İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2004: sömürülen ve yeni ciddi CVE kayıtları

34 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2004-1364
    38İzleyin

    Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORAC

    YüksekCVSS 8,5Kavram kanıtıEPSS %13

    oracle · application server4 Ağu 2004

  • CVE-2004-1366
    23İzleyin

    Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could

    OrtaCVSS 4,6İstismar yokEPSS %15

    oracle · application server4 Ağu 2004

  • CVE-2004-1371
    39İzleyin

    Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped

    KritikCVSS 9,0İstismar yokEPSS %10

    oracle · application server4 Ağu 2004

  • CVE-2004-0201
    54Planlayın

    Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 all

    KritikCVSS 10,0İstismar yokEPSS %45

    microsoft · windows 20006 Ağu 2004

  • CVE-2004-0202
    28İzleyin

    IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allo

    OrtaCVSS 5,0İstismar yokEPSS %26

    microsoft · directx6 Ağu 2004

  • CVE-2004-0204
    52Planlayın

    Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used

    YüksekCVSS 7,5Kavram kanıtıEPSS %72

    bea · weblogic server6 Ağu 2004

  • CVE-2004-0205
    35İzleyin

    Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function.

    YüksekCVSS 7,2İstismar yokEPSS %24

    microsoft · internet information server6 Ağu 2004

  • CVE-2004-0210
    63Bu hafta

    The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly b

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %7

    microsoft · interix6 Ağu 2004

  • CVE-2004-0212
    59Planlayın

    Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote

    KritikCVSS 10,0Kavram kanıtıEPSS %63

    avaya · ip600 media servers6 Ağu 2004

  • CVE-2004-0213
    37İzleyin

    Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to g

    YüksekCVSS 7,8Kavram kanıtıEPSS %20

    microsoft · windows 20006 Ağu 2004

  • CVE-2004-0215
    25İzleyin

    Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · outlook express6 Ağu 2004

  • CVE-2004-0416
    44Planlayın

    Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attacker

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    cvs · cvs6 Ağu 2004

  • CVE-2004-0460
    54Planlayın

    Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause

    KritikCVSS 10,0İstismar yokEPSS %45

    isc · dhcpd6 Ağu 2004

  • CVE-2004-0461
    45Planlayın

    The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses

    KritikCVSS 10,0İstismar yokEPSS %16

    isc · dhcpd6 Ağu 2004

  • CVE-2004-0492
    50Planlayın

    Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (pr

    KritikCVSS 10,0İstismar yokEPSS %33

    apache · http server6 Ağu 2004

  • CVE-2004-0493
    50Planlayın

    The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and p

    OrtaCVSS 6,4Kavram kanıtıEPSS %84

    apache · http server6 Ağu 2004

  • CVE-2004-0526
    25İzleyin

    Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with mo

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    microsoft · ie6 Ağu 2004

  • CVE-2004-0541
    61Bu hafta

    Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handl

    KritikCVSS 10,0SilahlaştırılmışEPSS %71

    national science foundation · squid web proxy cache6 Ağu 2004

  • CVE-2004-0542
    49Planlayın

    PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arb

    KritikCVSS 10,0İstismar yokEPSS %31

    php · php6 Ağu 2004

  • CVE-2004-0549
    58Planlayın

    The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attac

    KritikCVSS 10,0Kavram kanıtıEPSS %61

    microsoft · internet explorer6 Ağu 2004

  • CVE-2004-0557
    48Planlayın

    Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers t

    KritikCVSS 10,0Kavram kanıtıEPSS %25

    sox · sox6 Ağu 2004

  • CVE-2004-0659
    45Planlayın

    Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name.

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    mplayer · mplayer6 Ağu 2004

  • CVE-2004-0716
    44Planlayın

    Buffer overflow in the DCE daemon (DCED) for the DCE endpoint mapper (epmap) on HP-UX 11 allows remote attackers to execute arbitrary code v

    KritikCVSS 10,0İstismar yokEPSS %12

    hp · hp-ux6 Ağu 2004

  • CVE-2004-1701
    46Planlayın

    Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execut

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    gnu · cfengine9 Ağu 2004

  • CVE-2004-0234
    43Planlayın

    Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewa

    KritikCVSS 10,0İstismar yokEPSS %10

    clearswift · mailsweeper18 Ağu 2004

  • CVE-2004-0501
    26İzleyin

    Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTM

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    microsoft · outlook18 Ağu 2004

  • CVE-2004-0502
    26İzleyin

    Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original

    OrtaCVSS 5,0Kavram kanıtıEPSS %20

    microsoft · outlook18 Ağu 2004

  • CVE-2004-0503
    23İzleyin

    Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text

    OrtaCVSS 5,0İstismar yokEPSS %11

    microsoft · outlook18 Ağu 2004

  • CVE-2004-0519
    34İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users

    OrtaCVSS 6,8Kavram kanıtıEPSS %22

    squirrelmail · squirrelmail18 Ağu 2004

  • CVE-2004-0523
    43Planlayın

    Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary

    KritikCVSS 10,0İstismar yokEPSS %11

    mit · kerberos18 Ağu 2004

  • CVE-2004-0722
    44Planlayın

    Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versi

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    mozilla · mozilla18 Ağu 2004

  • CVE-2004-0839
    30İzleyin

    Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a

    OrtaCVSS 5,0İstismar yokEPSS %33

    avaya · ip600 media servers18 Ağu 2004

  • CVE-2004-0230
    44Planlayın

    TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connectio

    OrtaCVSS 5,0Kavram kanıtıEPSS %80

    juniper · junos18 Ağu 2004

  • CVE-2004-1653
    28İzleyin

    The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, whe

    OrtaCVSS 6,4İstismar yokEPSS %11

    openbsd · openssh31 Ağu 2004