Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: декабрь 2006 г.

62 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2006-5854
    47В плане

    Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to exec

    ВысокаяCVSS 7,5Proof of conceptEPSS 57 %

    novell · netware client3 дек. 2006 г.

  • CVE-2006-6236
    43В плане

    Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary co

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    adobe · acrobat reader3 дек. 2006 г.

  • CVE-2006-6251
    50В плане

    Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file,

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 67 %

    vuplayer · vuplayer4 дек. 2006 г.

  • CVE-2006-6252
    20Наблюдать

    Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (

    СредняяCVSS 4,3Эксплойта нетEPSS 11 %

    microsoft · windows live messenger4 дек. 2006 г.

  • CVE-2006-6263
    31Наблюдать

    Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next ho

    СредняяCVSS 6,8Эксплойта нетEPSS 12 %

    microsoft · teredo4 дек. 2006 г.

  • CVE-2006-6264
    34Наблюдать

    Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, w

    ВысокаяCVSS 7,5Эксплойта нетEPSS 14 %

    microsoft · teredo4 дек. 2006 г.

  • CVE-2006-6266
    31Наблюдать

    Teredo clients, when following item 6 of RFC4380 section 5.2.3, start direct IPv6 connectivity tests (aka ping tests) in response to packets

    СредняяCVSS 6,8Эксплойта нетEPSS 11 %

    microsoft · teredo4 дек. 2006 г.

  • CVE-2006-6287
    33Наблюдать

    Stack-based buffer overflow in AtomixMP3 2.3 and earlier allows remote attackers to execute arbitrary code via a long pathname in an M3U fil

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    atomix productions · atomixmp34 дек. 2006 г.

  • CVE-2006-6293
    35Наблюдать

    Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code v

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    f-prot · f-prot antivirus5 дек. 2006 г.

  • CVE-2006-6296
    31Наблюдать

    The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP

    СредняяCVSS 6,1Proof of conceptEPSS 21 %

    microsoft · windows 20005 дек. 2006 г.

  • CVE-2006-5855
    48В плане

    Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial o

    КритическаяCVSS 10,0Эксплойта нетEPSS 26 %

    ibm · tivoli storage manager6 дек. 2006 г.

  • CVE-2006-5856
    31Наблюдать

    Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section na

    СредняяCVSS 6,8Эксплойта нетEPSS 14 %

    adobe · download manager6 дек. 2006 г.

  • CVE-2006-5994
    47В плане

    Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v.

    КритическаяCVSS 9,3Эксплойта нетEPSS 32 %

    microsoft · office6 дек. 2006 г.

  • CVE-2006-6310
    25Наблюдать

    Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an invalid src attribute va

    СредняяCVSS 5,0Proof of conceptEPSS 15 %

    microsoft · internet explorer6 дек. 2006 г.

  • CVE-2006-6311
    28Наблюдать

    Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in an HTML table tag wi

    СредняяCVSS 5,0Proof of conceptEPSS 26 %

    microsoft · internet explorer6 дек. 2006 г.

  • CVE-2006-6334
    37Наблюдать

    Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows

    СредняяCVSS 6,8Proof of conceptEPSS 34 %

    citrix · presentation server client7 дек. 2006 г.

  • CVE-2006-6332
    36Наблюдать

    Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via

    ВысокаяCVSS 7,5Proof of conceptEPSS 20 %

    madwifi · madwifi10 дек. 2006 г.

  • CVE-2006-6421
    29Наблюдать

    Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated

    СредняяCVSS 6,0Proof of conceptEPSS 15 %

    phpbb group · phpbb10 дек. 2006 г.

  • CVE-2006-6379
    36Наблюдать

    Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserv

    ВысокаяCVSS 7,5Proof of conceptEPSS 21 %

    broadcom · brightstor arcserve backup10 дек. 2006 г.

  • CVE-2006-6450
    37Наблюдать

    Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote

    ВысокаяCVSS 7,5Эксплойта нетEPSS 21 %

    novell · zenworks patch management server10 дек. 2006 г.

  • CVE-2006-6456
    47В плане

    Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecifie

    КритическаяCVSS 9,3Эксплойта нетEPSS 32 %

    microsoft · office11 дек. 2006 г.

