Yayın tarihine göre
Aralık 2004: sömürülen ve yeni ciddi CVE kayıtları
84 kayıt · 1 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
44Planlayın | CVE-2003-1208İstismar yok | Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session paroracle · oracle9i | Kritik10,0 | — | %13,1 | 3 Ara 2004 |
45Planlayın | CVE-2004-0393Kavram kanıtı | Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format srlpr · rlpr | Kritik10,0 | — | %17,4 | 6 Ara 2004 |
62Bu hafta | CVE-2004-0608Silahlaştırılmış | The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2nerf arena blast · nerf arena blast | Kritik10,0 | — | %73,5 | 6 Ara 2004 |
24İzleyin | CVE-2004-0610İstismar yok | The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusamicrosoft · mn-500 wireless base station | Orta5,0 | — | %14,8 | 6 Ara 2004 |
61Bu hafta | CVE-2004-0627Kavram kanıtı | The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrmysql · mysql | Kritik10,0 | — | %69,6 | 6 Ara 2004 |
25İzleyin | CVE-2004-0633Kavram kanıtı | The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer ovethereal group · ethereal | Orta5,0 | — | %17,9 | 6 Ara 2004 |
28İzleyin | CVE-2004-1319İstismar yok | The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a windonortel · ip softphone 2050 | Orta5,0 | — | %26,9 | 15 Ara 2004 |
15İzleyin | CVE-2004-1324Kavram kanıtı | The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zonemicrosoft · windows media player | Düşük2,6 | — | %16,6 | 18 Ara 2004 |
25İzleyin | CVE-2004-1325Kavram kanıtı | The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the microsoft · windows media player | Orta5,0 | — | %15,7 | 18 Ara 2004 |
23İzleyin | CVE-2005-0066İstismar yok | The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router itcp · tcp | Orta5,0 | — | %10,7 | 22 Ara 2004 |
24İzleyin | CVE-2005-0067İstismar yok | The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for atttcp · tcp | Orta5,0 | — | %13,4 | 22 Ara 2004 |
36İzleyin | CVE-2005-0068İstismar yok | The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to ftcp · tcp | Orta5,0 | — | %54,3 | 22 Ara 2004 |
33İzleyin | CVE-2004-0816Kavram kanıtı | Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (applinux · linux kernel · CWE-191 | Yüksek7,5 | — | %11,5 | 23 Ara 2004 |
35İzleyin | CVE-2004-0841Kavram kanıtı | Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use draavaya · ip600 media servers | Orta5,0 | — | %48,7 | 23 Ara 2004 |
47Planlayın | CVE-2004-0842Kavram kanıtı | Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash avaya · ip600 media servers | Yüksek7,5 | — | %56,6 | 23 Ara 2004 |
35İzleyin | CVE-2004-0867İstismar yok | Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which cmozilla · firefox · CWE-264 | Yüksek7,5 | — | %17,1 | 23 Ara 2004 |
38İzleyin | CVE-2004-1305Kavram kanıtı | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote nortel · ip softphone 2050 | Orta5,0 | — | %58,5 | 23 Ara 2004 |
26İzleyin | CVE-2004-1361İstismar yok | Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers microsoft · windows 2000 | Orta5,0 | — | %20,0 | 23 Ara 2004 |
51Planlayın | CVE-2004-1373Silahlaştırılmış | Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrarnullsoft · shoutcast server | Yüksek7,5 | — | %70,0 | 23 Ara 2004 |
48Planlayın | CVE-2004-1317Silahlaştırılmış | Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitnetcat · netcat | Yüksek7,5 | — | %60,4 | 27 Ara 2004 |
24İzleyin | CVE-2004-0465Kavram kanıtı | Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to reaopenconnect · webconnect | Orta5,0 | — | %12,2 | 31 Ara 2004 |
51Planlayın | CVE-2004-0567Kavram kanıtı | The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, andmicrosoft · windows 2000 | Yüksek7,5 | — | %68,6 | 31 Ara 2004 |
37İzleyin | CVE-2004-0826İstismar yok | Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modifnetscape · certificate server | Yüksek7,5 | — | %22,5 | 31 Ara 2004 |
