Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: апрель 2006 г.

46 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2006-1618
    34Наблюдать

    Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 allows remote attacker

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    doomsday · doomsday5 апр. 2006 г.

  • CVE-2006-1626
    25Наблюдать

    Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by

    СредняяCVSS 4,3Proof of conceptEPSS 25 %

    microsoft · internet explorer5 апр. 2006 г.

  • CVE-2006-1651
    34Наблюдать

    Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packe

    ВысокаяCVSS 7,5Эксплойта нетEPSS 14 %

    microsoft · isa server6 апр. 2006 г.

  • CVE-2006-1652
    56В плане

    Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attacke

    КритическаяCVSS 9,0Готовый эксплойтEPSS 68 %

    ultravnc · tabbed viewer6 апр. 2006 г.

  • CVE-2006-1615
    43В плане

    Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    clamav · clamav6 апр. 2006 г.

  • CVE-2006-1664
    34Наблюдать

    Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attacke

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    xine · xine-lib7 апр. 2006 г.

  • CVE-2006-0996
    20Наблюдать

    Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script o

    СредняяCVSS 4,3Proof of conceptEPSS 11 %

    php · php10 апр. 2006 г.

  • CVE-2006-0015
    34Наблюдать

    Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team

    СредняяCVSS 6,8Proof of conceptEPSS 24 %

    microsoft · frontpage server extensions11 апр. 2006 г.

  • CVE-2006-1185
    51В плане

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invali

    ВысокаяCVSS 7,5Proof of conceptEPSS 70 %

    microsoft · ie11 апр. 2006 г.

  • CVE-2006-1186
    57В плане

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2)

    КритическаяCVSS 10,0Proof of conceptEPSS 58 %

    microsoft · ie11 апр. 2006 г.

  • CVE-2006-1188
    47В плане

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, w

    ВысокаяCVSS 7,5Proof of conceptEPSS 57 %

    microsoft · ie11 апр. 2006 г.

  • CVE-2006-1189
    59В плане

    Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted

    КритическаяCVSS 10,0Proof of conceptEPSS 61 %

    microsoft · internet explorer11 апр. 2006 г.

  • CVE-2006-1190
    58В плане

    Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an embedd

    КритическаяCVSS 10,0Proof of conceptEPSS 61 %

    microsoft · internet explorer11 апр. 2006 г.

  • CVE-2006-1191
    26Наблюдать

    Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which all

    СредняяCVSS 4,0Proof of conceptEPSS 31 %

    microsoft · internet explorer11 апр. 2006 г.

  • CVE-2006-1192
    20Наблюдать

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts o

    НизкаяCVSS 2,6Proof of conceptEPSS 31 %

    microsoft · ie11 апр. 2006 г.

  • CVE-2006-1719
    24Наблюдать

    Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) via any scrollbar Cascading Style Sheets (CSS)

    СредняяCVSS 5,0Эксплойта нетEPSS 13 %

    microsoft · ie11 апр. 2006 г.

  • CVE-2006-0003
    45В плане

    Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsof

    СредняяCVSS 5,1Готовый эксплойтEPSS 82 %

    microsoft · data access components11 апр. 2006 г.

  • CVE-2006-0012
    27Наблюдать

    Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to

    СредняяCVSS 5,1Эксплойта нетEPSS 24 %

    microsoft · windows 200011 апр. 2006 г.

  • CVE-2006-0014
    27Наблюдать

    Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book

    СредняяCVSS 5,1Эксплойта нетEPSS 24 %

    microsoft · outlook express11 апр. 2006 г.

  • CVE-2006-1770
    43В плане

    Multiple PHP remote file inclusion vulnerabilities in Azerbaijan Design & Development Group (AZDG) AzDGVote allow remote attackers to execut

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    azerbaijan development group · azdgvote13 апр. 2006 г.

  • CVE-2006-1776
    34Наблюдать

    PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to execute arb

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    simplog · simplog13 апр. 2006 г.

  • CVE-2006-1551
    45В плане

    Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via t

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 51 %

    georges auberger · pajax13 апр. 2006 г.

  • CVE-2006-1786
    14Наблюдать

    Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web

    НизкаяCVSS 2,6Proof of conceptEPSS 12 %

    adobe · document server13 апр. 2006 г.

