Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: март 2007 г.

67 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2006-7065
    26Наблюдать

    Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL style

    СредняяCVSS 5,0Proof of conceptEPSS 20 %

    microsoft · ie2 мар. 2007 г.

  • CVE-2006-7066
    35Наблюдать

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an

    ВысокаяCVSS 7,1Proof of conceptEPSS 22 %

    microsoft · windows xp2 мар. 2007 г.

  • CVE-2006-7079
    43В плане

    Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program v

    КритическаяCVSS 9,8Proof of conceptEPSS 12 %

    exv2 · content management system2 мар. 2007 г.

  • CVE-2007-1232
    32Наблюдать

    Directory traversal vulnerability in SQLiteManager 1.2.0 allows remote attackers to read arbitrary files via a ..

    СредняяCVSS 5,1Proof of conceptEPSS 38 %

    sqlite manager · sqlite manager3 мар. 2007 г.

  • CVE-2007-1238
    20Наблюдать

    Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service (application crash) by attempting to insert a corru

    СредняяCVSS 4,3Эксплойта нетEPSS 11 %

    microsoft · office3 мар. 2007 г.

  • CVE-2007-1239
    21Наблюдать

    Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via

    СредняяCVSS 4,3Эксплойта нетEPSS 12 %

    microsoft · excel3 мар. 2007 г.

  • CVE-2007-0774
    54В плане

    Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Serv

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 81 %

    apache · tomcat jk web server connector4 мар. 2007 г.

  • CVE-2007-1277
    38Наблюдать

    WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backd

    ВысокаяCVSS 7,5Proof of conceptEPSS 27 %

    wordpress · wordpress5 мар. 2007 г.

  • CVE-2007-1285
    36Наблюдать

    The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PH

    ВысокаяCVSS 7,5Proof of conceptEPSS 18 %

    php · php6 мар. 2007 г.

  • CVE-2007-1286
    40В плане

    Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unser

    СредняяCVSS 6,8Готовый эксплойтEPSS 40 %

    php · php6 мар. 2007 г.

  • CVE-2007-1301
    40В плане

    Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authentica

    КритическаяCVSS 9,0Proof of conceptEPSS 12 %

    mailenable · mailenable enterprise6 мар. 2007 г.

  • CVE-2007-1306
    37Наблюдать

    Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation

    ВысокаяCVSS 7,8Proof of conceptEPSS 20 %

    digium · asterisk6 мар. 2007 г.

  • CVE-2007-1327
    34Наблюдать

    The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service (NULL de

    ВысокаяCVSS 7,8Proof of conceptEPSS 10 %

    silc · silc-server7 мар. 2007 г.

  • CVE-2007-1347
    37Наблюдать

    Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause

    ВысокаяCVSS 7,1Proof of conceptEPSS 31 %

    microsoft · windows 20008 мар. 2007 г.

  • CVE-2007-1350
    33Наблюдать

    Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username du

    СредняяCVSS 6,8Эксплойта нетEPSS 19 %

    novell · netmail8 мар. 2007 г.

  • CVE-2007-1373
    58В плане

    Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers to execute arbitrary

    КритическаяCVSS 10,0Готовый эксплойтEPSS 60 %

    pmail · mercury mail transport system9 мар. 2007 г.

  • CVE-2007-1376
    33Наблюдать

    The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resour

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    php · php9 мар. 2007 г.

  • CVE-2007-1377
    25Наблюдать

    AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of servic

    СредняяCVSS 5,0Proof of conceptEPSS 18 %

    adobe · acrobat reader9 мар. 2007 г.

  • CVE-2007-1383
    44В плане

    Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowi

    КритическаяCVSS 9,8Proof of conceptEPSS 15 %

    php · php9 мар. 2007 г.

  • CVE-2007-1365
    45В плане

    Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragmented IPv6 packets du

    КритическаяCVSS 10,0Proof of conceptEPSS 17 %

    openbsd · openbsd10 мар. 2007 г.

  • CVE-2007-1399
    45В плане

    Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote atta

    КритическаяCVSS 9,8Proof of conceptEPSS 20 %

    php · php10 мар. 2007 г.

  • CVE-2007-1403
    39Наблюдать

    Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a

    ВысокаяCVSS 7,5Proof of conceptEPSS 29 %

    macromedia · shockwave10 мар. 2007 г.

  • CVE-2007-1404
    49В плане

    tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP packet that is not pr

    ВысокаяCVSS 7,3Proof of conceptEPSS 68 %

    prosysinfo · tftp server tftpdwin10 мар. 2007 г.