46Planlayın | CVE-2004-0985İstismar yok | Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggablemicrosoft · ie | Kritik10,0 | — | %20,2 | 31 Ara 2004 |
33İzleyin | CVE-2004-1043Kavram kanıtı | Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help microsoft · internet explorer | Orta5,0 | — | %44,9 | 31 Ara 2004 |
29İzleyin | CVE-2004-1049İstismar yok | Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, microsoft · windows 2000 | Orta5,1 | — | %30,1 | 31 Ara 2004 |
60Bu hafta | CVE-2004-1050Kavram kanıtı | Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes avaya · ip600 media servers | Kritik10,0 | — | %67,0 | 31 Ara 2004 |
40Planlayın | CVE-2004-1104Kavram kanıtı | Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a microsoft · ie | Yüksek7,5 | — | %34,5 | 31 Ara 2004 |
34İzleyin | CVE-2004-1155İstismar yok | Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another windmicrosoft · ie | Yüksek7,5 | — | %12,5 | 31 Ara 2004 |
42Planlayın | CVE-2004-1166Kavram kanıtı | CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commamicrosoft · ie · CWE-94 | Yüksek7,5 | — | %39,1 | 31 Ara 2004 |
34İzleyin | CVE-2004-1173İstismar yok | Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Dynamic HTMmicrosoft · internet explorer | Yüksek7,5 | — | %11,7 | 31 Ara 2004 |
26İzleyin | CVE-2004-1306Kavram kanıtı | Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote amicrosoft · windows 2000 | Orta5,1 | — | %19,5 | 31 Ara 2004 |
50Planlayın | CVE-2004-1388Silahlaştırılmış | Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackberlios · gps daemon | Yüksek7,5 | — | %68,1 | 31 Ara 2004 |
40Planlayın | CVE-2004-1389Silahlaştırılmış | Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenteveritas · netbackup | Orta6,0 | — | %9,8 | 31 Ara 2004 |
23İzleyin | CVE-2004-1392Kavram kanıtı | PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to php · php | Orta5,0 | — | %10,7 | 31 Ara 2004 |
35İzleyin | CVE-2004-1423Kavram kanıtı | Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtphp-calendar · php-calendar · CWE-94 | Yüksek7,5 | — | %15,4 | 31 Ara 2004 |
34İzleyin | CVE-2004-1437Kavram kanıtı | Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attackers to execute arbitrpavuk · pavuk | Yüksek7,5 | — | %13,3 | 31 Ara 2004 |
35İzleyin | CVE-2004-1439Kavram kanıtı | Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as (1) USER, (2) PASS, (3)sapporoworks · black jumbodog | Yüksek7,5 | — | %15,8 | 31 Ara 2004 |
34İzleyin | CVE-2004-1456Kavram kanıtı | filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.cvstrac · cvstrac | Yüksek7,5 | — | %13,9 | 31 Ara 2004 |
60Bu hafta | CVE-2004-1464Silahlaştırılmış | Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafcisco · ios · CWE-400 | Orta5,9 | KEV | %4,8 | 31 Ara 2004 |
24İzleyin | CVE-2004-1491Kavram kanıtı | Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortopera · opera browser | Orta5,0 | — | %12,5 | 31 Ara 2004 |
45Planlayın | CVE-2004-1520Silahlaştırılmış | Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE commanipswitch · imail | Orta4,6 | — | %88,5 | 31 Ara 2004 |
29İzleyin | CVE-2004-1546Kavram kanıtı | Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a long (1) SAML, SOMLalt-n · mdaemon | Orta5,0 | — | %31,0 | 31 Ara 2004 |
40Planlayın | CVE-2004-1550Silahlaştırılmış | Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obtamotorola · wr850g | Yüksek7,5 | — | %18,6 | 31 Ara 2004 |
51Planlayın | CVE-2004-1558Silahlaştırılmış | Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) ypops · ypops | Yüksek7,5 | — | %71,1 | 31 Ara 2004 |
28İzleyin | CVE-2004-1560Kavram kanıtı | Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433microsoft · sql server | Orta5,0 | — | %25,6 | 31 Ara 2004 |
53Planlayın | CVE-2004-1561Silahlaştırılmış | Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of heicecast · icecast | Yüksek7,5 | — | %77,9 | 31 Ara 2004 |
23İzleyin | CVE-2004-1584Kavram kanıtı | CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify ewordpress · wordpress | Orta5,0 | — | %11,2 | 31 Ara 2004 |
