İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2004: sömürülen ve yeni ciddi CVE kayıtları

26 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2003-0533
    56Planlayın

    Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (L

    YüksekCVSS 7,5SilahlaştırılmışEPSS %85

    microsoft · netmeeting1 Haz 2004

  • CVE-2003-0663
    30İzleyin

    Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000 domain controllers allows remote attackers t

    OrtaCVSS 5,0İstismar yokEPSS %32

    microsoft · windows 20001 Haz 2004

  • CVE-2003-0719
    54Planlayın

    Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Win

    YüksekCVSS 7,5SilahlaştırılmışEPSS %81

    microsoft · netmeeting1 Haz 2004

  • CVE-2003-0806
    40Planlayın

    Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of

    YüksekCVSS 7,5İstismar yokEPSS %33

    microsoft · windows 20001 Haz 2004

  • CVE-2003-0807
    32İzleyin

    Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal

    OrtaCVSS 5,0İstismar yokEPSS %39

    microsoft · windows 20001 Haz 2004

  • CVE-2003-0906
    38İzleyin

    Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6

    YüksekCVSS 7,6İstismar yokEPSS %25

    microsoft · windows 20001 Haz 2004

  • CVE-2003-0907
    27İzleyin

    Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary

    OrtaCVSS 5,1İstismar yokEPSS %21

    microsoft · windows server 20031 Haz 2004

  • CVE-2003-0908
    36İzleyin

    The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary co

    YüksekCVSS 7,2Kavram kanıtıEPSS %25

    microsoft · windows 20001 Haz 2004

  • CVE-2003-0909
    34İzleyin

    Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe

    YüksekCVSS 7,2İstismar yokEPSS %20

    microsoft · windows xp1 Haz 2004

  • CVE-2003-0910
    36İzleyin

    The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows loc

    YüksekCVSS 7,2Kavram kanıtıEPSS %26

    microsoft · windows 20001 Haz 2004

  • CVE-2004-0116
    31İzleyin

    An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers t

    OrtaCVSS 5,0İstismar yokEPSS %37

    microsoft · windows 20001 Haz 2004

  • CVE-2004-0117
    38İzleyin

    Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote at

    YüksekCVSS 7,5İstismar yokEPSS %26

    microsoft · netmeeting1 Haz 2004

  • CVE-2004-0118
    35İzleyin

    The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, w

    YüksekCVSS 7,2İstismar yokEPSS %22

    microsoft · windows 20001 Haz 2004

  • CVE-2004-0119
    42Planlayın

    The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to ca

    YüksekCVSS 7,5İstismar yokEPSS %39

    microsoft · windows 20001 Haz 2004

  • CVE-2004-0120
    35İzleyin

    The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to c

    OrtaCVSS 5,0Kavram kanıtıEPSS %50

    microsoft · windows 20001 Haz 2004

  • CVE-2004-0123
    39İzleyin

    Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote a

    YüksekCVSS 7,5İstismar yokEPSS %29

    microsoft · windows 20001 Haz 2004

  • CVE-2004-0124
    17İzleyin

    The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via a

    DüşükCVSS 2,6İstismar yokEPSS %21

    microsoft · windows 20001 Haz 2004

  • CVE-2004-0179
    30İzleyin

    Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversio

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    webdav · neon1 Haz 2004

  • CVE-2004-0197
    38İzleyin

    Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database quer

    YüksekCVSS 7,5İstismar yokEPSS %26

    microsoft · jet1 Haz 2004

  • CVE-2004-0385
    45Planlayın

    Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %15

    oracle · application server web cache1 Haz 2004

  • CVE-2004-0389
    46Planlayın

    RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that

    YüksekCVSS 7,5Kavram kanıtıEPSS %54

    realnetworks · helix universal server1 Haz 2004

  • CVE-2004-2044
    33İzleyin

    PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    francisco burzi · php-nuke1 Haz 2004

  • CVE-2002-1580
    35İzleyin

    Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length va

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    carnegie mellon university · cyrus imap server14 Haz 2004

  • CVE-2003-1041
    46Planlayın

    Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL co

    YüksekCVSS 7,5Kavram kanıtıEPSS %52

    microsoft · ie14 Haz 2004

  • CVE-2004-0199
    28İzleyin

    Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attacke

    OrtaCVSS 5,1İstismar yokEPSS %26

    microsoft · windows 2003 server14 Haz 2004

  • CVE-2004-0396
    50Planlayın

    Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %67

    cvs · cvs14 Haz 2004