  • CVE-2007-1413
    33Наблюдать

    Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 version

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    php · php12 мар. 2007 г.

  • CVE-2007-1421
    43В плане

    Multiple PHP remote file inclusion vulnerabilities in Premod SubDog 2 allow remote attackers to execute arbitrary PHP code via a URL in the

    КритическаяCVSS 10,0Proof of conceptEPSS 11 %

    premod subdog · premod subdog12 мар. 2007 г.

  • CVE-2007-1435
    54В плане

    Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GET or (2) PUT request

    КритическаяCVSS 10,0Готовый эксплойтEPSS 45 %

    d-link · tftp server13 мар. 2007 г.

  • CVE-2007-1278
    24Наблюдать

    Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft I

    СредняяCVSS 4,3Эксплойта нетEPSS 23 %

    microsoft · internet information server16 мар. 2007 г.

  • CVE-2007-0450
    47В плане

    Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules

    СредняяCVSS 5,0Proof of conceptEPSS 91 %

    apache · http server16 мар. 2007 г.

  • CVE-2007-1492
    32Наблюдать

    winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service (infinite loop) via a large cch argumen

    ВысокаяCVSS 7,1Proof of conceptEPSS 14 %

    microsoft · windows xp16 мар. 2007 г.

  • CVE-2007-1447
    44В плане

    The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial o

    КритическаяCVSS 10,0Эксплойта нетEPSS 14 %

    broadcom · brightstor arcserve backup16 мар. 2007 г.

  • CVE-2007-1499
    26Наблюдать

    Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary c

    СредняяCVSS 4,3Proof of conceptEPSS 29 %

    microsoft · windows vista17 мар. 2007 г.

  • CVE-2007-1512
    44В плане

    Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Go

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    microsoft · windows 200020 мар. 2007 г.

  • CVE-2007-1525
    38Наблюдать

    Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code v

    СредняяCVSS 6,8Proof of conceptEPSS 37 %

    dayfox designs · dayfox blog20 мар. 2007 г.

  • CVE-2007-1527
    23Наблюдать

    The LLTD Mapper in Microsoft Windows Vista does not verify that an IP address in a TLV type 0x07 field in a HELLO packet corresponds to a va

    СредняяCVSS 5,0Эксплойта нетEPSS 10 %

    microsoft · windows vista20 мар. 2007 г.

  • CVE-2007-1528
    23Наблюдать

    The LLTD Mapper in Microsoft Windows Vista allows remote attackers to spoof hosts, and nonexistent bridge relationships, into the network to

    СредняяCVSS 5,0Эксплойта нетEPSS 10 %

    microsoft · windows vista20 мар. 2007 г.

  • CVE-2007-1530
    25Наблюдать

    The LLTD Mapper in Microsoft Windows Vista does not properly gather responses to EMIT packets, which allows remote attackers to cause a deni

    СредняяCVSS 5,0Эксплойта нетEPSS 15 %

    microsoft · windows vista20 мар. 2007 г.

  • CVE-2007-1531
    27Наблюдать

    Microsoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which allows remote attackers to cause a denial of s

    СредняяCVSS 5,0Proof of conceptEPSS 23 %

    microsoft · windows vista20 мар. 2007 г.

  • CVE-2007-1532
    28Наблюдать

    The neighbor discovery implementation in Microsoft Windows Vista allows remote attackers to conduct a redirect attack by (1) responding to q

    СредняяCVSS 6,4Эксплойта нетEPSS 10 %

    microsoft · windows vista20 мар. 2007 г.

  • CVE-2007-1533
    23Наблюдать

    The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports within a solicitation se

    СредняяCVSS 5,0Эксплойта нетEPSS 10 %

    microsoft · windows vista20 мар. 2007 г.

  • CVE-2007-1534
    41В плане

    DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 for 2 minutes after W

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · windows vista20 мар. 2007 г.

  • CVE-2007-1535
    34Наблюдать

    Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Ter

    ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %

    microsoft · windows vista20 мар. 2007 г.

  • CVE-2007-1536
    41В плане

    Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via

    КритическаяCVSS 9,3Proof of conceptEPSS 13 %

    file · file20 мар. 2007 г.

  • CVE-2007-1560
    28Наблюдать

    The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of servi

    СредняяCVSS 5,0Эксплойта нетEPSS 28 %

    squid · squid21 мар. 2007 г.

  • CVE-2007-0348
    48В плане

    Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) Wi

    КритическаяCVSS 9,3Готовый эксплойтEPSS 36 %

    roxio · cineplayer21 мар. 2007 г.

