Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: декабрь 2005 г.

44 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2005-3945
    35Наблюдать

    The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predicta

    ВысокаяCVSS 7,8Эксплойта нетEPSS 12 %

    microsoft · windows 20001 дек. 2005 г.

  • CVE-2005-2923
    19Наблюдать

    The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause a denial of service

    СредняяCVSS 4,0Эксплойта нетEPSS 10 %

    ipswitch · imail server6 дек. 2005 г.

  • CVE-2005-4089
    35Наблюдать

    Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using t

    ВысокаяCVSS 7,1Эксплойта нетEPSS 22 %

    microsoft · ie8 дек. 2005 г.

  • CVE-2005-4131
    36Наблюдать

    Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att

    СредняяCVSS 6,8Proof of conceptEPSS 31 %

    microsoft · excel9 дек. 2005 г.

  • CVE-2005-4134
    24Наблюдать

    Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumptio

    СредняяCVSS 5,0Proof of conceptEPSS 12 %

    mozilla · firefox9 дек. 2005 г.

  • CVE-2005-4145
    40В плане

    The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space

    СредняяCVSS 6,5Готовый эксплойтEPSS 43 %

    lyris technologies inc · listmanager10 дек. 2005 г.

  • CVE-2005-4197
    34Наблюдать

    tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is exec

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    nortel · ssl vpn13 дек. 2005 г.

  • CVE-2005-3352
    39Наблюдать

    Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev a

    СредняяCVSS 4,3Эксплойта нетEPSS 73 %

    apache · http server13 дек. 2005 г.

  • CVE-2005-2829
    26Наблюдать

    Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overla

    СредняяCVSS 5,1Эксплойта нетEPSS 18 %

    microsoft · ie14 дек. 2005 г.

  • CVE-2005-2830
    31Наблюдать

    Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext,

    СредняяCVSS 5,0Эксплойта нетEPSS 35 %

    microsoft · ie14 дек. 2005 г.

  • CVE-2005-2831
    39Наблюдать

    Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute a

    ВысокаяCVSS 7,5Эксплойта нетEPSS 30 %

    microsoft · ie14 дек. 2005 г.

  • CVE-2005-3652
    35Наблюдать

    Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a lon

    ВысокаяCVSS 7,5Эксплойта нетEPSS 15 %

    citrix · ica program neighborhood client16 дек. 2005 г.

  • CVE-2005-4360
    57В плане

    The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitr

    ВысокаяCVSS 7,8Proof of conceptEPSS 86 %

    microsoft · internet information services19 дек. 2005 г.

  • CVE-2005-4411
    49В плане

    Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105.

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 64 %

    david harris · mercury mail transport system20 дек. 2005 г.

  • CVE-2005-4267
    50В плане

    Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends wi

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 66 %

    qualcomm · worldmail21 дек. 2005 г.

  • CVE-2005-4459
    44В плане

    Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, a

    КритическаяCVSS 10,0Эксплойта нетEPSS 14 %

    vmware · ace21 дек. 2005 г.

  • CVE-2005-4466
    34Наблюдать

    Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to caus

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    interactive intelligence · interaction sip proxy21 дек. 2005 г.

  • CVE-2005-4504
    35Наблюдать

    The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allo

    ВысокаяCVSS 7,8Proof of conceptEPSS 11 %

    apple · safari22 дек. 2005 г.

  • CVE-2005-4556
    33Наблюдать

    PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    icewarp · web mail28 дек. 2005 г.

  • CVE-2005-4560
    56В плане

    The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Wind

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 86 %

    microsoft · windows 2003 server28 дек. 2005 г.

  • CVE-2005-4573
    34Наблюдать

    PHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote attackers to execute arbitrary code via a

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    plogger · plogger29 дек. 2005 г.

  • CVE-2005-1924
    40В плане

    The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharact

    КритическаяCVSS 9,3Proof of conceptEPSS 10 %

    squirrelmail · gpg plugin31 дек. 2005 г.

