По дате публикации
Эксплуатируемые и новые серьёзные CVE: февраль 2006 г.
19 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
23Наблюдать | CVE-2006-0528Proof of concept | The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (gnome · evolution | Средняя5,0 | — | 11,0 % | 2 февр. 2006 г. |
41В плане | CVE-2006-0295Готовый эксплойт | Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbimozilla · firefox | Средняя5,1 | — | 71,3 % | 2 февр. 2006 г. |
42В плане | CVE-2006-0537Proof of concept | Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execute arbitrary code vikinesphere corporation · exchange pop3 | Высокая7,5 | — | 41,5 % | 3 февр. 2006 г. |
37Наблюдать | CVE-2006-0544Proof of concept | urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crasmicrosoft · ie | Высокая7,5 | — | 21,7 % | 3 февр. 2006 г. |
52В плане | CVE-2006-0564Готовый эксплойт | Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTMmicrosoft · html help | Высокая7,5 | — | 71,6 % | 6 февр. 2006 г. |
25Наблюдать | CVE-2006-0585Эксплойта нет | jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (application crash) via microsoft · internet explorer | Средняя5,0 | — | 15,2 % | 7 февр. 2006 г. |
49В плане | CVE-2006-0005Proof of concept | Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and setmicrosoft · windows-nt · CWE-119 | Критическая9,3 | — | 38,4 % | 14 февр. 2006 г. |
36Наблюдать | CVE-2006-0013Эксплойта нет | Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authemicrosoft · windows 2003 server | Средняя6,5 | — | 34,8 % | 14 февр. 2006 г. |
50В плане | CVE-2006-0021Proof of concept | Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet microsoft · windows 2003 server · CWE-119 | Высокая7,8 | — | 62,8 % | 14 февр. 2006 г. |
29Наблюдать | CVE-2006-0004Эксплойта нет | Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive infomicrosoft · office | Средняя5,0 | — | 31,5 % | 14 февр. 2006 г. |
52В плане | CVE-2006-0006Proof of concept | Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Winmicrosoft · windows media player · CWE-119 | Критическая9,3 | — | 49,5 % | 14 февр. 2006 г. |
29Наблюдать | CVE-2006-0705Эксплойта нет | Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIXattachmatewrq · reflection for secure it server · CWE-134 | Средняя6,5 | — | 10,1 % | 15 февр. 2006 г. |
51В плане | CVE-2006-0460Готовый эксплойт | Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long error messages.bomberclone · bomberclone | Высокая7,5 | — | 68,3 % | 16 февр. 2006 г. |
14Наблюдать | CVE-2006-0753Эксплойта нет | Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory consmicrosoft · ie | Низкая2,6 | — | 11,7 % | 17 февр. 2006 г. |
34Наблюдать | CVE-2006-0830Эксплойта нет | The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute amicrosoft · internet explorer | Высокая7,5 | — | 14,2 % | 21 февр. 2006 г. |
40В плане | CVE-2006-0848Готовый эксплойт | The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commapple · mac os x · CWE-16 | Средняя5,1 | — | 58,1 % | 22 февр. 2006 г. |
33Наблюдать | CVE-2006-0720Proof of concept | Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possiblnullsoft · winamp | Высокая7,6 | — | 10,5 % | 23 февр. 2006 г. |
51В плане | CVE-2006-0900Готовый эксплойт | nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the Protfreebsd · freebsd | Высокая7,8 | — | 65,0 % | 27 февр. 2006 г. |
25Наблюдать | CVE-2006-0911Proof of concept | NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted requeipswitch · whatsup · CWE-399 | Средняя5,0 | — | 16,2 % | 28 февр. 2006 г. |
- CVE-2006-052823Наблюдать
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (
СредняяCVSS 5,0Proof of conceptEPSS 11 %gnome · evolution2 февр. 2006 г.
- CVE-2006-029541В плане
Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbi
СредняяCVSS 5,1Готовый эксплойтEPSS 71 %mozilla · firefox2 февр. 2006 г.
- CVE-2006-053742В плане
Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execute arbitrary code vi
ВысокаяCVSS 7,5Proof of conceptEPSS 41 %kinesphere corporation · exchange pop33 февр. 2006 г.
- CVE-2006-054437Наблюдать
urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application cras
ВысокаяCVSS 7,5Proof of conceptEPSS 21 %microsoft · ie3 февр. 2006 г.
- CVE-2006-056452В плане
Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTM
ВысокаяCVSS 7,5Готовый эксплойтEPSS 71 %microsoft · html help6 февр. 2006 г.
- CVE-2006-058525Наблюдать
jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (application crash) via
СредняяCVSS 5,0Эксплойта нетEPSS 15 %microsoft · internet explorer7 февр. 2006 г.
- CVE-2006-000549В плане
Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set
КритическаяCVSS 9,3Proof of conceptEPSS 38 %microsoft · windows-nt14 февр. 2006 г.
- CVE-2006-001336Наблюдать
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authe
СредняяCVSS 6,5Эксплойта нетEPSS 34 %microsoft · windows 2003 server14 февр. 2006 г.
- CVE-2006-002150В плане
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet
ВысокаяCVSS 7,8Proof of conceptEPSS 62 %microsoft · windows 2003 server14 февр. 2006 г.
- CVE-2006-000429Наблюдать
Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive info
СредняяCVSS 5,0Эксплойта нетEPSS 31 %microsoft · office14 февр. 2006 г.
- CVE-2006-000652В плане
Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Win
КритическаяCVSS 9,3Proof of conceptEPSS 49 %microsoft · windows media player14 февр. 2006 г.
- CVE-2006-070529Наблюдать
Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX
СредняяCVSS 6,5Эксплойта нетEPSS 10 %attachmatewrq · reflection for secure it server15 февр. 2006 г.
- CVE-2006-046051В плане
Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long error messages.
ВысокаяCVSS 7,5Готовый эксплойтEPSS 68 %bomberclone · bomberclone16 февр. 2006 г.
- CVE-2006-075314Наблюдать
Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory cons
НизкаяCVSS 2,6Эксплойта нетEPSS 11 %microsoft · ie17 февр. 2006 г.
- CVE-2006-083034Наблюдать
The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute a
ВысокаяCVSS 7,5Эксплойта нетEPSS 14 %microsoft · internet explorer21 февр. 2006 г.
- CVE-2006-084840В плане
The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary comm
СредняяCVSS 5,1Готовый эксплойтEPSS 58 %apple · mac os x22 февр. 2006 г.
- CVE-2006-072033Наблюдать
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibl
ВысокаяCVSS 7,6Proof of conceptEPSS 10 %nullsoft · winamp23 февр. 2006 г.
- CVE-2006-090051В плане
nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the Prot
ВысокаяCVSS 7,8Готовый эксплойтEPSS 65 %freebsd · freebsd27 февр. 2006 г.
- CVE-2006-091125Наблюдать
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted reque
СредняяCVSS 5,0Proof of conceptEPSS 16 %ipswitch · whatsup28 февр. 2006 г.