Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: август 2007 г.

55 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2007-2927
    28Наблюдать

    Unspecified vulnerability in Atheros 802.11 a/b/g wireless adapter drivers before 5.3.0.35, and 6.x before 6.0.3.67, on Windows allows remot

    СредняяCVSS 5,0Эксплойта нетEPSS 25 %

    atheros · wireless adapter drivers7 авг. 2007 г.

  • CVE-2007-4187
    33Наблюдать

    Multiple eval injection vulnerabilities in the com_search component in Joomla! 1.5 beta before RC1 (aka Mapya) allow remote attackers to exe

    ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %

    joomla · joomla7 авг. 2007 г.

  • CVE-2007-4227
    21Наблюдать

    Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certain JPG file, as demo

    СредняяCVSS 4,3Эксплойта нетEPSS 13 %

    microsoft · internet explorer8 авг. 2007 г.

  • CVE-2007-4232
    42В плане

    PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote attackers to execute ar

    СредняяCVSS 6,8Proof of conceptEPSS 51 %

    andreas robertz · phpnews8 авг. 2007 г.

  • CVE-2007-4241
    43В плане

    Buffer overflow in ldcconn in Hewlett-Packard (HP) Controller for Cisco Local Director on HP-UX 11.11i allows remote attackers to execute ar

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    hp · hp-ux8 авг. 2007 г.

  • CVE-2007-4247
    21Наблюдать

    Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service (NULL dereference and persistent applicatio

    СредняяCVSS 4,3Эксплойта нетEPSS 14 %

    microsoft · windows vista8 авг. 2007 г.

  • CVE-2007-4254
    30Наблюдать

    Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft

    СредняяCVSS 6,8Proof of conceptEPSS 11 %

    microsoft · visual database tools database designer8 авг. 2007 г.

  • CVE-2007-3872
    40В плане

    Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and poss

    СредняяCVSS 6,8Готовый эксплойтEPSS 30 %

    hp · openview operations9 авг. 2007 г.

  • CVE-2007-4279
    53В плане

    PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code

    ВысокаяCVSS 7,5Proof of conceptEPSS 75 %

    frontaccounting · frontaccounting9 авг. 2007 г.

  • CVE-2007-4286
    43В плане

    Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a d

    КритическаяCVSS 9,3Proof of conceptEPSS 19 %

    cisco · ios9 авг. 2007 г.

  • CVE-2007-4288
    21Наблюдать

    Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (application crash) via

    СредняяCVSS 4,3Proof of conceptEPSS 14 %

    microsoft · windows media player9 авг. 2007 г.

  • CVE-2007-4313
    48В плане

    PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers

    СредняяCVSS 6,8Proof of conceptEPSS 68 %

    php blue dragon · php blue dragon cms13 авг. 2007 г.

  • CVE-2007-4320
    52В плане

    PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to execute arbitrary PH

    ВысокаяCVSS 7,5Proof of conceptEPSS 72 %

    ncaster · ncaster13 авг. 2007 г.

  • CVE-2007-4336
    32Наблюдать

    Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6

    СредняяCVSS 4,3Proof of conceptEPSS 50 %

    microsoft · directx media14 авг. 2007 г.

  • CVE-2007-0943
    35Наблюдать

    Unspecified vulnerability in Internet Explorer 5.01 and 6 SP1 allows remote attackers to execute arbitrary code via crafted Cascading Style

    СредняяCVSS 6,8Эксплойта нетEPSS 27 %

    microsoft · ie14 авг. 2007 г.

  • CVE-2007-2216
    49В плане

    The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation,

    КритическаяCVSS 9,3Proof of conceptEPSS 41 %

    microsoft · internet explorer14 авг. 2007 г.

  • CVE-2007-2223
    52В плане

    Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1)

    КритическаяCVSS 9,3Proof of conceptEPSS 48 %

    microsoft · xml core services14 авг. 2007 г.

  • CVE-2007-2224
    47В плане

    Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac,

    КритическаяCVSS 9,3Эксплойта нетEPSS 34 %

    microsoft · windows 200014 авг. 2007 г.

  • CVE-2007-3034
    53В плане

    Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1

    КритическаяCVSS 9,3Proof of conceptEPSS 51 %

    microsoft · windows 200014 авг. 2007 г.

  • CVE-2007-3035
    38Наблюдать

    Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin

    ВысокаяCVSS 7,6Эксплойта нетEPSS 25 %

    microsoft · windows media player14 авг. 2007 г.

  • CVE-2007-3037
    23Наблюдать

    Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafte

    СредняяCVSS 4,0Эксплойта нетEPSS 21 %

    microsoft · windows media player14 авг. 2007 г.

  • CVE-2007-3041
    46В плане

    Unspecified vulnerability in the pdwizard.ocx ActiveX object for Internet Explorer 5.01, 6 SP1, and 7 allows remote attackers to execute arb

    КритическаяCVSS 9,3Эксплойта нетEPSS 28 %

    microsoft · internet explorer14 авг. 2007 г.

  • CVE-2007-3890
    46В плане

    Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary cod

    КритическаяCVSS 9,3Эксплойта нетEPSS 28 %

    microsoft · excel14 авг. 2007 г.

  • CVE-2007-0948
    41В плане

    Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS

    КритическаяCVSS 9,3Эксплойта нетEPSS 12 %

    microsoft · virtual pc14 авг. 2007 г.

  • CVE-2007-1749
    49В плане

    Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01

    КритическаяCVSS 9,3Proof of conceptEPSS 41 %

    microsoft · internet explorer14 авг. 2007 г.

