Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: ноябрь 2006 г.

46 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2006-4704
    41В плане

    Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Micros

    СредняяCVSS 6,8Готовый эксплойтEPSS 45 %

    microsoft · visual studio .net1 нояб. 2006 г.

  • CVE-2006-5645
    25Наблюдать

    Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled sca

    СредняяCVSS 5,0Proof of conceptEPSS 17 %

    sophos · anti-virus1 нояб. 2006 г.

  • CVE-2006-5646
    25Наблюдать

    Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms

    СредняяCVSS 5,0Proof of conceptEPSS 17 %

    sophos · anti-virus1 нояб. 2006 г.

  • CVE-2006-5647
    31Наблюдать

    Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote atta

    СредняяCVSS 6,4Proof of conceptEPSS 21 %

    sophos · anti-virus1 нояб. 2006 г.

  • CVE-2006-5465
    33Наблюдать

    Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    php · php3 нояб. 2006 г.

  • CVE-2006-5702
    36Наблюдать

    Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_mode parameter in (1)

    СредняяCVSS 5,0Готовый эксплойтEPSS 53 %

    tiki · tikiwiki cms\/groupware3 нояб. 2006 г.

  • CVE-2006-5710
    36Наблюдать

    The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, all

    ВысокаяCVSS 7,5Proof of conceptEPSS 19 %

    apple · mac os x3 нояб. 2006 г.

  • CVE-2006-5735
    34Наблюдать

    Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to include and execute arbi

    ВысокаяCVSS 7,5Эксплойта нетEPSS 14 %

    punbb · punbb6 нояб. 2006 г.

  • CVE-2006-5745
    53В плане

    Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on

    ВысокаяCVSS 7,6Готовый эксплойтEPSS 77 %

    microsoft · xml core services6 нояб. 2006 г.

  • CVE-2006-5768
    35Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when register_globals is enabled, allow remote attacke

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    cyberfolio · cyberfolio6 нояб. 2006 г.

  • CVE-2006-5779
    53В плане

    OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, w

    ВысокаяCVSS 7,5Эксплойта нетEPSS 76 %

    openldap · openldap7 нояб. 2006 г.

  • CVE-2006-5780
    49В плане

    Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code via a crafted TCP pac

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 63 %

    xlink technology · omni-nfs server7 нояб. 2006 г.

  • CVE-2006-5650
    50В плане

    The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via t

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 67 %

    aol · icq7 нояб. 2006 г.

  • CVE-2006-5792
    48В плане

    Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified vectors, as demonst

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 60 %

    xlink technology · omni-nfs x enterprise7 нояб. 2006 г.

  • CVE-2006-5815
    63На этой неделе

    Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause

    КритическаяCVSS 10,0Готовый эксплойтEPSS 75 %

    proftpd project · proftpd8 нояб. 2006 г.

  • CVE-2006-5826
    26Наблюдать

    Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbitrary code or cause a

    СредняяCVSS 5,8Proof of conceptEPSS 10 %

    texas imperial software · wftpd9 нояб. 2006 г.

  • CVE-2006-5835
    24Наблюдать

    The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authenticat

    СредняяCVSS 5,0Эксплойта нетEPSS 13 %

    ibm · lotus notes9 нояб. 2006 г.

  • CVE-2006-5846
    29Наблюдать

    Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files

    СредняяCVSS 6,4Proof of conceptEPSS 11 %

    freewebshop · freewebshop9 нояб. 2006 г.

  • CVE-2006-5864
    25Наблюдать

    Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attacke

    СредняяCVSS 5,1Proof of conceptEPSS 16 %

    gnu · gv10 нояб. 2006 г.

  • CVE-2006-5882
    37Наблюдать

    Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebo

    ВысокаяCVSS 8,3Proof of conceptEPSS 13 %

    linksys · wpc300n wireless-n notebook adapter driver14 нояб. 2006 г.

  • CVE-2006-3445
    43В плане

    Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up

    ВысокаяCVSS 7,5Эксплойта нетEPSS 42 %

    microsoft · windows 200014 нояб. 2006 г.

  • CVE-2006-4687
    28Наблюдать

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV t

    СредняяCVSS 5,1Эксплойта нетEPSS 26 %

    microsoft · ie14 нояб. 2006 г.

  • CVE-2006-4691
    64На этой неделе

    Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and X

    КритическаяCVSS 10,0Готовый эксплойтEPSS 79 %

    microsoft · windows 200014 нояб. 2006 г.

  • CVE-2006-5198
    35Наблюдать

    The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote

    СредняяCVSS 4,0Готовый эксплойтEPSS 62 %

    winzip · winzip14 нояб. 2006 г.

