Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: октябрь 2006 г.

48 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2006-5112
    50В плане

    Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HTTP GET request.

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 66 %

    intervations · navicopa web server3 окт. 2006 г.

  • CVE-2006-5152
    30Наблюдать

    Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a

    СредняяCVSS 6,8Эксплойта нетEPSS 10 %

    microsoft · internet explorer5 окт. 2006 г.

  • CVE-2006-5156
    62На этой неделе

    Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbi

    КритическаяCVSS 10,0Готовый эксплойтEPSS 74 %

    mcafee · epolicy orchestrator5 окт. 2006 г.

  • CVE-2006-5162
    31Наблюдать

    wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (unhandled exception and

    СредняяCVSS 5,0Proof of conceptEPSS 36 %

    microsoft · internet explorer5 окт. 2006 г.

  • CVE-2006-4812
    46В плане

    Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserializ

    КритическаяCVSS 10,0Proof of conceptEPSS 20 %

    php · php10 окт. 2006 г.

  • CVE-2006-5142
    34Наблюдать

    Stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server allows remote attackers to execute arbitrary code via l

    ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %

    broadcom · brightstor arcserve backup10 окт. 2006 г.

  • CVE-2006-5143
    54В плане

    Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r1

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 79 %

    ca · brightstor arcserve backup10 окт. 2006 г.

  • CVE-2006-5205
    23Наблюдать

    Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a ..

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    invision power services · invision gallery10 окт. 2006 г.

  • CVE-2006-5216
    49В плане

    Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI.

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 63 %

    sergey lyubka · simple httpd10 окт. 2006 г.

  • CVE-2006-5220
    24Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attackers to execute arbi

    СредняяCVSS 5,1Proof of conceptEPSS 14 %

    objective development · webyep10 окт. 2006 г.

  • CVE-2006-3435
    48В плане

    PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, wh

    КритическаяCVSS 9,3Эксплойта нетEPSS 37 %

    microsoft · office10 окт. 2006 г.

  • CVE-2006-3436
    29Наблюдать

    Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via

    СредняяCVSS 4,3Эксплойта нетEPSS 38 %

    microsoft · .net framework10 окт. 2006 г.

  • CVE-2006-3876
    40В плане

    Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allo

    КритическаяCVSS 9,3Эксплойта нетEPSS 11 %

    microsoft · office10 окт. 2006 г.

  • CVE-2006-2387
    24Наблюдать

    Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004

    СредняяCVSS 5,1Эксплойта нетEPSS 12 %

    microsoft · office10 окт. 2006 г.

  • CVE-2006-3434
    46В плане

    Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute

    КритическаяCVSS 9,3Эксплойта нетEPSS 29 %

    microsoft · office10 окт. 2006 г.

  • CVE-2006-3647
    45В плане

    Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrar

    КритическаяCVSS 9,3Эксплойта нетEPSS 26 %

    microsoft · office10 окт. 2006 г.

  • CVE-2006-3650
    49В плане

    Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-

    КритическаяCVSS 9,3Эксплойта нетEPSS 38 %

    microsoft · office10 окт. 2006 г.

  • CVE-2006-3651
    46В плане

    Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via

    КритическаяCVSS 9,3Эксплойта нетEPSS 30 %

    microsoft · office10 окт. 2006 г.

  • CVE-2006-3864
    47В плане

    Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user

    КритическаяCVSS 9,3Эксплойта нетEPSS 33 %

    microsoft · office10 окт. 2006 г.

  • CVE-2006-3868
    27Наблюдать

    Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Sm

    СредняяCVSS 5,1Эксплойта нетEPSS 24 %

    microsoft · office10 окт. 2006 г.

  • CVE-2006-3877
    41В плане

    Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allo

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · access10 окт. 2006 г.

  • CVE-2006-4685
    16Наблюдать

    The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redi

    НизкаяCVSS 2,6Эксплойта нетEPSS 20 %

    microsoft · xml core services10 окт. 2006 г.

  • CVE-2006-4686
    39Наблюдать

    Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.

    ВысокаяCVSS 7,5Эксплойта нетEPSS 30 %

    microsoft · xml core services10 окт. 2006 г.

  • CVE-2006-4692
    29Наблюдать

    Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and e

    СредняяCVSS 5,1Эксплойта нетEPSS 29 %

    microsoft · windows server 200310 окт. 2006 г.

