Yayın tarihine göre
Mart 2004: sömürülen ve yeni ciddi CVE kayıtları
16 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
55Planlayın | CVE-2003-0818Silahlaştırılmış | Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and lmicrosoft · windows 2000 | Yüksek7,5 | — | %82,2 | 3 Mar 2004 |
41Planlayın | CVE-2003-0825İstismar yok | The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly valmicrosoft · windows 2000 · CWE-20 | Kritik9,3 | — | %12,1 | 3 Mar 2004 |
42Planlayın | CVE-2004-0005İstismar yok | Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octalgaim project · gaim · CWE-193 | Kritik9,8 | — | %11,2 | 3 Mar 2004 |
46Planlayın | CVE-2004-0083Kavram kanıtı | Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary xfree86 project · x11r6 | Kritik10,0 | — | %21,1 | 3 Mar 2004 |
47Planlayın | CVE-2004-0084Kavram kanıtı | Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remotxfree86 project · x11r6 | Kritik10,0 | — | %24,8 | 3 Mar 2004 |
43Planlayın | CVE-2004-0097İstismar yok | Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as dopenh323 project · pwlib | Kritik10,0 | — | %10,3 | 3 Mar 2004 |
38İzleyin | CVE-2004-0104Kavram kanıtı | Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.metamail corporation · metamail | Yüksek7,5 | — | %26,2 | 3 Mar 2004 |
50Planlayın | CVE-2004-1769Kavram kanıtı | The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackcpanel · cpanel | Kritik10,0 | — | %34,8 | 11 Mar 2004 |
43Planlayın | CVE-2004-1770Kavram kanıtı | The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in cpanel · cpanel | Kritik10,0 | — | %10,2 | 11 Mar 2004 |
37İzleyin | CVE-2004-0110Kavram kanıtı | Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execuxmlsoft · libxml | Yüksek7,5 | — | %24,2 | 15 Mar 2004 |
34İzleyin | CVE-2004-0189Kavram kanıtı | The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00squid · squid | Yüksek7,5 | — | %13,8 | 15 Mar 2004 |
29İzleyin | CVE-2004-1856Kavram kanıtı | devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary fileshp · web jetadmin | Orta5,0 | — | %29,5 | 24 Mar 2004 |
34İzleyin | CVE-2004-1857Kavram kanıtı | Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files vhp · web jetadmin | Düşük2,1 | — | %86,8 | 24 Mar 2004 |
33İzleyin | CVE-2003-0993İstismar yok | mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresseapache · http server | Yüksek7,5 | — | %10,8 | 29 Mar 2004 |
23İzleyin | CVE-2004-0113İstismar yok | Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumptioapache · http server | Orta5,0 | — | %11,0 | 29 Mar 2004 |
33İzleyin | CVE-2004-0194Kavram kanıtı | Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary codeadobe · acrobat reader | Yüksek7,5 | — | %10,7 | 29 Mar 2004 |
- CVE-2003-081855Planlayın
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and l
YüksekCVSS 7,5SilahlaştırılmışEPSS %82microsoft · windows 20003 Mar 2004
- CVE-2003-082541Planlayın
The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly val
KritikCVSS 9,3İstismar yokEPSS %12microsoft · windows 20003 Mar 2004
- CVE-2004-000542Planlayın
Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octal
KritikCVSS 9,8İstismar yokEPSS %11gaim project · gaim3 Mar 2004
- CVE-2004-008346Planlayın
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary
KritikCVSS 10,0Kavram kanıtıEPSS %21xfree86 project · x11r63 Mar 2004
- CVE-2004-008447Planlayın
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remot
KritikCVSS 10,0Kavram kanıtıEPSS %24xfree86 project · x11r63 Mar 2004
- CVE-2004-009743Planlayın
Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as d
KritikCVSS 10,0İstismar yokEPSS %10openh323 project · pwlib3 Mar 2004
- CVE-2004-010438İzleyin
Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.
YüksekCVSS 7,5Kavram kanıtıEPSS %26metamail corporation · metamail3 Mar 2004
- CVE-2004-176950Planlayın
The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attack
KritikCVSS 10,0Kavram kanıtıEPSS %34cpanel · cpanel11 Mar 2004
- CVE-2004-177043Planlayın
The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in
KritikCVSS 10,0Kavram kanıtıEPSS %10cpanel · cpanel11 Mar 2004
- CVE-2004-011037İzleyin
Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execu
YüksekCVSS 7,5Kavram kanıtıEPSS %24xmlsoft · libxml15 Mar 2004
- CVE-2004-018934İzleyin
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00
YüksekCVSS 7,5Kavram kanıtıEPSS %13squid · squid15 Mar 2004
- CVE-2004-185629İzleyin
devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files
OrtaCVSS 5,0Kavram kanıtıEPSS %29hp · web jetadmin24 Mar 2004
- CVE-2004-185734İzleyin
Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files v
DüşükCVSS 2,1Kavram kanıtıEPSS %86hp · web jetadmin24 Mar 2004
- CVE-2003-099333İzleyin
mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresse
YüksekCVSS 7,5İstismar yokEPSS %10apache · http server29 Mar 2004
- CVE-2004-011323İzleyin
Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumptio
OrtaCVSS 5,0İstismar yokEPSS %11apache · http server29 Mar 2004
- CVE-2004-019433İzleyin
Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code
YüksekCVSS 7,5Kavram kanıtıEPSS %10adobe · acrobat reader29 Mar 2004