıtıEPSS %15

    microsoft · outlook31 Ara 2003

  • CVE-2003-1387
    34İzleyin

    Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    opera · opera browser31 Ara 2003

  • CVE-2003-1425
    43Planlayın

    guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    cpanel · cpanel31 Ara 2003

  • CVE-2003-1448
    36İzleyin

    Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service (SMB request hang) via a NetBIOS continuation pa

    YüksekCVSS 7,8İstismar yokEPSS %15

    microsoft · windows 200031 Ara 2003

  • CVE-2003-1484
    20İzleyin

    Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) by creating a DHTML link that uses the Anch

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · ie31 Ara 2003

  • CVE-2003-1505
    21İzleyin

    Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or HTML e-mail with a te

    OrtaCVSS 4,3Kavram kanıtıEPSS %12

    microsoft · internet explorer31 Ara 2003

  • CVE-2003-1544
    32İzleyin

    Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cau

    OrtaCVSS 6,8İstismar yokEPSS %17

    microsoft · windows 200031 Ara 2003

  • CVE-2003-1559
    25İzleyin

    Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http://

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · ie31 Ara 2003