Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: август 2006 г.

54 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2006-3952
    50В плане

    Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrary code via a long ar

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 66 %

    efs software · efs ftp server1 авг. 2006 г.

  • CVE-2006-3961
    40В плане

    Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home

    СредняяCVSS 6,8Готовый эксплойтEPSS 34 %

    mcafee · antispyware1 авг. 2006 г.

  • CVE-2006-3459
    46В плане

    Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow co

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 53 %

    libtiff · libtiff2 авг. 2006 г.

  • CVE-2006-3990
    36Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Paul M.

    ВысокаяCVSS 7,5Proof of conceptEPSS 18 %

    phpsavant · savant24 авг. 2006 г.

  • CVE-2006-3995
    30Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.ph

    СредняяCVSS 6,8Proof of conceptEPSS 10 %

    user home pages · user home pages4 авг. 2006 г.

  • CVE-2006-0395
    40В плане

    The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which a

    СредняяCVSS 5,1Готовый эксплойтEPSS 55 %

    apple · mac os x4 авг. 2006 г.

  • CVE-2006-4018
    36Наблюдать

    Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attacke

    ВысокаяCVSS 7,5Proof of conceptEPSS 19 %

    clamav · clamav8 авг. 2006 г.

  • CVE-2006-3450
    42В плане

    Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to

    ВысокаяCVSS 7,5Эксплойта нетEPSS 41 %

    microsoft · ie8 авг. 2006 г.

  • CVE-2006-3451
    42В плане

    Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to cons

    ВысокаяCVSS 7,5Эксплойта нетEPSS 41 %

    microsoft · ie8 авг. 2006 г.

  • CVE-2006-3637
    33Наблюдать

    Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted r

    СредняяCVSS 5,1Proof of conceptEPSS 43 %

    microsoft · ie8 авг. 2006 г.

  • CVE-2006-3638
    41В плане

    Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial o

    ВысокаяCVSS 7,5Эксплойта нетEPSS 36 %

    microsoft · ie8 авг. 2006 г.

  • CVE-2006-3438
    41В плане

    Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to e

    КритическаяCVSS 9,3Эксплойта нетEPSS 11 %

    microsoft · hyperlink object library8 авг. 2006 г.

  • CVE-2006-3444
    35Наблюдать

    Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges v

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    microsoft · windows 20008 авг. 2006 г.

  • CVE-2006-3449
    43В плане

    Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to ex

    ВысокаяCVSS 7,5Эксплойта нетEPSS 42 %

    microsoft · powerpoint8 авг. 2006 г.

  • CVE-2006-3639
    40В плане

    Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote a

    ВысокаяCVSS 7,5Эксплойта нетEPSS 32 %

    microsoft · ie8 авг. 2006 г.

  • CVE-2006-3640
    27Наблюдать

    Microsoft Internet Explorer 5.01 and 6 allows certain script to persist across navigations between pages, which allows remote attackers to o

    СредняяCVSS 5,0Эксплойта нетEPSS 24 %

    microsoft · ie8 авг. 2006 г.

  • CVE-2006-3643
    30Наблюдать

    Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedde

    СредняяCVSS 6,0Эксплойта нетEPSS 21 %

    microsoft · ie8 авг. 2006 г.

  • CVE-2006-3649
    23Наблюдать

    Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, P

    СредняяCVSS 5,1Эксплойта нетEPSS 10 %

    microsoft · visual basic8 авг. 2006 г.

  • CVE-2006-3439
    65На этой неделе

    Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including

    КритическаяCVSS 10,0Готовый эксплойтEPSS 84 %

    microsoft · windows 20008 авг. 2006 г.

  • CVE-2006-3440
    57В плане

    Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arb

    КритическаяCVSS 10,0Proof of conceptEPSS 57 %

    microsoft · windows 20008 авг. 2006 г.

  • CVE-2006-3441
    59В плане

    Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to exec

    КритическаяCVSS 10,0Proof of conceptEPSS 61 %

    microsoft · windows 20008 авг. 2006 г.

  • CVE-2006-3648
    37Наблюдать

    Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitr

    ВысокаяCVSS 7,6Эксплойта нетEPSS 23 %

    microsoft · windows 20008 авг. 2006 г.

  • CVE-2006-4046
    35Наблюдать

    Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10_rc5 and earlier on Linux/BSD, allow

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    open cubic player · open cubic player9 авг. 2006 г.

  • CVE-2006-4052
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute ar

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    turnkey web tools · php simple shop9 авг. 2006 г.

  • CVE-2006-4059
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    usolved · newsolved lite9 авг. 2006 г.

  • CVE-2006-4071
    17Наблюдать

    Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and po

    НизкаяCVSS 2,6Proof of conceptEPSS 23 %

    microsoft · windows 2003 server9 авг. 2006 г.

  • CVE-2006-4075
    25Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 and earlier allow remote at

    СредняяCVSS 5,1Proof of conceptEPSS 17 %

    wim fleischhauer · docpile we10 авг. 2006 г.