39İzleyin | CVE-2004-1782Kavram kanıtı | athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parametedavid maciejak · athena web registration | Yüksek7,5 | — | %28,5 | 31 Ara 2004 |
20İzleyin | CVE-2004-1789Kavram kanıtı | Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web szyxel · zywall10 | Orta4,3 | — | %11,2 | 31 Ara 2004 |
54Planlayın | CVE-2004-1812İstismar yok | Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attackerbroadcom · unicenter tng | Kritik10,0 | — | %45,2 | 31 Ara 2004 |
33İzleyin | CVE-2004-1892Kavram kanıtı | Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attackeemule · emule | Yüksek7,5 | — | %10,0 | 31 Ara 2004 |
45Planlayın | CVE-2004-1898Kavram kanıtı | Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via atildeslash · monit | Kritik10,0 | — | %16,5 | 31 Ara 2004 |
40Planlayın | CVE-2004-2074Silahlaştırılmış | Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1bolintech · dream ftp server | Orta5,0 | — | %35,7 | 31 Ara 2004 |
24İzleyin | CVE-2004-2104Kavram kanıtı | Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP anovell · netware | Orta5,0 | — | %11,9 | 31 Ara 2004 |
60Bu hafta | CVE-2004-2111Silahlaştırılmış | Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via solarwinds · serv-u file server · CWE-119 | Yüksek8,5 | — | %86,8 | 31 Ara 2004 |
45Planlayın | CVE-2004-2115Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitraoracle · http server | Orta6,8 | — | %58,3 | 31 Ara 2004 |
28İzleyin | CVE-2004-2137İstismar yok | Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients omicrosoft · outlook express | Orta5,0 | — | %26,1 | 31 Ara 2004 |
34İzleyin | CVE-2004-2167Kavram kanıtı | Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the explatex2rtf · latex2rtf | Yüksek7,5 | — | %14,3 | 31 Ara 2004 |
24İzleyin | CVE-2004-2179İstismar yok | asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a microsoft · frontpage | Orta5,0 | — | %12,0 | 31 Ara 2004 |
40Planlayın | CVE-2004-2221Silahlaştırılmış | Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTmercantec · softcart | Yüksek7,5 | — | %34,7 | 31 Ara 2004 |
34İzleyin | CVE-2004-2262Kavram kanıtı | ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary coe107 · e107 · CWE-434 | Yüksek7,5 | — | %14,9 | 31 Ara 2004 |
52Planlayın | CVE-2004-2271Silahlaştırılmış | Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.minishare · minimal http server | Yüksek7,5 | — | %71,9 | 31 Ara 2004 |
44Planlayın | CVE-2004-2275Kavram kanıtı | i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter.i-mall commerce · i-mall.cgi | Kritik10,0 | — | %12,8 | 31 Ara 2004 |
47Planlayın | CVE-2004-2289Kavram kanıtı | Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClmicrosoft · windows xp | Kritik10,0 | — | %23,3 | 31 Ara 2004 |
33İzleyin | CVE-2004-2291Kavram kanıtı | Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helmicrosoft · ie | Yüksek7,5 | — | %10,8 | 31 Ara 2004 |
24İzleyin | CVE-2004-2292İstismar yok | Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a long STATUS command toalt-n · mdaemon | Orta5,0 | — | %12,1 | 31 Ara 2004 |
33İzleyin | CVE-2004-2299Kavram kanıtı | Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a longomnicron · omnihttpd | Yüksek7,5 | — | %10,2 | 31 Ara 2004 |
24İzleyin | CVE-2004-2307İstismar yok | Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI witmicrosoft · internet explorer | Orta5,0 | — | %14,5 | 31 Ara 2004 |
23İzleyin | CVE-2004-2364Kavram kanıtı | Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs thaphpx · phpx | Orta5,0 | — | %10,7 | 31 Ara 2004 |
26İzleyin | CVE-2004-2383Kavram kanıtı | Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard eventsmicrosoft · ie | Orta5,1 | — | %19,9 | 31 Ara 2004 |
48Planlayın | CVE-2004-2416Silahlaştırılmış | Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.youngzsoft · ccproxy | Yüksek7,5 | — | %60,5 | 31 Ara 2004 |