  • CVE-2006-0749
    40В плане

    nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey b

    КритическаяCVSS 9,3Эксплойта нетEPSS 10 %

    mozilla · firefox14 апр. 2006 г.

  • CVE-2006-0992
    62На этой неделе

    Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a l

    КритическаяCVSS 10,0Готовый эксплойтEPSS 73 %

    novell · groupwise messenger14 апр. 2006 г.

  • CVE-2006-1730
    40В плане

    Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey be

    КритическаяCVSS 9,3Эксплойта нетEPSS 10 %

    mozilla · firefox14 апр. 2006 г.

  • CVE-2006-1834
    24Наблюдать

    Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, w

    СредняяCVSS 5,1Proof of conceptEPSS 12 %

    opera · opera browser19 апр. 2006 г.

  • CVE-2006-1868
    34Наблюдать

    Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via

    ВысокаяCVSS 7,5Эксплойта нетEPSS 14 %

    oracle · database server20 апр. 2006 г.

  • CVE-2006-1900
    35Наблюдать

    Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote

    ВысокаяCVSS 7,6Proof of conceptEPSS 16 %

    w3c · amaya20 апр. 2006 г.

  • CVE-2006-1905
    34Наблюдать

    Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format stri

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    xine · xine20 апр. 2006 г.

  • CVE-2006-1931
    23Наблюдать

    The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections)

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    yukihiro matsumoto · ruby20 апр. 2006 г.

  • CVE-2006-1959
    34Наблюдать

    PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Serv

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    actualscripts · actualanalyzer21 апр. 2006 г.

  • CVE-2006-1982
    36Наблюдать

    Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, al

    ВысокаяCVSS 7,5Proof of conceptEPSS 19 %

    apple · mac os x21 апр. 2006 г.

  • CVE-2006-1985
    24Наблюдать

    Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attack

    СредняяCVSS 5,1Proof of conceptEPSS 13 %

    apple · safari21 апр. 2006 г.

  • CVE-2006-1990
    23Наблюдать

    Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary co

    СредняяCVSS 5,0Эксплойта нетEPSS 10 %

    php · php24 апр. 2006 г.

  • CVE-2006-0230
    45В плане

    Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remot

    КритическаяCVSS 10,0Proof of conceptEPSS 16 %

    symantec · antivirus scan engine24 апр. 2006 г.

  • CVE-2006-1992
    22Наблюдать

    mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested O

    НизкаяCVSS 2,6Proof of conceptEPSS 40 %

    microsoft · internet explorer24 апр. 2006 г.

  • CVE-2006-1993
    36Наблюдать

    Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary cod

    СредняяCVSS 5,1Proof of conceptEPSS 54 %

    mozilla · firefox25 апр. 2006 г.

  • CVE-2006-2022
    35Наблюдать

    Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and earlier allows remote attackers to execut

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    ls3 · fenice25 апр. 2006 г.

  • CVE-2006-2025
    29Наблюдать

    Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denia

    СредняяCVSS 6,5Proof of conceptEPSS 10 %

    libtiff · libtiff25 апр. 2006 г.

  • CVE-2006-2026
    29Наблюдать

    Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and

    СредняяCVSS 6,5Proof of conceptEPSS 10 %

    libtiff · libtiff25 апр. 2006 г.

  • CVE-2006-2055
    25Наблюдать

    Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an

    СредняяCVSS 5,0Эксплойта нетEPSS 15 %

    microsoft · outlook26 апр. 2006 г.

  • CVE-2006-2056
    24Наблюдать

    Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted remote attackers to modify command line argu

    СредняяCVSS 5,0Эксплойта нетEPSS 12 %

    microsoft · internet explorer26 апр. 2006 г.

  • CVE-2006-2081
    40В плане

    Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METADATA function in the D

    СредняяCVSS 4,6Готовый эксплойтEPSS 21 %

    oracle · database server27 апр. 2006 г.

  • CVE-2006-2086
    50В плане

    Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE de

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 67 %

    juniper · junipersetup control29 апр. 2006 г.

  • CVE-2006-2094
    27Наблюдать

    Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security S

    СредняяCVSS 5,1Proof of conceptEPSS 23 %

    microsoft · ie29 апр. 2006 г.