  • CVE-2006-4693
    44В плане

    Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via

    КритическаяCVSS 9,3Эксплойта нетEPSS 22 %

    microsoft · office10 окт. 2006 г.

  • CVE-2006-4696
    49В плане

    Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows re

    КритическаяCVSS 9,0Эксплойта нетEPSS 43 %

    microsoft · windows 200010 окт. 2006 г.

  • CVE-2006-5229
    40В плане

    OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote atta

    НизкаяCVSS 2,6Готовый эксплойтEPSS 58 %

    openbsd · openssh10 окт. 2006 г.

  • CVE-2006-4842
    40В плане

    The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specify

    НизкаяCVSS 3,6Готовый эксплойтEPSS 7 %

    netscape · portable runtime api11 окт. 2006 г.

  • CVE-2006-4154
    32Наблюдать

    Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format

    СредняяCVSS 6,8Эксплойта нетEPSS 16 %

    apache · http server16 окт. 2006 г.

  • CVE-2006-5296
    25Наблюдать

    PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows

    СредняяCVSS 4,3Proof of conceptEPSS 26 %

    microsoft · powerpoint16 окт. 2006 г.

  • CVE-2006-4182
    36Наблюдать

    Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanni

    ВысокаяCVSS 7,5Proof of conceptEPSS 21 %

    clam anti-virus · clamav16 окт. 2006 г.

  • CVE-2006-5295
    23Наблюдать

    Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafte

    СредняяCVSS 5,0Proof of conceptEPSS 11 %

    clam anti-virus · clamav16 окт. 2006 г.

  • CVE-2006-5302
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitrary PHP code via a URL

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    redaction system · redaction system17 окт. 2006 г.

  • CVE-2006-5330
    27Наблюдать

    CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 f

    СредняяCVSS 5,0Эксплойта нетEPSS 24 %

    adobe · flash player17 окт. 2006 г.

  • CVE-2006-5379
    38Наблюдать

    The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on oth

    ВысокаяCVSS 7,5Proof of conceptEPSS 27 %

    nvidia · binary graphics driver18 окт. 2006 г.

  • CVE-2006-5392
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execute arbitrary PHP code

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    opendoc · fullcore18 окт. 2006 г.

  • CVE-2006-5444
    56В плане

    Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2

    ВысокаяCVSS 7,5Proof of conceptEPSS 86 %

    digium · asterisk23 окт. 2006 г.

  • CVE-2006-5448
    34Наблюдать

    The drmstor.dll ActiveX object in Microsoft Windows Digital Rights Management System (DRM) allows remote attackers to cause a denial of serv

    ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %

    microsoft · windows digital rights management23 окт. 2006 г.

  • CVE-2006-5478
    56В плане

    Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e F

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 85 %

    novell · edirectory24 окт. 2006 г.

  • CVE-2006-5506
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path paramet

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    wiclear · wiclear25 окт. 2006 г.

  • CVE-2006-5517
    34Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote attackers to execute

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    rhode island secretary of state · open meetings filing system26 окт. 2006 г.

  • CVE-2006-5518
    33Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers to execute arbitrary

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    christopher fowler · rssonate26 окт. 2006 г.

  • CVE-2006-5536
    24Наблюдать

    Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to read arb

    СредняяCVSS 5,0Proof of conceptEPSS 13 %

    d-link · dsl-g624t26 окт. 2006 г.

  • CVE-2006-5544
    31Наблюдать

    Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phish

    СредняяCVSS 6,4Эксплойта нетEPSS 20 %

    microsoft · ie26 окт. 2006 г.

  • CVE-2006-5559
    50В плане

    The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Micros

    КритическаяCVSS 9,3Proof of conceptEPSS 43 %

    microsoft · windows 200027 окт. 2006 г.

  • CVE-2006-5567
    41В плане

    Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a

    КритическаяCVSS 9,3Proof of conceptEPSS 14 %

    nullsoft · winamp27 окт. 2006 г.

  • CVE-2006-5614
    40В плане

    Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attacke

    НизкаяCVSS 2,6Готовый эксплойтEPSS 79 %

    microsoft · windows nt helper components30 окт. 2006 г.

  • CVE-2006-5627
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitrary PHP code via a UR

    ВысокаяCVSS 7,5Proof of conceptEPSS 17 %

    qnecms · qnecms31 окт. 2006 г.