34İzleyin | CVE-2004-2425Kavram kanıtı | Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`axis · 2100 network camera | Yüksek7,5 | — | %13,5 | 31 Ara 2004 |
30İzleyin | CVE-2004-2434Kavram kanıtı | Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with "::{" (colon colon microsoft · ie | Orta5,0 | — | %32,7 | 31 Ara 2004 |
23İzleyin | CVE-2004-2442Kavram kanıtı | Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlf-secure · f-secure anti-virus | Orta5,0 | — | %10,6 | 31 Ara 2004 |
42Planlayın | CVE-2004-2466Silahlaştırılmış | chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possiblyefs software · easy chat server · CWE-119 | Orta5,0 | — | %74,6 | 31 Ara 2004 |
24İzleyin | CVE-2004-2482İstismar yok | Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does nomicrosoft · outlook | Orta5,0 | — | %12,7 | 31 Ara 2004 |
34İzleyin | CVE-2004-2501Kavram kanıtı | Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute amailenable · mailenable enterprise | Yüksek7,5 | — | %14,0 | 31 Ara 2004 |
45Planlayın | CVE-2004-2532Kavram kanıtı | Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary solarwinds · serv-u file server · CWE-255 | Kritik10,0 | — | %15,2 | 31 Ara 2004 |
23İzleyin | CVE-2004-2549Kavram kanıtı | Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a nortel · wlan access point 2220 | Orta5,0 | — | %10,4 | 31 Ara 2004 |
34İzleyin | CVE-2004-2652Kavram kanıtı | The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remosourcefire · snort | Yüksek7,8 | — | %11,1 | 31 Ara 2004 |
33İzleyin | CVE-2004-2685Kavram kanıtı | Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p) comyoungzsoft · ccproxy · CWE-119 | Yüksek7,5 | — | %10,6 | 31 Ara 2004 |
63Bu hafta | CVE-2004-2687Silahlaştırılmış | distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute aapple · xcode · CWE-16 | Kritik9,3 | — | %88,1 | 31 Ara 2004 |
40Planlayın | CVE-2004-2691Silahlaştırılmış | Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of 3com · 3c17205-us | Yüksek7,1 | — | %39,0 | 31 Ara 2004 |
- CVE-2003-120844Planlayın
Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session par
KritikCVSS 10,0İstismar yokEPSS %13oracle · oracle9i3 Ara 2004
- CVE-2004-039345Planlayın
Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format s
KritikCVSS 10,0Kavram kanıtıEPSS %17rlpr · rlpr6 Ara 2004
- CVE-2004-060862Bu hafta
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2
KritikCVSS 10,0SilahlaştırılmışEPSS %73nerf arena blast · nerf arena blast6 Ara 2004
- CVE-2004-061024İzleyin
The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusa
OrtaCVSS 5,0İstismar yokEPSS %14microsoft · mn-500 wireless base station6 Ara 2004
- CVE-2004-062761Bu hafta
The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scr
KritikCVSS 10,0Kavram kanıtıEPSS %69mysql · mysql6 Ara 2004
- CVE-2004-063325İzleyin
The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer ov
OrtaCVSS 5,0Kavram kanıtıEPSS %17ethereal group · ethereal6 Ara 2004
- CVE-2004-131928İzleyin
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a windo
OrtaCVSS 5,0İstismar yokEPSS %26nortel · ip softphone 205015 Ara 2004
- CVE-2004-132415İzleyin
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone
DüşükCVSS 2,6Kavram kanıtıEPSS %16microsoft · windows media player18 Ara 2004
- CVE-2004-132525İzleyin
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the
OrtaCVSS 5,0Kavram kanıtıEPSS %15microsoft · windows media player18 Ara 2004
- CVE-2005-006623İzleyin
The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router i
OrtaCVSS 5,0İstismar yokEPSS %10tcp · tcp22 Ara 2004
- CVE-2005-006724İzleyin
The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for att
OrtaCVSS 5,0İstismar yokEPSS %13tcp · tcp22 Ara 2004
- CVE-2005-006836İzleyin
The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to f
OrtaCVSS 5,0İstismar yokEPSS %54tcp · tcp22 Ara 2004
- CVE-2004-081633İzleyin
Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (app
YüksekCVSS 7,5Kavram kanıtıEPSS %11linux · linux kernel23 Ara 2004
