Yayın tarihine göre
Eylül 2004: sömürülen ve yeni ciddi CVE kayıtları
11 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2004-0637Kavram kanıtı | Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload packoracle · oracle8i · CWE-94 | Orta6,5 | — | %17,8 | 2 Eyl 2004 |
24İzleyin | CVE-2004-1675Kavram kanıtı | Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command witsolarwinds · serv-u file server · CWE-20 | Orta5,0 | — | %12,3 | 11 Eyl 2004 |
23İzleyin | CVE-2004-1686İstismar yok | Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTMLmicrosoft · ie | Orta5,0 | — | %10,2 | 15 Eyl 2004 |
25İzleyin | CVE-2004-0809İstismar yok | The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain seqapache · http server | Orta5,0 | — | %17,1 | 16 Eyl 2004 |
33İzleyin | CVE-2004-0866İstismar yok | Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which ckde · konqueror | Yüksek7,5 | — | %10,0 | 16 Eyl 2004 |
24İzleyin | CVE-2004-0869İstismar yok | Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/Smicrosoft · ie | Orta5,0 | — | %14,7 | 16 Eyl 2004 |
43Planlayın | CVE-2004-1695Kavram kanıtı | EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URLemulive · server4 | Kritik10,0 | — | %10,0 | 20 Eyl 2004 |
52Planlayın | CVE-2004-0200Kavram kanıtı | Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remotemicrosoft · .net framework | Kritik9,3 | — | %49,0 | 28 Eyl 2004 |
28İzleyin | CVE-2004-0558Kavram kanıtı | The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hangeasy software products · cups | Orta5,0 | — | %26,7 | 28 Eyl 2004 |
43Planlayın | CVE-2004-0573İstismar yok | Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 almicrosoft · frontpage | Yüksek7,5 | — | %42,3 | 28 Eyl 2004 |
34İzleyin | CVE-2004-0691Kavram kanıtı | Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial oftrolltech · qt | Yüksek7,5 | — | %14,6 | 28 Eyl 2004 |
- CVE-2004-063731İzleyin
Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload pack
OrtaCVSS 6,5Kavram kanıtıEPSS %17oracle · oracle8i2 Eyl 2004
- CVE-2004-167524İzleyin
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command wit
OrtaCVSS 5,0Kavram kanıtıEPSS %12solarwinds · serv-u file server11 Eyl 2004
- CVE-2004-168623İzleyin
Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML
OrtaCVSS 5,0İstismar yokEPSS %10microsoft · ie15 Eyl 2004
- CVE-2004-080925İzleyin
The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain seq
OrtaCVSS 5,0İstismar yokEPSS %17apache · http server16 Eyl 2004
- CVE-2004-086633İzleyin
Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which c
YüksekCVSS 7,5İstismar yokEPSS %10kde · konqueror16 Eyl 2004
- CVE-2004-086924İzleyin
Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/S
OrtaCVSS 5,0İstismar yokEPSS %14microsoft · ie16 Eyl 2004
- CVE-2004-169543Planlayın
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL
KritikCVSS 10,0Kavram kanıtıEPSS %10emulive · server420 Eyl 2004
- CVE-2004-020052Planlayın
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote
KritikCVSS 9,3Kavram kanıtıEPSS %49microsoft · .net framework28 Eyl 2004
- CVE-2004-055828İzleyin
The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang
OrtaCVSS 5,0Kavram kanıtıEPSS %26easy software products · cups28 Eyl 2004
- CVE-2004-057343Planlayın
Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 al
YüksekCVSS 7,5İstismar yokEPSS %42microsoft · frontpage28 Eyl 2004
- CVE-2004-069134İzleyin
Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of
YüksekCVSS 7,5Kavram kanıtıEPSS %14trolltech · qt28 Eyl 2004