  • CVE-2007-1561
    35Наблюдать

    The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP I

    ВысокаяCVSS 7,8Proof of conceptEPSS 14 %

    asterisk · asterisk21 мар. 2007 г.

  • CVE-2007-1562
    31Наблюдать

    The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to con

    СредняяCVSS 6,8Proof of conceptEPSS 14 %

    mozilla · firefox21 мар. 2007 г.

  • CVE-2007-1567
    55В плане

    Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of service or execute ar

    КритическаяCVSS 10,0Proof of conceptEPSS 50 %

    war ftp daemon · war ftp daemon21 мар. 2007 г.

  • CVE-2007-1578
    45В плане

    Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attacker

    КритическаяCVSS 10,0Proof of conceptEPSS 16 %

    atrium software · mercur imapd21 мар. 2007 г.

  • CVE-2007-1579
    57В плане

    Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE command.

    КритическаяCVSS 10,0Proof of conceptEPSS 57 %

    atrium software · mercur imapd21 мар. 2007 г.

  • CVE-2007-1620
    43В плане

    Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code

    КритическаяCVSS 10,0Proof of conceptEPSS 11 %

    php db designer · php db designer22 мар. 2007 г.

  • CVE-2007-1643
    43В плане

    Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and earlier allow remote attackers to execute a

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    lan management system · lan management system23 мар. 2007 г.

  • CVE-2007-1644
    50В плане

    The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployment

    КритическаяCVSS 10,0Proof of conceptEPSS 32 %

    microsoft · all windows23 мар. 2007 г.

  • CVE-2007-1645
    44В плане

    Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long re

    КритическаяCVSS 10,0Proof of conceptEPSS 13 %

    microsoft · windows 200023 мар. 2007 г.

  • CVE-2007-1658
    48В плане

    Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local fil

    КритическаяCVSS 9,3Proof of conceptEPSS 35 %

    microsoft · windows vista24 мар. 2007 г.

  • CVE-2007-1692
    35Наблюдать

    The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries, which might all

    ВысокаяCVSS 7,5Эксплойта нетEPSS 15 %

    microsoft · windows 200026 мар. 2007 г.

  • CVE-2007-1697
    62На этой неделе

    PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code

    КритическаяCVSS 10,0Proof of conceptEPSS 73 %

    philex · philex26 мар. 2007 г.

  • CVE-2007-1699
    43В плане

    Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and com_swmenufree) 4.0 component for Mambo and Joomla! allo

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    joomla · swmenu component26 мар. 2007 г.

  • CVE-2007-1721
    44В плане

    Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbitrary PHP code via a

    КритическаяCVSS 10,0Proof of conceptEPSS 13 %

    realink · c-arbre27 мар. 2007 г.

  • CVE-2007-1675
    58В плане

    Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.

    КритическаяCVSS 10,0Proof of conceptEPSS 61 %

    ibm · lotus domino28 мар. 2007 г.

  • CVE-2007-1733
    43В плане

    Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long (1) /cgi-bin/ or (2)

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    intervations · navicopa web server28 мар. 2007 г.

  • CVE-2007-1349
    23Наблюдать

    PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular

    СредняяCVSS 5,0Эксплойта нетEPSS 10 %

    apache · mod perl29 мар. 2007 г.

  • CVE-2007-1763
    33Наблюдать

    The ATI kernel driver (atikmdag.sys) in Microsoft Windows Vista allows user-assisted remote attackers to cause a denial of service (crash) v

    ВысокаяCVSS 7,1Эксплойта нетEPSS 18 %

    microsoft · windows vista29 мар. 2007 г.

  • CVE-2007-1765
    53В плане

    Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of

    КритическаяCVSS 9,3Готовый эксплойтEPSS 54 %

    microsoft · windows 200029 мар. 2007 г.

  • CVE-2007-1770
    45В плане

    Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when usi

    КритическаяCVSS 10,0Proof of conceptEPSS 16 %

    esri · arcsde29 мар. 2007 г.

  • CVE-2007-1777
    35Наблюдать

    Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive th

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    php · php29 мар. 2007 г.

  • CVE-2007-0038
    59В плане

    Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbit

    КритическаяCVSS 9,3Готовый эксплойтEPSS 72 %

    microsoft · windows 200030 мар. 2007 г.

  • CVE-2007-1785
    33Наблюдать

    The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via c

    ВысокаяCVSS 7,1Proof of conceptEPSS 15 %

    ca · brightstor arcserve backup30 мар. 2007 г.