Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: июнь 2006 г.

57 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2006-2726
    36Наблюдать

    PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files via the config[fsBase]

    ВысокаяCVSS 7,5Proof of conceptEPSS 19 %

    fastpublish · fastpublish cms1 июн. 2006 г.

  • CVE-2006-2743
    23Наблюдать

    Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple extensions, which al

    СредняяCVSS 5,1Proof of conceptEPSS 11 %

    drupal · drupal1 июн. 2006 г.

  • CVE-2006-2766
    24Наблюдать

    Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possib

    НизкаяCVSS 2,6Proof of conceptEPSS 47 %

    microsoft · ie2 июн. 2006 г.

  • CVE-2006-2769
    23Наблюдать

    The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriag

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    sourcefire · snort2 июн. 2006 г.

  • CVE-2006-2802
    23Наблюдать

    Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (applicati

    СредняяCVSS 5,0Proof of conceptEPSS 11 %

    xine · gxine3 июн. 2006 г.

  • CVE-2006-2811
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrary PHP code via a URL

    ВысокаяCVSS 7,5Proof of conceptEPSS 17 %

    cantico · ovidentia5 июн. 2006 г.

  • CVE-2006-2842
    44В плане

    PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_

    ВысокаяCVSS 7,5Proof of conceptEPSS 47 %

    squirrelmail · squirrelmail6 июн. 2006 г.

  • CVE-2006-2849
    33Наблюдать

    PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote attackers to execute arbi

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    andrew godwin · bytehoard6 июн. 2006 г.

  • CVE-2006-2852
    30Наблюдать

    PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows remote attackers to exe

    СредняяCVSS 6,8Proof of conceptEPSS 11 %

    dotwidget · dotwidget cms6 июн. 2006 г.

  • CVE-2006-2860
    29Наблюдать

    PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the path

    СредняяCVSS 6,4Proof of conceptEPSS 13 %

    webspot · webspotblogging6 июн. 2006 г.

  • CVE-2006-2864
    25Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitrary PHP code via a URL

    СредняяCVSS 5,1Proof of conceptEPSS 15 %

    blueshoes · blueshoes framework6 июн. 2006 г.

  • CVE-2006-2868
    23Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the

    СредняяCVSS 5,1Proof of conceptEPSS 11 %

    claroline · claroline6 июн. 2006 г.

  • CVE-2006-2447
    43В плане

    SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands vi

    СредняяCVSS 5,1Готовый эксплойтEPSS 75 %

    apache · spamassassin6 июн. 2006 г.

  • CVE-2006-2878
    34Наблюдать

    The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "c

    ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %

    andreas gohr · dokuwiki6 июн. 2006 г.

  • CVE-2006-2881
    25Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, allow remote attackers

    СредняяCVSS 5,1Proof of conceptEPSS 17 %

    dreamcost · dreamaccount7 июн. 2006 г.

  • CVE-2006-2900
    20Наблюдать

    Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the targe

    СредняяCVSS 4,0Эксплойта нетEPSS 12 %

    microsoft · ie7 июн. 2006 г.

  • CVE-2006-2906
    24Наблюдать

    The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote a

    СредняяCVSS 5,4Proof of conceptEPSS 10 %

    thomas boutell · graphics draw library8 июн. 2006 г.

  • CVE-2006-2919
    38Наблюдать

    Unspecified vulnerability in Microsoft NetMeeting 3.01 allows remote attackers to cause a denial of service (crash or CPU consumption) and p

    ВысокаяCVSS 7,8Эксплойта нетEPSS 22 %

    microsoft · netmeeting8 июн. 2006 г.

  • CVE-2006-2926
    51В плане

    Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denial of service and poss

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 70 %

    qbik · wingate9 июн. 2006 г.

  • CVE-2006-2961
    49В плане

    Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (application crash) and possi

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 61 %

    aclogic · cesarftp12 июн. 2006 г.

  • CVE-2006-2376
    42В плане

    Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote attackers to execute

    ВысокаяCVSS 7,5Эксплойта нетEPSS 41 %

    microsoft · windows 9813 июн. 2006 г.

  • CVE-2006-0022
    34Наблюдать

    Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac,

    ВысокаяCVSS 7,6Эксплойта нетEPSS 14 %

    microsoft · powerpoint13 июн. 2006 г.

  • CVE-2006-0025
    52В плане

    Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image wit

    КритическаяCVSS 9,3Эксплойта нетEPSS 48 %

    microsoft · windows media player13 июн. 2006 г.

  • CVE-2006-1193
    22Наблюдать

    Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows us

    НизкаяCVSS 2,6Proof of conceptEPSS 39 %

    microsoft · exchange server13 июн. 2006 г.

  • CVE-2006-1303
    48В плане

    Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitra

    КритическаяCVSS 9,3Эксплойта нетEPSS 38 %

    microsoft · ie13 июн. 2006 г.

  • CVE-2006-1313
    36Наблюдать

    Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release object

    СредняяCVSS 6,8Эксплойта нетEPSS 29 %

    microsoft · windows 200013 июн. 2006 г.

  • CVE-2006-2370
    51В плане

    Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earli

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 70 %

    microsoft · windows 200013 июн. 2006 г.

  • CVE-2006-2371
    37Наблюдать

    Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2

    ВысокаяCVSS 7,5Эксплойта нетEPSS 22 %

    microsoft · windows 200013 июн. 2006 г.

  • CVE-2006-2373
    49В плане

    The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows loc

    КритическаяCVSS 10,0Proof of conceptEPSS 29 %

    microsoft · windows 200013 июн. 2006 г.