  • CVE-2005-1939
    39Наблюдать

    Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot)

    СредняяCVSS 5,0Proof of conceptEPSS 63 %

    ipswitch · whatsup small business31 дек. 2005 г.

  • CVE-2005-2340
    38Наблюдать

    Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Ima

    ВысокаяCVSS 7,5Proof of conceptEPSS 25 %

    apple · quicktime31 дек. 2005 г.

  • CVE-2005-3357
    28Наблюдать

    mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote a

    СредняяCVSS 5,4Эксплойта нетEPSS 24 %

    apache · http server31 дек. 2005 г.

  • CVE-2005-3525
    43В плане

    Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remot

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    adobe · shockwave player31 дек. 2005 г.

  • CVE-2005-3539
    34Наблюдать

    Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    hylafax · hylafax31 дек. 2005 г.

  • CVE-2005-3653
    46В плане

    Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before

    КритическаяCVSS 10,0Эксплойта нетEPSS 18 %

    ca · brightstor arcserve backup31 дек. 2005 г.

  • CVE-2005-4085
    50В плане

    Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote at

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 65 %

    bluecoat · webproxy31 дек. 2005 г.

  • CVE-2005-4593
    34Наблюдать

    PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled, allows remote attackers to

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    joshua eichorn · phpdocumentor31 дек. 2005 г.

  • CVE-2005-4703
    28Наблюдать

    Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains

    СредняяCVSS 5,0Proof of conceptEPSS 25 %

    apache · tomcat31 дек. 2005 г.

  • CVE-2005-4717
    25Наблюдать

    Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows

    СредняяCVSS 5,0Proof of conceptEPSS 16 %

    microsoft · ie31 дек. 2005 г.

  • CVE-2005-4718
    23Наблюдать

    Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    opera · opera browser31 дек. 2005 г.

  • CVE-2005-4734
    42В плане

    Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remo

    СредняяCVSS 6,4Готовый эксплойтEPSS 55 %

    rsa · authentication agent for web31 дек. 2005 г.

  • CVE-2005-4797
    40В плане

    Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to delete arbitrary fi

    СредняяCVSS 5,0Готовый эксплойтEPSS 29 %

    sun · solaris31 дек. 2005 г.

  • CVE-2005-4807
    34Наблюдать

    Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils befo

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    gnu · binutils31 дек. 2005 г.

  • CVE-2005-4810
    24Наблюдать

    Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Conten

    СредняяCVSS 5,0Эксплойта нетEPSS 14 %

    microsoft · internet explorer31 дек. 2005 г.

  • CVE-2005-4816
    34Наблюдать

    Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute a

    ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %

    proftpd project · proftpd31 дек. 2005 г.

  • CVE-2005-4823
    44В плане

    Buffer overflow in the HP HTTP Server 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attackers to execute arbitrar

    КритическаяCVSS 10,0Эксплойта нетEPSS 12 %

    hp · http server31 дек. 2005 г.

  • CVE-2005-4827
    33Наблюдать

    Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outs

    ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %

    microsoft · ie31 дек. 2005 г.

  • CVE-2005-4832
    43В плане

    SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with eleva

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 42 %

    oracle · oracle10g31 дек. 2005 г.

  • CVE-2005-4840
    20Наблюдать

    The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL derefer

    СредняяCVSS 4,3Эксплойта нетEPSS 11 %

    microsoft · outlook express book control31 дек. 2005 г.

  • CVE-2005-4843
    34Наблюдать

    The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of th

    ВысокаяCVSS 7,8Эксплойта нетEPSS 11 %

    microsoft · internet explorer31 дек. 2005 г.

  • CVE-2005-4844
    32Наблюдать

    The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of t

    ВысокаяCVSS 7,1Эксплойта нетEPSS 12 %

    microsoft · internet explorer31 дек. 2005 г.