  • CVE-2007-3032
    35Наблюдать

    Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code

    СредняяCVSS 6,8Эксплойта нетEPSS 25 %

    microsoft · windows vista14 авг. 2007 г.

  • CVE-2007-3033
    26Наблюдать

    Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-

    СредняяCVSS 4,3Эксплойта нетEPSS 28 %

    microsoft · windows vista14 авг. 2007 г.

  • CVE-2007-3382
    28Наблюдать

    Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters

    СредняяCVSS 4,3Proof of conceptEPSS 37 %

    apache · tomcat14 авг. 2007 г.

  • CVE-2007-3385
    22Наблюдать

    Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character

    СредняяCVSS 4,3Эксплойта нетEPSS 16 %

    apache · tomcat14 авг. 2007 г.

  • CVE-2007-3386
    35Наблюдать

    Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote att

    СредняяCVSS 4,3Proof of conceptEPSS 58 %

    apache · tomcat14 авг. 2007 г.

  • CVE-2007-3891
    35Наблюдать

    Unspecified vulnerability in Windows Vista Weather Gadgets in Windows Vista allows remote attackers to execute arbitrary code via crafted HT

    СредняяCVSS 6,8Эксплойта нетEPSS 25 %

    microsoft · windows vista14 авг. 2007 г.

  • CVE-2007-4370
    48В плане

    Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbitrary code via a long

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 59 %

    racer · racer15 авг. 2007 г.

  • CVE-2007-4387
    40В плане

    Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows

    СредняяCVSS 4,3Готовый эксплойтEPSS 9 %

    2wire · 1701hg router17 авг. 2007 г.

  • CVE-2007-4430
    24Наблюдать

    Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and

    СредняяCVSS 5,0Proof of conceptEPSS 13 %

    cisco · cli20 авг. 2007 г.

  • CVE-2007-4440
    49В плане

    Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 64 %

    pmail · mercury mail transport system20 авг. 2007 г.

  • CVE-2007-4459
    32Наблюдать

    Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of

    ВысокаяCVSS 7,1Proof of conceptEPSS 13 %

    cisco · voip phone cp-794021 авг. 2007 г.

  • CVE-2007-4218
    44В плане

    Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 a

    КритическаяCVSS 10,0Эксплойта нетEPSS 13 %

    trend micro · serverprotect22 авг. 2007 г.

  • CVE-2007-4219
    43В плане

    Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the ServerProtect service (SpntSvc.exe), in Trend Micro ServerP

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    trend micro · serverprotect22 авг. 2007 г.

  • CVE-2007-4478
    20Наблюдать

    Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary

    СредняяCVSS 4,3Эксплойта нетEPSS 10 %

    microsoft · internet explorer22 авг. 2007 г.

  • CVE-2007-4498
    35Наблюдать

    The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call com

    ВысокаяCVSS 7,8Proof of conceptEPSS 13 %

    grandstream · sip phone23 авг. 2007 г.

  • CVE-2007-3847
    24Наблюдать

    The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to

    СредняяCVSS 5,0Эксплойта нетEPSS 12 %

    apache · http server23 авг. 2007 г.

  • CVE-2007-4534
    33Наблюдать

    Buffer overflow in the VThinker::BroadcastPrintf function in p_thinker.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arb

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    vavoom · vavoom24 авг. 2007 г.

  • CVE-2007-4556
    35Наблюдать

    Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all inp

    СредняяCVSS 6,8Proof of conceptEPSS 25 %

    opensymphony · xwork27 авг. 2007 г.

  • CVE-2007-4559
    47В плане

    Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remot

    КритическаяCVSS 9,8Proof of conceptEPSS 27 %

    python · python27 авг. 2007 г.

  • CVE-2007-4560
    55В плане

    clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metachar

    ВысокаяCVSS 7,6Готовый эксплойтEPSS 83 %

    clam anti-virus · clamav27 авг. 2007 г.

  • CVE-2007-4566
    45В плане

    Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attack

    КритическаяCVSS 10,0Proof of conceptEPSS 15 %

    alpha centauri software · sidvault ldap server27 авг. 2007 г.

  • CVE-2007-4584
    44В плане

    Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, rel

    КритическаяCVSS 10,0Proof of conceptEPSS 14 %

    bitchx · bitchx28 авг. 2007 г.

  • CVE-2007-4467
    43В плане

    Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms app

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    oracle · jinitiator30 авг. 2007 г.

  • CVE-2007-4607
    54В плане

    Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server

    КритическаяCVSS 9,3Готовый эксплойтEPSS 56 %

    gate comm software · postcast server pro30 авг. 2007 г.

  • CVE-2007-2931
    54В плане

    Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to exe

    КритическаяCVSS 9,3Proof of conceptEPSS 55 %

    microsoft · msn messenger31 авг. 2007 г.

  • CVE-2007-2954
    47В плане

    Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote at

    КритическаяCVSS 10,0Эксплойта нетEPSS 23 %

    novell · client31 авг. 2007 г.

  • CVE-2007-4515
    47В плане

    Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1

    КритическаяCVSS 9,3Готовый эксплойтEPSS 33 %

    yahoo · messenger31 авг. 2007 г.

  • CVE-2007-4636
    51В плане

    Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the root

    ВысокаяCVSS 7,5Proof of conceptEPSS 71 %

    phpbg · phpbg31 авг. 2007 г.

  • CVE-2007-4642
    45В плане

    Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary code via a long chat

    КритическаяCVSS 10,0Proof of conceptEPSS 16 %

    doomsday · doomsday31 авг. 2007 г.

  • CVE-2007-4646
    45В плане

    Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) an

    КритическаяCVSS 10,0Proof of conceptEPSS 15 %

    hexamail · hexamail server31 авг. 2007 г.