- CVE-2004-084135İzleyin
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use dra
OrtaCVSS 5,0Kavram kanıtıEPSS %48avaya · ip600 media servers23 Ara 2004
- CVE-2004-084247Planlayın
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash
YüksekCVSS 7,5Kavram kanıtıEPSS %56avaya · ip600 media servers23 Ara 2004
- CVE-2004-086735İzleyin
Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which c
YüksekCVSS 7,5İstismar yokEPSS %17mozilla · firefox23 Ara 2004
- CVE-2004-130538İzleyin
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote
OrtaCVSS 5,0Kavram kanıtıEPSS %58nortel · ip softphone 205023 Ara 2004
- CVE-2004-136126İzleyin
Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers
OrtaCVSS 5,0İstismar yokEPSS %20microsoft · windows 200023 Ara 2004
- CVE-2004-137351Planlayın
Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrar
YüksekCVSS 7,5SilahlaştırılmışEPSS %70nullsoft · shoutcast server23 Ara 2004
- CVE-2004-131748Planlayın
Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbit
YüksekCVSS 7,5SilahlaştırılmışEPSS %60netcat · netcat27 Ara 2004
- CVE-2004-046524İzleyin
Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to rea
OrtaCVSS 5,0Kavram kanıtıEPSS %12openconnect · webconnect31 Ara 2004
- CVE-2004-056751Planlayın
The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and
YüksekCVSS 7,5Kavram kanıtıEPSS %68microsoft · windows 200031 Ara 2004
- CVE-2004-082637İzleyin
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modif
YüksekCVSS 7,5İstismar yokEPSS %22netscape · certificate server31 Ara 2004
- CVE-2004-098546Planlayın
Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable
KritikCVSS 10,0İstismar yokEPSS %20microsoft · ie31 Ara 2004
- CVE-2004-104333İzleyin
Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help
OrtaCVSS 5,0Kavram kanıtıEPSS %44microsoft · internet explorer31 Ara 2004
- CVE-2004-104929İzleyin
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp,
OrtaCVSS 5,1İstismar yokEPSS %30microsoft · windows 200031 Ara 2004
- CVE-2004-105060Bu hafta
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes
KritikCVSS 10,0Kavram kanıtıEPSS %67avaya · ip600 media servers31 Ara 2004
- CVE-2004-110440Planlayın
Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a
YüksekCVSS 7,5Kavram kanıtıEPSS %34microsoft · ie31 Ara 2004
- CVE-2004-115534İzleyin
Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another wind
YüksekCVSS 7,5İstismar yokEPSS %12microsoft · ie31 Ara 2004
- CVE-2004-116642Planlayın
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP comma
YüksekCVSS 7,5Kavram kanıtıEPSS %39microsoft · ie31 Ara 2004
- CVE-2004-117334İzleyin
Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Dynamic HTM
YüksekCVSS 7,5İstismar yokEPSS %11microsoft · internet explorer31 Ara 2004
- CVE-2004-130626İzleyin
Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote a
OrtaCVSS 5,1Kavram kanıtıEPSS %19microsoft · windows 200031 Ara 2004
- CVE-2004-138850Planlayın
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attack
YüksekCVSS 7,5SilahlaştırılmışEPSS %68berlios · gps daemon31 Ara 2004
- CVE-2004-138940Planlayın
Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCente
OrtaCVSS 6,0SilahlaştırılmışEPSS %9veritas · netbackup31 Ara 2004
- CVE-2004-139223İzleyin
PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to
OrtaCVSS 5,0Kavram kanıtıEPSS %10php · php31 Ara 2004
- CVE-2004-142335İzleyin
Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virt
YüksekCVSS 7,5Kavram kanıtıEPSS %15php-calendar · php-calendar31 Ara 2004
- CVE-2004-143734İzleyin
Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attackers to execute arbitr
YüksekCVSS 7,5Kavram kanıtıEPSS %13pavuk · pavuk31 Ara 2004
- CVE-2004-143935İzleyin
Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as (1) USER, (2) PASS, (3)
YüksekCVSS 7,5Kavram kanıtıEPSS %15sapporoworks · black jumbodog31 Ara 2004
- CVE-2004-145634İzleyin
filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.
