Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: сентябрь 2006 г.

45 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2006-4534
    47В плане

    Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via

    КритическаяCVSS 9,3Эксплойта нетEPSS 34 %

    microsoft · office5 сент. 2006 г.

  • CVE-2006-4095
    34Наблюдать

    BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which c

    ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %

    isc · bind5 сент. 2006 г.

  • CVE-2006-4560
    36Наблюдать

    Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with a

    ВысокаяCVSS 7,5Эксплойта нетEPSS 18 %

    microsoft · ie5 сент. 2006 г.

  • CVE-2006-4602
    43В плане

    Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP cod

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 44 %

    tiki · tikiwiki cms\/groupware6 сент. 2006 г.

  • CVE-2006-4627
    24Наблюдать

    System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of

    СредняяCVSS 5,0Эксплойта нетEPSS 14 %

    microsoft · system information activex control7 сент. 2006 г.

  • CVE-2006-4379
    48В плане

    Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IM

    ВысокаяCVSS 7,5Proof of conceptEPSS 60 %

    ipswitch · imail plus8 сент. 2006 г.

  • CVE-2006-4656
    33Наблюдать

    PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier allows remote attack

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    web-provence · sl site8 сент. 2006 г.

  • CVE-2006-4670
    33Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to execute arbitrary PHP cod

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    gtasoft · photokorn gallery8 сент. 2006 г.

  • CVE-2006-0001
    50В плане

    Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a c

    КритическаяCVSS 9,3Эксплойта нетEPSS 41 %

    microsoft · office12 сент. 2006 г.

  • CVE-2006-0032
    24Наблюдать

    Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is

    СредняяCVSS 4,3Proof of conceptEPSS 24 %

    microsoft · windows 200012 сент. 2006 г.

  • CVE-2006-3311
    25Наблюдать

    Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote at

    СредняяCVSS 5,1Эксплойта нетEPSS 17 %

    adobe · flash player12 сент. 2006 г.

  • CVE-2006-3442
    38Наблюдать

    Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote attackers to execute ar

    ВысокаяCVSS 7,6Эксплойта нетEPSS 27 %

    microsoft · windows xp12 сент. 2006 г.

  • CVE-2006-3873
    39Наблюдать

    Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch b

    ВысокаяCVSS 7,5Эксплойта нетEPSS 29 %

    microsoft · ie12 сент. 2006 г.

  • CVE-2006-4384
    25Наблюдать

    Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64

    СредняяCVSS 5,1Proof of conceptEPSS 16 %

    apple · quicktime12 сент. 2006 г.

  • CVE-2006-4640
    30Наблюдать

    Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protec

    СредняяCVSS 6,8Эксплойта нетEPSS 10 %

    adobe · flash player12 сент. 2006 г.

  • CVE-2006-4777
    54В плане

    Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer

    ВысокаяCVSS 7,6Готовый эксплойтEPSS 79 %

    microsoft · ie13 сент. 2006 г.

  • CVE-2006-4832
    33Наблюдать

    Buffer overflow in the telnet service in Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2) and earlier, and S

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    verso netperformer · frame relay access device act15 сент. 2006 г.

  • CVE-2006-4844
    23Наблюдать

    PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other

    СредняяCVSS 5,1Proof of conceptEPSS 10 %

    claroline · claroline18 сент. 2006 г.

  • CVE-2006-4847
    52В плане

    Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long

    СредняяCVSS 6,5Готовый эксплойтEPSS 85 %

    ipswitch · ws ftp server18 сент. 2006 г.

  • CVE-2006-4868
    55В плане

    Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Win

    КритическаяCVSS 9,3Готовый эксплойтEPSS 61 %

    microsoft · windows 200019 сент. 2006 г.

  • CVE-2006-4870
    33Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitra

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    aewebworks · aedating19 сент. 2006 г.

  • CVE-2006-4888
    25Наблюдать

    Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML I

    СредняяCVSS 5,0Эксплойта нетEPSS 17 %

    microsoft · ie19 сент. 2006 г.

