İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2004: sömürülen ve yeni ciddi CVE kayıtları

36 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2003-0718
    46Planlayın

    The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (m

    OrtaCVSS 5,0Kavram kanıtıEPSS %87

    microsoft · internet information server3 Kas 2004

  • CVE-2004-0206
    52Planlayın

    Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003

    YüksekCVSS 7,5SilahlaştırılmışEPSS %74

    microsoft · windows 20003 Kas 2004

  • CVE-2004-0209
    57Planlayın

    Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remot

    KritikCVSS 10,0Kavram kanıtıEPSS %57

    microsoft · windows 20003 Kas 2004

  • CVE-2004-0214
    54Planlayın

    Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote mal

    KritikCVSS 10,0Kavram kanıtıEPSS %46

    microsoft · internet explorer3 Kas 2004

  • CVE-2004-0216
    55Planlayın

    Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code

    KritikCVSS 10,0İstismar yokEPSS %48

    microsoft · ie3 Kas 2004

  • CVE-2004-0552
    37İzleyin

    Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    sophos · small business suite3 Kas 2004

  • CVE-2004-0569
    36İzleyin

    The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service (system cras

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · windows nt3 Kas 2004

  • CVE-2004-0572
    55Planlayın

    Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL w

    KritikCVSS 10,0İstismar yokEPSS %49

    microsoft · grpconv3 Kas 2004

  • CVE-2004-0574
    60Bu hafta

    The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2

    KritikCVSS 10,0Kavram kanıtıEPSS %67

    microsoft · exchange server3 Kas 2004

  • CVE-2004-0575
    58Planlayın

    Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Ed

    KritikCVSS 10,0Kavram kanıtıEPSS %60

    microsoft · windows 2003 server3 Kas 2004

  • CVE-2004-0832
    23İzleyin

    The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attac

    OrtaCVSS 5,0İstismar yokEPSS %10

    squid · squid3 Kas 2004

  • CVE-2004-0835
    37İzleyin

    MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    mysql · mysql3 Kas 2004

  • CVE-2004-0840
    49Planlayın

    The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit E

    KritikCVSS 10,0İstismar yokEPSS %30

    microsoft · exchange server3 Kas 2004

  • CVE-2004-0843
    30İzleyin

    Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and t

    OrtaCVSS 5,0İstismar yokEPSS %33

    microsoft · ie3 Kas 2004

  • CVE-2004-0844
    30İzleyin

    Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars and spoof web pages

    OrtaCVSS 5,0İstismar yokEPSS %32

    microsoft · ie3 Kas 2004

  • CVE-2004-0845
    34İzleyin

    Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content

    OrtaCVSS 6,4İstismar yokEPSS %30

    microsoft · ie3 Kas 2004

  • CVE-2004-0846
    39İzleyin

    Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a m

    YüksekCVSS 7,5İstismar yokEPSS %28

    microsoft · excel3 Kas 2004

  • CVE-2004-0847
    62Bu hafta

    The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricte

    KritikCVSS 9,8Kavram kanıtıEPSS %75

    microsoft · asp.net3 Kas 2004

  • CVE-2004-0885
    35İzleyin

    The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remot

    YüksekCVSS 7,5İstismar yokEPSS %15

    apache · http server3 Kas 2004

  • CVE-2004-1315
    52Planlayın

    viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, whic

    YüksekCVSS 7,5SilahlaştırılmışEPSS %72

    phpbb group · phpbb12 Kas 2004

  • CVE-2004-1331
    16İzleyin

    The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialo

    DüşükCVSS 2,6İstismar yokEPSS %19

    microsoft · ie16 Kas 2004

  • CVE-2004-0112
    23İzleyin

    The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of

    OrtaCVSS 5,0İstismar yokEPSS %10

    openssl · openssl23 Kas 2004

  • CVE-2004-0203
    23İzleyin

    Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbi

    OrtaCVSS 4,3İstismar yokEPSS %20

    microsoft · exchange server23 Kas 2004

  • CVE-2004-0270
    23İzleyin

    libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    clam anti-virus · clamav23 Kas 2004

  • CVE-2004-0277
    44Planlayın

    Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    bolintech · dream ftp server23 Kas 2004

  • CVE-2004-0284
    25İzleyin

    Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "D

    OrtaCVSS 5,0İstismar yokEPSS %16

    microsoft · ie23 Kas 2004

  • CVE-2004-0297
    60Bu hafta

    Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote

    KritikCVSS 10,0SilahlaştırılmışEPSS %68

    ipswitch · imail23 Kas 2004

  • CVE-2004-0313
    59Planlayın

    Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP re

    KritikCVSS 10,0SilahlaştırılmışEPSS %63

    psoproxy · psoproxy server23 Kas 2004

  • CVE-2004-0326
    59Planlayın

    Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request.

    KritikCVSS 10,0SilahlaştırılmışEPSS %62

    proxy-pro · professional gatekeeper23 Kas 2004

  • CVE-2004-0330
    66Bu hafta

    Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to th

    KritikCVSS 10,0SilahlaştırılmışEPSS %85

    solarwinds · serv-u file server23 Kas 2004

  • CVE-2004-0331
    40Planlayın

    Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST

    OrtaCVSS 5,0SilahlaştırılmışEPSS %15

    dell · openmanage23 Kas 2004

  • CVE-2004-0333
    47Planlayın

    Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers

    KritikCVSS 10,0Kavram kanıtıEPSS %24

    uudeview · uudeview23 Kas 2004

  • CVE-2004-0354
    45Planlayın

    Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    gnu · anubis23 Kas 2004

  • CVE-2004-0597
    65Bu hafta

    Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via ma

    KritikCVSS 10,0Kavram kanıtıEPSS %81

    greg roelofs · libpng23 Kas 2004

  • CVE-2004-0636
    60Bu hafta

    Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote

    KritikCVSS 10,0SilahlaştırılmışEPSS %66

    aol · instant messenger23 Kas 2004

  • CVE-2004-0771
    46Planlayın

    Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working director

    KritikCVSS 10,0Kavram kanıtıEPSS %18

    tsugio okamoto · lha23 Kas 2004