Yayın tarihine göre
Şubat 2005: sömürülen ve yeni ciddi CVE kayıtları
15 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2005-0101Kavram kanıtı | Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code newspost · newspost | Yüksek7,5 | — | %16,1 | 1 Şub 2005 |
34İzleyin | CVE-2005-0245Kavram kanıtı | Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to postgresql · postgresql | Yüksek7,5 | — | %14,4 | 1 Şub 2005 |
35İzleyin | CVE-2005-0174İstismar yok | Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP ssquid · squid | Orta5,0 | — | %50,4 | 7 Şub 2005 |
32İzleyin | CVE-2005-0175İstismar yok | Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.squid · squid | Orta5,0 | — | %40,7 | 7 Şub 2005 |
38İzleyin | CVE-2004-0848İstismar yok | Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing longmicrosoft · office | Yüksek7,5 | — | %27,4 | 8 Şub 2005 |
36İzleyin | CVE-2005-0233İstismar yok | The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain namozilla · camino | Yüksek7,5 | — | %20,3 | 8 Şub 2005 |
36İzleyin | CVE-2005-0249İstismar yok | Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX symantec · antivirus scan engine | Yüksek7,5 | — | %18,8 | 8 Şub 2005 |
34İzleyin | CVE-2004-0937Kavram kanıtı | Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirussophos · sophos anti-virus | Yüksek7,5 | — | %14,9 | 9 Şub 2005 |
43Planlayın | CVE-2004-0941İstismar yok | Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malgd graphics library · gdlib | Kritik10,0 | — | %10,6 | 9 Şub 2005 |
38İzleyin | CVE-2004-0942Kavram kanıtı | Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIapache · http server | Orta5,0 | — | %58,7 | 9 Şub 2005 |
50Planlayın | CVE-2004-0963İstismar yok | Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of servicemicrosoft · word | Kritik10,0 | — | %32,4 | 9 Şub 2005 |
59Planlayın | CVE-2004-0964Silahlaştırılmış | Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary cozinf · zinf | Kritik10,0 | — | %62,6 | 9 Şub 2005 |
51Planlayın | CVE-2004-0978İstismar yok | Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online microsoft · internet explorer · CWE-787 | Kritik10,0 | — | %38,3 | 9 Şub 2005 |
24İzleyin | CVE-2005-0452Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrarmicrosoft · asp.net | Orta4,3 | — | %23,3 | 16 Şub 2005 |
41Planlayın | CVE-2005-0511Silahlaştırılmış | misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitraryjelsoft · vbulletin | Yüksek7,5 | — | %35,8 | 21 Şub 2005 |
- CVE-2005-010135İzleyin
Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code
YüksekCVSS 7,5Kavram kanıtıEPSS %16newspost · newspost1 Şub 2005
- CVE-2005-024534İzleyin
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to
YüksekCVSS 7,5Kavram kanıtıEPSS %14postgresql · postgresql1 Şub 2005
- CVE-2005-017435İzleyin
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP s
OrtaCVSS 5,0İstismar yokEPSS %50squid · squid7 Şub 2005
- CVE-2005-017532İzleyin
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.
OrtaCVSS 5,0İstismar yokEPSS %40squid · squid7 Şub 2005
- CVE-2004-084838İzleyin
Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long
YüksekCVSS 7,5İstismar yokEPSS %27microsoft · office8 Şub 2005
- CVE-2005-023336İzleyin
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain na
YüksekCVSS 7,5İstismar yokEPSS %20mozilla · camino8 Şub 2005
- CVE-2005-024936İzleyin
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX
YüksekCVSS 7,5İstismar yokEPSS %18symantec · antivirus scan engine8 Şub 2005
- CVE-2004-093734İzleyin
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus
YüksekCVSS 7,5Kavram kanıtıEPSS %14sophos · sophos anti-virus9 Şub 2005
- CVE-2004-094143Planlayın
Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via mal
KritikCVSS 10,0İstismar yokEPSS %10gd graphics library · gdlib9 Şub 2005
- CVE-2004-094238İzleyin
Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MI
OrtaCVSS 5,0Kavram kanıtıEPSS %58apache · http server9 Şub 2005
- CVE-2004-096350Planlayın
Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service
KritikCVSS 10,0İstismar yokEPSS %32microsoft · word9 Şub 2005
- CVE-2004-096459Planlayın
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary co
KritikCVSS 10,0SilahlaştırılmışEPSS %62zinf · zinf9 Şub 2005
- CVE-2004-097851Planlayın
Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online
KritikCVSS 10,0İstismar yokEPSS %38microsoft · internet explorer9 Şub 2005
- CVE-2005-045224İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrar
OrtaCVSS 4,3Kavram kanıtıEPSS %23microsoft · asp.net16 Şub 2005
- CVE-2005-051141Planlayın
misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary
YüksekCVSS 7,5SilahlaştırılmışEPSS %35jelsoft · vbulletin21 Şub 2005