Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: сентябрь 2007 г.

54 записей · 1 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2007-3997
    34Наблюдать

    The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe_mode and open_b

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    php · php4 сент. 2007 г.

  • CVE-2007-4476
    34Наблюдать

    Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    gnu · tar4 сент. 2007 г.

  • CVE-2007-3999
    43В плане

    Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in M

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    mit · kerberos 55 сент. 2007 г.

  • CVE-2007-4712
    47В плане

    PHP remote file inclusion vulnerability in index.php in eNetman 1 allows remote attackers to execute arbitrary PHP code via a URL in the pag

    ВысокаяCVSS 7,5Proof of conceptEPSS 57 %

    enetman · enetman5 сент. 2007 г.

  • CVE-2007-4722
    30Наблюдать

    Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Mov

    СредняяCVSS 6,8Proof of conceptEPSS 10 %

    move networks inc · move media player5 сент. 2007 г.

  • CVE-2007-4738
    33Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    speedtech · stphplibrary6 сент. 2007 г.

  • CVE-2007-4744
    45В плане

    PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when register_globals is enabled, allows remote at

    СредняяCVSS 6,8Proof of conceptEPSS 60 %

    anyinventory · anyinventory6 сент. 2007 г.

  • CVE-2007-4757
    49В плане

    PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP code via a URL in the f

    ВысокаяCVSS 7,5Proof of conceptEPSS 64 %

    phpmytourney · phpmytourney8 сент. 2007 г.

  • CVE-2007-4776
    52В плане

    Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Готовый эксплойтEPSS 48 %

    microsoft · visual basic10 сент. 2007 г.

  • CVE-2007-4790
    46В плане

    Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the Microsoft Visual Fox

    ВысокаяCVSS 7,5Proof of conceptEPSS 54 %

    microsoft · internet explorer10 сент. 2007 г.

  • CVE-2007-4809
    47В плане

    Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrar

    ВысокаяCVSS 7,5Proof of conceptEPSS 56 %

    online fantasy football league · offl11 сент. 2007 г.

  • CVE-2007-4814
    44В плане

    Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQ

    ВысокаяCVSS 7,5Proof of conceptEPSS 45 %

    microsoft · sql server11 сент. 2007 г.

  • CVE-2007-4815
    39Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrar

    СредняяCVSS 6,8Proof of conceptEPSS 39 %

    markus iser · ed engine11 сент. 2007 г.

  • CVE-2007-4818
    47В плане

    Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc_

    ВысокаяCVSS 7,5Proof of conceptEPSS 55 %

    txx cms · txx cms11 сент. 2007 г.

  • CVE-2007-3040
    53В плане

    Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary c

    КритическаяCVSS 9,3Proof of conceptEPSS 54 %

    microsoft · windows 200011 сент. 2007 г.

  • CVE-2007-4727
    31Наблюдать

    Buffer overflow in the fcgi_env_add function in mod_proxy_backend_fastcgi.c in the mod_fastcgi extension in lighttpd before 1.4.18 allows re

    СредняяCVSS 6,8Эксплойта нетEPSS 12 %

    lighttpd · lighttpd12 сент. 2007 г.

  • CVE-2007-4834
    48В плане

    Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the M

    ВысокаяCVSS 7,5Proof of conceptEPSS 58 %

    phprealty · phprealty12 сент. 2007 г.

  • CVE-2007-4465
    32Наблюдать

    Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated p

    СредняяCVSS 6,1Эксплойта нетEPSS 26 %

    apache · http server13 сент. 2007 г.

  • CVE-2007-4890
    28Наблюдать

    Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft

    СредняяCVSS 5,8Proof of conceptEPSS 16 %

    microsoft · visual studio13 сент. 2007 г.

  • CVE-2007-4891
    36Наблюдать

    A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) Sync

    СредняяCVSS 6,8Proof of conceptEPSS 31 %

    microsoft · visual studio13 сент. 2007 г.

  • CVE-2007-4897
    23Наблюдать

    pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a lo

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    ekiga · ekiga14 сент. 2007 г.

  • CVE-2007-4906
    39Наблюдать

    PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is enabled, allows remot

    СредняяCVSS 6,8Proof of conceptEPSS 38 %

    nuclearbb · nuclearbb17 сент. 2007 г.