  • CVE-2006-6478
    33Наблюдать

    Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parame

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    scriptphp · annoncescripthp11 дек. 2006 г.

  • CVE-2006-6423
    61На этой неделе

    Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.

    КритическаяCVSS 10,0Готовый эксплойтEPSS 70 %

    mailenable · mailenable enterprise11 дек. 2006 г.

  • CVE-2006-5577
    25Наблюдать

    Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML ta

    СредняяCVSS 4,3Эксплойта нетEPSS 25 %

    microsoft · ie12 дек. 2006 г.

  • CVE-2006-5578
    17Наблюдать

    Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information vi

    НизкаяCVSS 2,6Эксплойта нетEPSS 21 %

    microsoft · ie12 дек. 2006 г.

  • CVE-2006-5579
    47В плане

    Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain errors simultaneously,

    КритическаяCVSS 9,3Эксплойта нетEPSS 31 %

    microsoft · windows server 200312 дек. 2006 г.

  • CVE-2006-5581
    48В плане

    Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functi

    КритическаяCVSS 9,3Эксплойта нетEPSS 36 %

    microsoft · internet explorer12 дек. 2006 г.

  • CVE-2006-5583
    56В плане

    Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows

    КритическаяCVSS 10,0Эксплойта нетEPSS 54 %

    microsoft · windows 2003 server12 дек. 2006 г.

  • CVE-2006-6335
    44В плане

    Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via (1) a SIT ar

    КритическаяCVSS 10,0Эксплойта нетEPSS 12 %

    sophos · sophos anti-virus12 дек. 2006 г.

  • CVE-2006-2386
    36Наблюдать

    Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact

    СредняяCVSS 6,8Эксплойта нетEPSS 28 %

    microsoft · outlook express12 дек. 2006 г.

  • CVE-2006-4702
    35Наблюдать

    Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server

    СредняяCVSS 6,8Эксплойта нетEPSS 27 %

    microsoft · windows media player12 дек. 2006 г.

  • CVE-2006-5584
    39Наблюдать

    The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote att

    ВысокаяCVSS 7,5Эксплойта нетEPSS 31 %

    microsoft · windows 200012 дек. 2006 г.

  • CVE-2006-6561
    49В плане

    Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Proof of conceptEPSS 41 %

    microsoft · office14 дек. 2006 г.

  • CVE-2006-5822
    44В плане

    Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, an

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    symantec · veritas netbackup client14 дек. 2006 г.

  • CVE-2006-6222
    44В плане

    Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, an

    КритическаяCVSS 10,0Эксплойта нетEPSS 12 %

    symantec · veritas netbackup client14 дек. 2006 г.

  • CVE-2006-6565
    37Наблюдать

    FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) N

    СредняяCVSS 4,0Готовый эксплойтEPSS 70 %

    filezilla-project · filezilla server15 дек. 2006 г.

  • CVE-2006-6576
    50В плане

    Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (application crash) a

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 67 %

    goldenftpserver · golden ftp server15 дек. 2006 г.

  • CVE-2006-6601
    22Наблюдать

    Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID

    СредняяCVSS 4,3Proof of conceptEPSS 18 %

    windows · media player15 дек. 2006 г.

  • CVE-2006-6602
    21Наблюдать

    explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of servi

    СредняяCVSS 4,3Proof of conceptEPSS 14 %

    microsoft · windows explorer15 дек. 2006 г.

  • CVE-2006-6617
    32Наблюдать

    projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password f

    СредняяCVSS 6,5Эксплойта нетEPSS 20 %

    microsoft · project server18 дек. 2006 г.

  • CVE-2006-6652
    42В плане

    Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple

    КритическаяCVSS 9,0Proof of conceptEPSS 20 %

    apple · mac os x19 дек. 2006 г.

  • CVE-2006-6659
    25Наблюдать

    The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (I

    СредняяCVSS 5,0Proof of conceptEPSS 17 %

    microsoft · ie19 дек. 2006 г.