  • CVE-2006-4889
    25Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled, al

    СредняяCVSS 5,1Proof of conceptEPSS 16 %

    telekorn · signkorn guestbook19 сент. 2006 г.

  • CVE-2006-4438
    28Наблюдать

    Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute ar

    СредняяCVSS 6,4Proof of conceptEPSS 10 %

    doctor web ltd · dr.web20 сент. 2006 г.

  • CVE-2006-4920
    33Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP c

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    siteatschool · siteatschool20 сент. 2006 г.

  • CVE-2006-4899
    23Наблюдать

    The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    broadcom · etrust security command center22 сент. 2006 г.

  • CVE-2006-4901
    28Наблюдать

    Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to sp

    СредняяCVSS 6,4Proof of conceptEPSS 10 %

    broadcom · etrust audit client22 сент. 2006 г.

  • CVE-2006-4948
    46В плане

    Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary c

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 54 %

    prosysinfo · tftp server tftpdwin22 сент. 2006 г.

  • CVE-2006-4965
    24Наблюдать

    Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via

    СредняяCVSS 5,0Proof of conceptEPSS 13 %

    apple · quicktime24 сент. 2006 г.

  • CVE-2006-4969
    34Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    wahm e-commerce · pie cart pro24 сент. 2006 г.

  • CVE-2006-5000
    45В плане

    Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote aut

    СредняяCVSS 6,5Эксплойта нетEPSS 64 %

    ipswitch · ws ftp server26 сент. 2006 г.

  • CVE-2006-5001
    30Наблюдать

    Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certa

    СредняяCVSS 5,0Эксплойта нетEPSS 31 %

    ipswitch · ws ftp server26 сент. 2006 г.

  • CVE-2006-4924
    42В плане

    sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) vi

    ВысокаяCVSS 7,8Proof of conceptEPSS 37 %

    openbsd · openssh26 сент. 2006 г.

  • CVE-2006-4694
    41В плане

    Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitr

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · office27 сент. 2006 г.

  • CVE-2006-5020
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a

    ВысокаяCVSS 7,5Proof of conceptEPSS 17 %

    solidstate · solidstate27 сент. 2006 г.

  • CVE-2006-5028
    34Наблюдать

    Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remot

    СредняяCVSS 5,0Proof of conceptEPSS 46 %

    swsoft · plesk27 сент. 2006 г.

  • CVE-2006-5048
    32Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier for Joomla! allow rem

    СредняяCVSS 6,8Proof of conceptEPSS 15 %

    joomla · joomla\!27 сент. 2006 г.

  • CVE-2006-5051
    45В плане

    Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbit

    ВысокаяCVSS 8,1Proof of conceptEPSS 44 %

    openbsd · openssh27 сент. 2006 г.

  • CVE-2006-5058
    33Наблюдать

    Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call of Duty 2 1.3 and ea

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    activision · call of duty27 сент. 2006 г.

  • CVE-2006-2937
    34Наблюдать

    OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumpti

    ВысокаяCVSS 7,8Эксплойта нетEPSS 10 %

    openssl · openssl28 сент. 2006 г.

  • CVE-2006-3738
    55В плане

    Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspeci

    КритическаяCVSS 10,0Эксплойта нетEPSS 49 %

    openssl · openssl28 сент. 2006 г.

  • CVE-2006-4343
    23Наблюдать

    The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remo

    СредняяCVSS 4,3Proof of conceptEPSS 19 %

    openssl · openssl28 сент. 2006 г.

  • CVE-2006-4925
    25Наблюдать

    packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUT

    СредняяCVSS 5,0Эксплойта нетEPSS 15 %

    openbsd · openssh28 сент. 2006 г.

  • CVE-2006-5084
    35Наблюдать

    Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote attackers to cause a de

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    skype technologies · skype28 сент. 2006 г.

  • CVE-2006-5085
    44В плане

    Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the n

    ВысокаяCVSS 7,5Proof of conceptEPSS 47 %

    pixel motion · pixel motion blog28 сент. 2006 г.