Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: ноябрь 2005 г.

32 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2005-3388
    32Наблюдать

    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to injec

    СредняяCVSS 4,3Proof of conceptEPSS 48 %

    php · php1 нояб. 2005 г.

  • CVE-2005-3390
    50В плане

    The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to mod

    ВысокаяCVSS 7,5Proof of conceptEPSS 65 %

    php · php1 нояб. 2005 г.

  • CVE-2005-3398
    40В плане

    The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method,

    СредняяCVSS 4,3Готовый эксплойтEPSS 13 %

    sun · solaris1 нояб. 2005 г.

  • CVE-2005-3404
    33Наблюдать

    Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the sect

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    adaptive technology resource centre · atutor1 нояб. 2005 г.

  • CVE-2005-3486
    33Наблюдать

    Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1)

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    scorched 3d · scorched 3d3 нояб. 2005 г.

  • CVE-2005-3488
    34Наблюдать

    Scorched 3D 39.1 (bf) and earlier allows remote attackers to cause a denial of service (long loop and server hang) via a negative numplayers

    ВысокаяCVSS 7,8Proof of conceptEPSS 10 %

    scorched 3d · scorched 3d3 нояб. 2005 г.

  • CVE-2005-3498
    40В плане

    IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled,

    СредняяCVSS 4,3Готовый эксплойтEPSS 11 %

    ibm · websphere application server3 нояб. 2005 г.

  • CVE-2005-3507
    24Наблюдать

    Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, and gain privileges vi

    СредняяCVSS 5,0Proof of conceptEPSS 12 %

    cutephp · cutenews6 нояб. 2005 г.

  • CVE-2005-3524
    46В плане

    Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a

    КритическаяCVSS 10,0Proof of conceptEPSS 21 %

    linux-ftpd-ssl · linux-ftpd-ssl6 нояб. 2005 г.

  • CVE-2005-3559
    26Наблюдать

    Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a ..

    СредняяCVSS 5,0Proof of conceptEPSS 20 %

    digium · asterisk16 нояб. 2005 г.

  • CVE-2005-3560
    35Наблюдать

    Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 thr

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    zonelabs · zonealarm16 нояб. 2005 г.

  • CVE-2005-3589
    47В плане

    Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER

    ВысокаяCVSS 7,8Готовый эксплойтEPSS 52 %

    filezilla · filezilla server terminal16 нояб. 2005 г.

  • CVE-2005-3591
    33Наблюдать

    Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attacker

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    macromedia · flash player16 нояб. 2005 г.

  • CVE-2005-3595
    45В плане

    By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows remote attackers to

    КритическаяCVSS 10,0Эксплойта нетEPSS 16 %

    microsoft · windows xp16 нояб. 2005 г.

  • CVE-2005-3634
    25Наблюдать

    frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect

    СредняяCVSS 5,0Proof of conceptEPSS 17 %

    sap · sap web application server16 нояб. 2005 г.

  • CVE-2005-3644
    44В плане

    PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows r

    ВысокаяCVSS 7,8Proof of conceptEPSS 42 %

    microsoft · windows 200017 нояб. 2005 г.

  • CVE-2005-3116
    48В плане

    Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to

    КритическаяCVSS 10,0Proof of conceptEPSS 27 %

    symantec veritas · netbackup18 нояб. 2005 г.

  • CVE-2005-3314
    50В плане

    Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb argu

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 65 %

    novell · netmail18 нояб. 2005 г.

  • CVE-2005-2629
    24Наблюдать

    Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to exec

    СредняяCVSS 5,1Proof of conceptEPSS 12 %

    realnetworks · helix player18 нояб. 2005 г.

  • CVE-2005-3683
    51В плане

    Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 71 %

    freeftpd · freeftpd18 нояб. 2005 г.

  • CVE-2005-3684
    34Наблюдать

    Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a denial of service (app

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    freeftpd · freeftpd18 нояб. 2005 г.

  • CVE-2005-3694
    35Наблюдать

    centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service (segmentation fault a

    ВысокаяCVSS 7,8Proof of conceptEPSS 11 %

    centericq · centericq20 нояб. 2005 г.

  • CVE-2005-3737
    24Наблюдать

    Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a

    СредняяCVSS 5,1Proof of conceptEPSS 13 %

    inkscape · inkscape21 нояб. 2005 г.

  • CVE-2005-3745
    25Наблюдать

    Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web

    СредняяCVSS 4,3Proof of conceptEPSS 25 %

    apache · struts22 нояб. 2005 г.

  • CVE-2005-3757
    42В плане

    The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive inf

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 41 %

    google · mini search appliance22 нояб. 2005 г.

  • CVE-2005-3758
    23Наблюдать

    Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to i

    СредняяCVSS 4,3Эксплойта нетEPSS 19 %

    google · mini search appliance22 нояб. 2005 г.

  • CVE-2005-3774
    25Наблюдать

    Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the

    СредняяCVSS 5,0Proof of conceptEPSS 18 %

    cisco · pix22 нояб. 2005 г.

  • CVE-2005-3792
    43В плане

    Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows r

    ВысокаяCVSS 7,5Proof of conceptEPSS 44 %

    francisco burzi · php-nuke24 нояб. 2005 г.

  • CVE-2005-3862
    36Наблюдать

    Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives.

    ВысокаяCVSS 7,5Proof of conceptEPSS 20 %

    unalz · unalz29 нояб. 2005 г.

  • CVE-2005-2123
    48В плане

    Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remot

    ВысокаяCVSS 7,5Proof of conceptEPSS 61 %

    microsoft · windows 200029 нояб. 2005 г.

  • CVE-2005-2124
    47В плане

    Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to

    ВысокаяCVSS 7,6Proof of conceptEPSS 55 %

    microsoft · windows 200029 нояб. 2005 г.

  • CVE-2005-3912
    34Наблюдать

    Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled, all

    ВысокаяCVSS 7,5Эксплойта нетEPSS 14 %

    webmin · webmin30 нояб. 2005 г.