Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: октябрь 2005 г.

32 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2005-2758
    44В плане

    Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute a

    КритическаяCVSS 10,0Эксплойта нетEPSS 13 %

    symantec · antivirus scan engine5 окт. 2005 г.

  • CVE-2005-3142
    52В плане

    Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arb

    КритическаяCVSS 10,0Эксплойта нетEPSS 41 %

    kaspersky lab · kaspersky anti-virus5 окт. 2005 г.

  • CVE-2005-3155
    49В плане

    Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code.

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 63 %

    mailenable · mailenable enterprise5 окт. 2005 г.

  • CVE-2005-1978
    46В плане

    COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbi

    ВысокаяCVSS 7,5Proof of conceptEPSS 53 %

    microsoft · windows 200012 окт. 2005 г.

  • CVE-2005-1979
    30Наблюдать

    Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit

    СредняяCVSS 5,0Proof of conceptEPSS 32 %

    microsoft · windows 200012 окт. 2005 г.

  • CVE-2005-1980
    30Наблюдать

    Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service hang) via a crafte

    СредняяCVSS 5,0Proof of conceptEPSS 33 %

    microsoft · windows 200012 окт. 2005 г.

  • CVE-2005-2119
    31Наблюдать

    The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of mem

    СредняяCVSS 5,0Proof of conceptEPSS 35 %

    microsoft · windows 200012 окт. 2005 г.

  • CVE-2005-2128
    32Наблюдать

    QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a craft

    СредняяCVSS 5,0Эксплойта нетEPSS 40 %

    microsoft · windows media player12 окт. 2005 г.

  • CVE-2005-2715
    58В плане

    Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and

    КритическаяCVSS 10,0Proof of conceptEPSS 60 %

    symantec veritas · netbackup data and business center12 окт. 2005 г.

  • CVE-2005-1985
    41В плане

    The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attacker

    ВысокаяCVSS 7,5Эксплойта нетEPSS 37 %

    microsoft · windows 200013 окт. 2005 г.

  • CVE-2005-1987
    43В плане

    Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to

    ВысокаяCVSS 7,5Эксплойта нетEPSS 43 %

    microsoft · exchange server13 окт. 2005 г.

  • CVE-2005-2120
    45В плане

    Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remo

    СредняяCVSS 6,5Готовый эксплойтEPSS 61 %

    microsoft · windows 200013 окт. 2005 г.

  • CVE-2005-2943
    35Наблюдать

    Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line op

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    davide libenzi · xmail13 окт. 2005 г.

  • CVE-2005-3190
    49В плане

    Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to e

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 64 %

    broadcom · igateway13 окт. 2005 г.

  • CVE-2005-2661
    34Наблюдать

    Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers t

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    up-imapproxy · up-imapproxy14 окт. 2005 г.

  • CVE-2005-3202
    30Наблюдать

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary

    СредняяCVSS 6,8Proof of conceptEPSS 10 %

    oracle · html db14 окт. 2005 г.

  • CVE-2005-3204
    23Наблюдать

    Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query

    СредняяCVSS 4,3Proof of conceptEPSS 20 %

    oracle · application server14 окт. 2005 г.

  • CVE-2005-3206
    26Наблюдать

    iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop)

    СредняяCVSS 5,0Proof of conceptEPSS 21 %

    oracle · database server14 окт. 2005 г.

  • CVE-2005-3207
    26Наблюдать

    The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a user

    СредняяCVSS 5,0Proof of conceptEPSS 19 %

    oracle · forms14 окт. 2005 г.

  • CVE-2005-3231
    24Наблюдать

    Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detection via a malicious ex

    СредняяCVSS 5,1Эксплойта нетEPSS 14 %

    cat · quick heal14 окт. 2005 г.

  • CVE-2005-3120
    46В плане

    Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certai

    КритическаяCVSS 9,8Proof of conceptEPSS 23 %

    invisible-island · lynx17 окт. 2005 г.

  • CVE-2005-3252
    55В плане

    Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code v

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 83 %

    sourcefire · snort18 окт. 2005 г.

  • CVE-2005-2117
    31Наблюдать

    Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters

    СредняяCVSS 5,1Эксплойта нетEPSS 37 %

    microsoft · windows explorer21 окт. 2005 г.

  • CVE-2005-2118
    34Наблюдать

    Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary com

    СредняяCVSS 5,1Эксплойта нетEPSS 47 %

    microsoft · windows 200021 окт. 2005 г.

  • CVE-2005-2122
    54В плане

    Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a sh

    КритическаяCVSS 10,0Эксплойта нетEPSS 46 %

    microsoft · windows 200021 окт. 2005 г.

  • CVE-2005-2126
    14Наблюдать

    The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" i

    НизкаяCVSS 2,6Эксплойта нетEPSS 14 %

    microsoft · ie21 окт. 2005 г.

  • CVE-2005-3277
    46В плане

    The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or si

    КритическаяCVSS 10,0Proof of conceptEPSS 21 %

    hp · hp-ux21 окт. 2005 г.

  • CVE-2005-3299
    25Наблюдать

    PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files vi

    СредняяCVSS 5,0Proof of conceptEPSS 15 %

    phpmyadmin · phpmyadmin23 окт. 2005 г.

  • CVE-2005-2970
    24Наблюдать

    Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memor

    СредняяCVSS 5,0Эксплойта нетEPSS 14 %

    apache · http server25 окт. 2005 г.

  • CVE-2005-3312
    21Наблюдать

    The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML

    СредняяCVSS 4,3Эксплойта нетEPSS 11 %

    microsoft · internet explorer26 окт. 2005 г.

  • CVE-2005-3243
    33Наблюдать

    Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    ethereal group · ethereal27 окт. 2005 г.

  • CVE-2005-3330
    35Наблюдать

    The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows rem

    ВысокаяCVSS 7,5Proof of conceptEPSS 17 %

    snoopy · snoopy27 окт. 2005 г.