İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2005: sömürülen ve yeni ciddi CVE kayıtları

12 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2004-0790
    44Planlayın

    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error

    OrtaCVSS 5,0Kavram kanıtıEPSS %80

    microsoft · windows 200012 Nis 2005

  • CVE-2004-0791
    26İzleyin

    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connectio

    OrtaCVSS 5,0Kavram kanıtıEPSS %20

    sun · solaris12 Nis 2005

  • CVE-2005-0555
    48Planlayın

    Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5Kavram kanıtıEPSS %58

    microsoft · internet explorer12 Nis 2005

  • CVE-2005-0562
    37İzleyin

    GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image wi

    YüksekCVSS 7,5İstismar yokEPSS %23

    microsoft · msn messenger12 Nis 2005

  • CVE-2005-1099
    60Bu hafta

    Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a networ

    KritikCVSS 10,0SilahlaştırılmışEPSS %67

    salim gasmi · gld12 Nis 2005

  • CVE-2005-0129
    33İzleyin

    The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" var

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    berlios · konversation14 Nis 2005

  • CVE-2005-0718
    24İzleyin

    Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a

    OrtaCVSS 5,0İstismar yokEPSS %12

    squid · squid14 Nis 2005

  • CVE-2005-0684
    61Bu hafta

    Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP

    KritikCVSS 10,0SilahlaştırılmışEPSS %68

    mysql · maxdb25 Nis 2005

  • CVE-2005-1275
    24İzleyin

    Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    imagemagick · imagemagick25 Nis 2005

  • CVE-2004-1488
    24İzleyin

    wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote mali

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    gnu · wget27 Nis 2005

  • CVE-2005-0416
    42Planlayın

    The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote

    YüksekCVSS 7,5Kavram kanıtıEPSS %40

    microsoft · windows 200027 Nis 2005

  • CVE-2005-0420
    31İzleyin

    Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a lin

    OrtaCVSS 5,8Kavram kanıtıEPSS %25

    microsoft · exchange server27 Nis 2005