YüksekCVSS 7,5Kavram kanıtıEPSS %13cvstrac · cvstrac31 Ara 2004
- CVE-2004-146460Bu hafta
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a craf
OrtaCVSS 5,9KEVSilahlaştırılmışEPSS %4cisco · ios31 Ara 2004
- CVE-2004-149124İzleyin
Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a short
OrtaCVSS 5,0Kavram kanıtıEPSS %12opera · opera browser31 Ara 2004
- CVE-2004-152045Planlayın
Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE comman
OrtaCVSS 4,6SilahlaştırılmışEPSS %88ipswitch · imail31 Ara 2004
- CVE-2004-154629İzleyin
Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a long (1) SAML, SOML
OrtaCVSS 5,0Kavram kanıtıEPSS %31alt-n · mdaemon31 Ara 2004
- CVE-2004-155040Planlayın
Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obta
YüksekCVSS 7,5SilahlaştırılmışEPSS %18motorola · wr850g31 Ara 2004
- CVE-2004-155851Planlayın
Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash)
YüksekCVSS 7,5SilahlaştırılmışEPSS %71ypops · ypops31 Ara 2004
- CVE-2004-156028İzleyin
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433
OrtaCVSS 5,0Kavram kanıtıEPSS %25microsoft · sql server31 Ara 2004
- CVE-2004-156153Planlayın
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of he
YüksekCVSS 7,5SilahlaştırılmışEPSS %77icecast · icecast31 Ara 2004
- CVE-2004-158423İzleyin
CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify e
OrtaCVSS 5,0Kavram kanıtıEPSS %11wordpress · wordpress31 Ara 2004
- CVE-2004-178239İzleyin
athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass paramete
YüksekCVSS 7,5Kavram kanıtıEPSS %28david maciejak · athena web registration31 Ara 2004
- CVE-2004-178920İzleyin
Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web s
OrtaCVSS 4,3Kavram kanıtıEPSS %11zyxel · zywall1031 Ara 2004
- CVE-2004-181254Planlayın
Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attacker
KritikCVSS 10,0İstismar yokEPSS %45broadcom · unicenter tng31 Ara 2004
- CVE-2004-189233İzleyin
Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attacke
YüksekCVSS 7,5Kavram kanıtıEPSS %10emule · emule31 Ara 2004
- CVE-2004-189845Planlayın
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a
KritikCVSS 10,0Kavram kanıtıEPSS %16tildeslash · monit31 Ara 2004
- CVE-2004-207440Planlayın
Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1
OrtaCVSS 5,0SilahlaştırılmışEPSS %35bolintech · dream ftp server31 Ara 2004
- CVE-2004-210424İzleyin
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP a
OrtaCVSS 5,0Kavram kanıtıEPSS %11novell · netware31 Ara 2004
- CVE-2004-211160Bu hafta
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via
YüksekCVSS 8,5SilahlaştırılmışEPSS %86solarwinds · serv-u file server31 Ara 2004
- CVE-2004-211545Planlayın
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitra
OrtaCVSS 6,8Kavram kanıtıEPSS %58oracle · http server31 Ara 2004
- CVE-2004-213728İzleyin
Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients o
OrtaCVSS 5,0İstismar yokEPSS %26microsoft · outlook express31 Ara 2004
- CVE-2004-216734İzleyin
Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the exp
YüksekCVSS 7,5Kavram kanıtıEPSS %14latex2rtf · latex2rtf31 Ara 2004
- CVE-2004-217924İzleyin
asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a
OrtaCVSS 5,0İstismar yokEPSS %12microsoft · frontpage31 Ara 2004
- CVE-2004-222140Planlayın
Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTT
YüksekCVSS 7,5SilahlaştırılmışEPSS %34mercantec · softcart31 Ara 2004
- CVE-2004-226234İzleyin
ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary co
YüksekCVSS 7,5Kavram kanıtıEPSS %14e107 · e10731 Ara 2004
- CVE-2004-227152Planlayın
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
YüksekCVSS 7,5SilahlaştırılmışEPSS %71minishare · minimal http server31 Ara 2004
- CVE-2004-227544Planlayın
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter.
