Yayın tarihine göre
Ocak 2004: sömürülen ve yeni ciddi CVE kayıtları
7 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2003-0963Kavram kanıtı | Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary alexander v. lukyanov · lftp | Yüksek7,5 | — | %13,6 | 5 Oca 2004 |
33İzleyin | CVE-2003-0995İstismar yok | Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a denial of service (RPC service crash) via amicrosoft · windows 2000 | Yüksek7,5 | — | %10,0 | 5 Oca 2004 |
40Planlayın | CVE-2003-0990Silahlaştırılmış | The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters squirrelmail · gpg plugin | Yüksek7,5 | — | %28,7 | 20 Oca 2004 |
25İzleyin | CVE-2003-1025Kavram kanıtı | Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the usermicrosoft · internet explorer · CWE-20 | Orta4,3 | — | %26,9 | 20 Oca 2004 |
49Planlayın | CVE-2003-1026Kavram kanıtı | Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, whichmicrosoft · ie · CWE-264 | Kritik9,3 | — | %39,2 | 20 Oca 2004 |
51Planlayın | CVE-2003-1027İstismar yok | Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windowmicrosoft · ie | Kritik10,0 | — | %38,0 | 20 Oca 2004 |
26İzleyin | CVE-2003-1028İstismar yok | The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invmicrosoft · ie | Orta5,0 | — | %19,0 | 20 Oca 2004 |
- CVE-2003-096334İzleyin
Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary
YüksekCVSS 7,5Kavram kanıtıEPSS %13alexander v. lukyanov · lftp5 Oca 2004
- CVE-2003-099533İzleyin
Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a denial of service (RPC service crash) via a
YüksekCVSS 7,5İstismar yokEPSS %10microsoft · windows 20005 Oca 2004
- CVE-2003-099040Planlayın
The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters
YüksekCVSS 7,5SilahlaştırılmışEPSS %28squirrelmail · gpg plugin20 Oca 2004
- CVE-2003-102525İzleyin
Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user
OrtaCVSS 4,3Kavram kanıtıEPSS %26microsoft · internet explorer20 Oca 2004
- CVE-2003-102649Planlayın
Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which
KritikCVSS 9,3Kavram kanıtıEPSS %39microsoft · ie20 Oca 2004
- CVE-2003-102751Planlayın
Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other window
KritikCVSS 10,0İstismar yokEPSS %38microsoft · ie20 Oca 2004
- CVE-2003-102826İzleyin
The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an inv
OrtaCVSS 5,0İstismar yokEPSS %19microsoft · ie20 Oca 2004