  • CVE-2006-4688
    53В плане

    Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attacker

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 75 %

    microsoft · windows 200014 нояб. 2006 г.

  • CVE-2006-4689
    30Наблюдать

    Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up

    СредняяCVSS 5,0Эксплойта нетEPSS 34 %

    microsoft · windows 200014 нояб. 2006 г.

  • CVE-2006-5972
    46В плане

    Stack-based buffer overflow in WG111v2.SYS in NetGear WG111v2 wireless adapter (USB) allows remote attackers to execute arbitrary code via a

    КритическаяCVSS 10,0Proof of conceptEPSS 19 %

    netgear · wg111v2 driver17 нояб. 2006 г.

  • CVE-2006-5988
    24Наблюдать

    Unspecified vulnerability in Windows 2000 Advanced Server SP4 running Active Directory allows remote attackers to cause a denial of service

    СредняяCVSS 5,0Эксплойта нетEPSS 13 %

    microsoft · windows 200020 нояб. 2006 г.

  • CVE-2006-3890
    41В плане

    Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applic

    КритическаяCVSS 9,3Proof of conceptEPSS 14 %

    sky software · fileview activex control21 нояб. 2006 г.

  • CVE-2006-6010
    24Наблюдать

    SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcC

    СредняяCVSS 5,0Готовый эксплойтEPSS 13 %

    sap · sap web application server21 нояб. 2006 г.

  • CVE-2006-6026
    43В плане

    Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows r

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    realnetworks · helix dna server21 нояб. 2006 г.

  • CVE-2006-6027
    50В плане

    Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary co

    КритическаяCVSS 9,3Proof of conceptEPSS 43 %

    adobe · acrobat reader21 нояб. 2006 г.

  • CVE-2006-6059
    46В плане

    Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code via

    КритическаяCVSS 10,0Proof of conceptEPSS 18 %

    netgear · ma521 driver21 нояб. 2006 г.

  • CVE-2006-6063
    48В плане

    Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file containin

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 58 %

    un4seen · xmplay21 нояб. 2006 г.

  • CVE-2006-6076
    61На этой неделе

    Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows rem

    КритическаяCVSS 10,0Готовый эксплойтEPSS 70 %

    ca · brightstor arcserve backup24 нояб. 2006 г.

  • CVE-2006-6097
    19Наблюдать

    GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contai

    СредняяCVSS 4,0Proof of conceptEPSS 11 %

    gnu · tar24 нояб. 2006 г.

  • CVE-2006-6121
    41В плане

    Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method.

    КритическаяCVSS 9,3Proof of conceptEPSS 12 %

    acer · lunchapp.aplunch26 нояб. 2006 г.

  • CVE-2006-6125
    34Наблюдать

    Heap-based buffer overflow in the wireless driver (WG311ND5.SYS) 2.3.1.10 for NetGear WG311v1 wireless adapter allows remote attackers to ex

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    netgear · wg311v126 нояб. 2006 г.

  • CVE-2006-5750
    34Наблюдать

    Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows rem

    ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %

    jboss · jboss application server27 нояб. 2006 г.

  • CVE-2006-6133
    46В плане

    Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and

    ВысокаяCVSS 7,6Proof of conceptEPSS 51 %

    microsoft · visual studio .net27 нояб. 2006 г.

  • CVE-2006-6134
    43В плане

    Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows

    ВысокаяCVSS 7,5Эксплойта нетEPSS 42 %

    microsoft · windows media player27 нояб. 2006 г.

  • CVE-2006-6170
    35Наблюдать

    Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other produ

    ВысокаяCVSS 7,5Эксплойта нетEPSS 17 %

    proftpd project · proftpd30 нояб. 2006 г.

  • CVE-2006-6183
    61На этой неделе

    Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service (cr

    КритическаяCVSS 10,0Готовый эксплойтEPSS 70 %

    3com · 3ctftpsvc30 нояб. 2006 г.

  • CVE-2006-6184
    60На этой неделе

    Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a d

    КритическаяCVSS 10,0Готовый эксплойтEPSS 65 %

    alliedtelesyn · at-tftp30 нояб. 2006 г.

  • CVE-2006-6199
    50В плане

    Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote attackers to execute a

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 65 %

    blazevideo · blaze dvd30 нояб. 2006 г.

  • CVE-2006-6201
    31Наблюдать

    Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006;

    ВысокаяCVSS 7,5Эксплойта нетEPSS 3 %

    revilloc · mailserver30 нояб. 2006 г.