  • CVE-2006-2378
    37Наблюдать

    Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Win

    СредняяCVSS 6,8Эксплойта нетEPSS 34 %

    microsoft · ie13 июн. 2006 г.

  • CVE-2006-2379
    53В плане

    Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote a

    КритическаяCVSS 9,3Proof of conceptEPSS 54 %

    microsoft · windows 200013 июн. 2006 г.

  • CVE-2006-2380
    22Наблюдать

    Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to

    СредняяCVSS 4,3Эксплойта нетEPSS 17 %

    microsoft · windows 200013 июн. 2006 г.

  • CVE-2006-2382
    55В плане

    Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code v

    КритическаяCVSS 10,0Эксплойта нетEPSS 48 %

    microsoft · internet explorer13 июн. 2006 г.

  • CVE-2006-2383
    49В плане

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code vi

    КритическаяCVSS 9,3Proof of conceptEPSS 40 %

    microsoft · internet explorer13 июн. 2006 г.

  • CVE-2006-2384
    23Наблюдать

    Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal

    СредняяCVSS 4,3Эксплойта нетEPSS 19 %

    microsoft · internet explorer13 июн. 2006 г.

  • CVE-2006-2385
    36Наблюдать

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows user-assisted remote attackers to execute arb

    ВысокаяCVSS 7,6Эксплойта нетEPSS 20 %

    microsoft · ie13 июн. 2006 г.

  • CVE-2006-3059
    49В плане

    Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecifi

    КритическаяCVSS 9,3Proof of conceptEPSS 41 %

    microsoft · excel17 июн. 2006 г.

  • CVE-2006-3081
    24Наблюдать

    mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service

    СредняяCVSS 4,0Proof of conceptEPSS 25 %

    mysql · mysql19 июн. 2006 г.

  • CVE-2006-3086
    54В плане

    Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll) allows remot

    КритическаяCVSS 9,3Proof of conceptEPSS 56 %

    microsoft · hyperlink object library19 июн. 2006 г.

  • CVE-2006-3101
    24Наблюдать

    Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web

    СредняяCVSS 4,3Proof of conceptEPSS 24 %

    cisco · secure access control server20 июн. 2006 г.

  • CVE-2006-3109
    21Наблюдать

    Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before

    СредняяCVSS 4,3Proof of conceptEPSS 13 %

    cisco · call manager20 июн. 2006 г.

  • CVE-2006-3014
    29Наблюдать

    Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadshee

    СредняяCVSS 5,1Proof of conceptEPSS 30 %

    microsoft · excel21 июн. 2006 г.

  • CVE-2006-3172
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL w

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    content\*builder · content\*builder22 июн. 2006 г.

  • CVE-2006-3193
    24Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers

    СредняяCVSS 5,1Proof of conceptEPSS 14 %

    grayscale · bandsite cms22 июн. 2006 г.

  • CVE-2006-2914
    26Наблюдать

    PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder p

    СредняяCVSS 5,1Proof of conceptEPSS 20 %

    deluxebb · deluxebb23 июн. 2006 г.

  • CVE-2006-3199
    24Наблюдать

    Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL containing a long hostna

    СредняяCVSS 5,0Proof of conceptEPSS 14 %

    opera · opera browser23 июн. 2006 г.

  • CVE-2006-3200
    25Наблюдать

    Unspecified versions of Internet Explorer allow remote attackers to cause a denial of service (crash) via an IFRAME with a src tag containin

    СредняяCVSS 5,0Эксплойта нетEPSS 15 %

    microsoft · internet explorer23 июн. 2006 г.

  • CVE-2006-3210
    24Наблюдать

    Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allows remote attackers to conduct PHP remot

    СредняяCVSS 5,1Proof of conceptEPSS 13 %

    le ralf · ralf image gallery23 июн. 2006 г.

  • CVE-2006-3227
    14Наблюдать

    Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to

    НизкаяCVSS 2,6Эксплойта нетEPSS 13 %

    microsoft · internet explorer26 июн. 2006 г.

  • CVE-2006-3228
    41В плане

    Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .

    КритическаяCVSS 9,3Proof of conceptEPSS 11 %

    nullsoft · winamp26 июн. 2006 г.

  • CVE-2006-3134
    40В плане

    Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to e

    КритическаяCVSS 9,3Эксплойта нетEPSS 11 %

    gracenote · cddbcontrol activex control27 июн. 2006 г.

  • CVE-2006-3252
    49В плане

    Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to e

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 62 %

    algorithmic research · privatewire gateway27 июн. 2006 г.

  • CVE-2006-3266
    25Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when register_globals is enabled, allow remote attacker

    СредняяCVSS 5,1Proof of conceptEPSS 17 %

    magnet · bee-hive lite27 июн. 2006 г.

  • CVE-2006-3276
    34Наблюдать

    Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via (1) a long U

    ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %

    realnetworks · helix dna server28 июн. 2006 г.

  • CVE-2006-3280
    47В плане

    Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains vi

    ВысокаяCVSS 7,5Proof of conceptEPSS 55 %

    microsoft · internet explorer28 июн. 2006 г.

  • CVE-2006-3281
    34Наблюдать

    Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitr

    СредняяCVSS 5,1Proof of conceptEPSS 48 %

    microsoft · internet explorer28 июн. 2006 г.

  • CVE-2006-3317
    25Наблюдать

    PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute arbitrary code via a URL in the phpraid_dir para

    СредняяCVSS 5,1Proof of conceptEPSS 17 %

    spiffyjr · phpraid29 июн. 2006 г.