  • CVE-2006-4089
    23Наблюдать

    Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service (application c

    СредняяCVSS 5,0Proof of conceptEPSS 11 %

    andy lo-a-foe · alsaplayer11 авг. 2006 г.

  • CVE-2006-4110
    29Наблюдать

    Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or

    СредняяCVSS 4,3Proof of conceptEPSS 39 %

    apache · http server14 авг. 2006 г.

  • CVE-2006-4138
    36Наблюдать

    Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute arbitrary

    ВысокаяCVSS 7,6Proof of conceptEPSS 20 %

    microsoft · help file viewer14 авг. 2006 г.

  • CVE-2006-4144
    13Наблюдать

    Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of servi

    НизкаяCVSS 2,6Proof of conceptEPSS 11 %

    imagemagick · imagemagick15 авг. 2006 г.

  • CVE-2006-4159
    34Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute arbitrary PHP code via

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    chaussette · chaussette16 авг. 2006 г.

  • CVE-2006-3121
    24Наблюдать

    The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allo

    СредняяCVSS 5,0Proof of conceptEPSS 13 %

    high availability linux project · heartbeat16 авг. 2006 г.

  • CVE-2006-4193
    44В плане

    Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute ar

    ВысокаяCVSS 7,5Proof of conceptEPSS 47 %

    microsoft · ie16 авг. 2006 г.

  • CVE-2006-4197
    34Наблюдать

    Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    musicbrainz · libmusicbrainz17 авг. 2006 г.

  • CVE-2006-4201
    33Наблюдать

    Unspecified vulnerability in the backup agent and Cell Manager in HP OpenView Storage Data Protector 5.1 and 5.5 before 20060810 allows remo

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    hp · openview storage data protector17 авг. 2006 г.

  • CVE-2006-4208
    24Наблюдать

    Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticate

    СредняяCVSS 5,0Proof of conceptEPSS 12 %

    skippy.net · wp-db backup plugin for wordpress17 авг. 2006 г.

  • CVE-2006-4219
    36Наблюдать

    The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary

    ВысокаяCVSS 7,5Proof of conceptEPSS 21 %

    microsoft · ie18 авг. 2006 г.

  • CVE-2006-4227
    30Наблюдать

    MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of t

    СредняяCVSS 6,5Proof of conceptEPSS 13 %

    mysql · mysql18 авг. 2006 г.

  • CVE-2006-4236
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the (1) sho

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    powergap · powergap business21 авг. 2006 г.

  • CVE-2006-4253
    35Наблюдать

    Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly e

    ВысокаяCVSS 7,6Proof of conceptEPSS 15 %

    mozilla · firefox21 авг. 2006 г.

  • CVE-2006-4287
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers to execute arbitrar

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    nes game · nes game22 авг. 2006 г.

  • CVE-2006-3869
    43В плане

    Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch b

    ВысокаяCVSS 7,5Эксплойта нетEPSS 43 %

    microsoft · ie22 авг. 2006 г.

  • CVE-2006-4301
    32Наблюдать

    Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple Dire

    СредняяCVSS 5,0Proof of conceptEPSS 39 %

    microsoft · ie22 авг. 2006 г.

  • CVE-2006-4313
    40В плане

    Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow a

    СредняяCVSS 5,0Готовый эксплойтEPSS 12 %

    cisco · vpn 3000 concentrator series software23 авг. 2006 г.

  • CVE-2006-4304
    44В плане

    Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    freebsd · freebsd23 авг. 2006 г.

  • CVE-2006-4318
    45В плане

    Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.

    СредняяCVSS 6,5Готовый эксплойтEPSS 62 %

    texas imperial software · wftpd23 авг. 2006 г.

  • CVE-2006-3124
    36Наблюдать

    Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly

    ВысокаяCVSS 7,5Proof of conceptEPSS 20 %

    streamripper · streamripper26 авг. 2006 г.

  • CVE-2006-4364
    37Наблюдать

    Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial

    СредняяCVSS 5,0Proof of conceptEPSS 57 %

    alt-n · mdaemon26 авг. 2006 г.

  • CVE-2006-4305
    62На этой неделе

    Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connect

    КритическаяCVSS 10,0Готовый эксплойтEPSS 71 %

    mysql · maxdb29 авг. 2006 г.

  • CVE-2006-4446
    39Наблюдать

    Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP1 allows remote atta

    СредняяCVSS 5,0Proof of conceptEPSS 62 %

    microsoft · ie29 авг. 2006 г.

  • CVE-2006-4489
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbitrary PHP code via (

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    ultrize · minibill31 авг. 2006 г.

  • CVE-2006-4494
    37Наблюдать

    Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by

    ВысокаяCVSS 7,5Proof of conceptEPSS 22 %

    microsoft · visual studio31 авг. 2006 г.

  • CVE-2006-4495
    36Наблюдать

    Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by

    ВысокаяCVSS 7,5Proof of conceptEPSS 20 %

    microsoft · ie31 авг. 2006 г.