  • CVE-2006-6665
    36Наблюдать

    Buffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted remote attackers to execute arbitrary code via a

    СредняяCVSS 6,8Готовый эксплойтEPSS 30 %

    astonsoft · deepburner20 дек. 2006 г.

  • CVE-2006-6697
    34Наблюдать

    CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    oracle · application server portal21 дек. 2006 г.

  • CVE-2006-6707
    47В плане

    Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control (NeoTraceExplorer.dll) in NeoTrace Express 3.25 and NeoTr

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 56 %

    mcafee · neotrace22 дек. 2006 г.

  • CVE-2006-6723
    42В плане

    The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (memory consumption) v

    ВысокаяCVSS 7,8Proof of conceptEPSS 37 %

    microsoft · windows 200026 дек. 2006 г.

  • CVE-2006-6424
    54В плане

    Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to

    КритическаяCVSS 9,0Готовый эксплойтEPSS 60 %

    novell · netmail26 дек. 2006 г.

  • CVE-2006-6425
    53В плане

    Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbi

    КритическаяCVSS 9,0Готовый эксплойтEPSS 58 %

    novell · netmail26 дек. 2006 г.

  • CVE-2006-6761
    42В плане

    Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbi

    СредняяCVSS 6,5Готовый эксплойтEPSS 53 %

    novell · netmail26 дек. 2006 г.

  • CVE-2006-6811
    29Наблюдать

    KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Cha

    СредняяCVSS 6,5Proof of conceptEPSS 10 %

    kde · ksirc29 дек. 2006 г.

  • CVE-2006-1305
    27Наблюдать

    Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted

    СредняяCVSS 4,3Эксплойта нетEPSS 32 %

    microsoft · office31 дек. 2006 г.

  • CVE-2006-4098
    44В плане

    Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engi

    КритическаяCVSS 10,0Эксплойта нетEPSS 12 %

    cisco · secure access control server31 дек. 2006 г.

  • CVE-2006-4695
    49В плане

    Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute ar

    КритическаяCVSS 9,3Эксплойта нетEPSS 40 %

    microsoft · office web components31 дек. 2006 г.

  • CVE-2006-5265
    23Наблюдать

    Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allows remote attackers to cause a denial of serv

    СредняяCVSS 5,0Эксплойта нетEPSS 10 %

    microsoft · dynamics gp31 дек. 2006 г.

  • CVE-2006-5266
    35Наблюдать

    Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to execute arbitrary code

    ВысокаяCVSS 7,5Эксплойта нетEPSS 15 %

    microsoft · dynamics gp31 дек. 2006 г.

  • CVE-2006-5574
    44В плане

    Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 200

    КритическаяCVSS 9,3Эксплойта нетEPSS 24 %

    microsoft · office31 дек. 2006 г.

  • CVE-2006-5858
    24Наблюдать

    Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directorie

    СредняяCVSS 5,0Эксплойта нетEPSS 13 %

    adobe · coldfusion31 дек. 2006 г.

  • CVE-2006-6863
    43В плане

    PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote attackers to execute ar

    КритическаяCVSS 9,8Proof of conceptEPSS 13 %

    enigma · wordpress bridge31 дек. 2006 г.

  • CVE-2006-6901
    44В плане

    Unspecified vulnerability in the Bluetooth stack in Microsoft Windows allows remote attackers to gain administrative access (aka Remote Root

    КритическаяCVSS 10,0Эксплойта нетEPSS 14 %

    microsoft · windows 2003 server31 дек. 2006 г.

  • CVE-2006-6902
    44В плане

    Unspecified vulnerability in the Bluetooth stack in Microsoft Windows Mobile Pocket PC edition allows remote attackers to gain administrativ

    КритическаяCVSS 10,0Эксплойта нетEPSS 14 %

    microsoft · windows 2003 server31 дек. 2006 г.

  • CVE-2006-6908
    49В плане

    Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, W

    КритическаяCVSS 10,0Эксплойта нетEPSS 30 %

    broadcom · widcomm bluetooth31 дек. 2006 г.

  • CVE-2006-6917
    49В плане

    Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute

    КритическаяCVSS 10,0Proof of conceptEPSS 30 %

    broadcom · brightstor arcserve backup server31 дек. 2006 г.