KritikCVSS 10,0Kavram kanıtıEPSS %12i-mall commerce · i-mall.cgi31 Ara 2004
- CVE-2004-228947Planlayın
Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellCl
KritikCVSS 10,0Kavram kanıtıEPSS %23microsoft · windows xp31 Ara 2004
- CVE-2004-229133İzleyin
Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Hel
YüksekCVSS 7,5Kavram kanıtıEPSS %10microsoft · ie31 Ara 2004
- CVE-2004-229224İzleyin
Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a long STATUS command to
OrtaCVSS 5,0İstismar yokEPSS %12alt-n · mdaemon31 Ara 2004
- CVE-2004-229933İzleyin
Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long
YüksekCVSS 7,5Kavram kanıtıEPSS %10omnicron · omnihttpd31 Ara 2004
- CVE-2004-230724İzleyin
Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI wit
OrtaCVSS 5,0İstismar yokEPSS %14microsoft · internet explorer31 Ara 2004
- CVE-2004-236423İzleyin
Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs tha
OrtaCVSS 5,0Kavram kanıtıEPSS %10phpx · phpx31 Ara 2004
- CVE-2004-238326İzleyin
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events
OrtaCVSS 5,1Kavram kanıtıEPSS %19microsoft · ie31 Ara 2004
- CVE-2004-241648Planlayın
Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.
YüksekCVSS 7,5SilahlaştırılmışEPSS %60youngzsoft · ccproxy31 Ara 2004
- CVE-2004-242534İzleyin
Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`
YüksekCVSS 7,5Kavram kanıtıEPSS %13axis · 2100 network camera31 Ara 2004
- CVE-2004-243430İzleyin
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with "::{" (colon colon
OrtaCVSS 5,0Kavram kanıtıEPSS %32microsoft · ie31 Ara 2004
- CVE-2004-244223İzleyin
Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earl
OrtaCVSS 5,0Kavram kanıtıEPSS %10f-secure · f-secure anti-virus31 Ara 2004
- CVE-2004-246642Planlayın
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly
OrtaCVSS 5,0SilahlaştırılmışEPSS %74efs software · easy chat server31 Ara 2004
- CVE-2004-248224İzleyin
Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does no
OrtaCVSS 5,0İstismar yokEPSS %12microsoft · outlook31 Ara 2004
- CVE-2004-250134İzleyin
Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute a
YüksekCVSS 7,5Kavram kanıtıEPSS %14mailenable · mailenable enterprise31 Ara 2004
- CVE-2004-253245Planlayın
Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary
KritikCVSS 10,0Kavram kanıtıEPSS %15solarwinds · serv-u file server31 Ara 2004
- CVE-2004-254923İzleyin
Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a
OrtaCVSS 5,0Kavram kanıtıEPSS %10nortel · wlan access point 222031 Ara 2004
- CVE-2004-265234İzleyin
The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remo
YüksekCVSS 7,8Kavram kanıtıEPSS %11sourcefire · snort31 Ara 2004
- CVE-2004-268533İzleyin
Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p) com
YüksekCVSS 7,5Kavram kanıtıEPSS %10youngzsoft · ccproxy31 Ara 2004
- CVE-2004-268763Bu hafta
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute a
KritikCVSS 9,3SilahlaştırılmışEPSS %88apple · xcode31 Ara 2004
- CVE-2004-269140Planlayın
Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of
YüksekCVSS 7,1SilahlaştırılmışEPSS %393com · 3c17205-us31 Ara 2004