  • CVE-2007-4915
    60На этой неделе

    The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from ente

    КритическаяCVSS 10,0Готовый эксплойтEPSS 68 %

    boa · boa webserver17 сент. 2007 г.

  • CVE-2007-4916
    46В плане

    Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft

    КритическаяCVSS 10,0Proof of conceptEPSS 19 %

    hp · photo and imaging gallery17 сент. 2007 г.

  • CVE-2007-4921
    46В плане

    PHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitra

    ВысокаяCVSS 7,5Proof of conceptEPSS 52 %

    ajax · file browser17 сент. 2007 г.

  • CVE-2007-4923
    39Наблюдать

    PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component for Joomla! allows re

    СредняяCVSS 6,8Proof of conceptEPSS 41 %

    joomla · joomla radio17 сент. 2007 г.

  • CVE-2007-4934
    25Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPF

    СредняяCVSS 4,6Proof of conceptEPSS 21 %

    phpffl · phpffl18 сент. 2007 г.

  • CVE-2007-4938
    35Наблюдать

    Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (app

    ВысокаяCVSS 7,6Proof of conceptEPSS 16 %

    ibm · aix18 сент. 2007 г.

  • CVE-2007-4939
    41В плане

    Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm)

    КритическаяCVSS 9,3Proof of conceptEPSS 11 %

    mympc · cd-storm18 сент. 2007 г.

  • CVE-2007-4954
    36Наблюдать

    PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla! allows remote atta

    СредняяCVSS 6,8Proof of conceptEPSS 28 %

    joomla · joom12pic component18 сент. 2007 г.

  • CVE-2007-4955
    36Наблюдать

    PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 component for Joomla! allows

    СредняяCVSS 6,8Proof of conceptEPSS 29 %

    joomla · flash fun component18 сент. 2007 г.

  • CVE-2007-2834
    41В плане

    Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remo

    КритическаяCVSS 9,3Эксплойта нетEPSS 11 %

    sun · staroffice18 сент. 2007 г.

  • CVE-2007-3010
    98Срочно

    masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to exe

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 97 %

    al-enterprise · omnipcx enterprise communication server18 сент. 2007 г.

  • CVE-2007-4965
    27Наблюдать

    Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service

    СредняяCVSS 5,8Proof of conceptEPSS 13 %

    python · python18 сент. 2007 г.

  • CVE-2007-4982
    43В плане

    Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Technologies QRCode Activ

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    mw6 technologies · qrcode activex19 сент. 2007 г.

  • CVE-2007-4983
    54В плане

    Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows

    КритическаяCVSS 10,0Proof of conceptEPSS 47 %

    cowon america · jetaudio19 сент. 2007 г.

  • CVE-2007-5009
    41В плане

    PHP remote file inclusion vulnerability in language/lang_german/lang_main_album.php in phpBB Plus 1.53, and 1.53a before 20070922, allows re

    СредняяCVSS 6,8Proof of conceptEPSS 45 %

    phpbb2 · phpbb2 plus20 сент. 2007 г.

  • CVE-2007-5015
    39Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to execute arbitrary PHP

    СредняяCVSS 6,8Proof of conceptEPSS 38 %

    streamline · streamline20 сент. 2007 г.

  • CVE-2007-5019
    43В плане

    Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unkno

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    sun · java web start20 сент. 2007 г.

  • CVE-2007-5020
    43В плане

    Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF fil

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    adobe · acrobat21 сент. 2007 г.

  • CVE-2007-0063
    46В плане

    Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.

    КритическаяCVSS 10,0Эксплойта нетEPSS 20 %

    vmware · ace21 сент. 2007 г.

  • CVE-2007-4991
    25Наблюдать

    The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially

    СредняяCVSS 5,0Эксплойта нетEPSS 16 %

    microsoft · isa server21 сент. 2007 г.

  • CVE-2007-5054
    43В плане

    Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via

    ВысокаяCVSS 7,5Proof of conceptEPSS 42 %

    izicontents · izicontents24 сент. 2007 г.

  • CVE-2007-5056
    35Наблюдать

    Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAP

    СредняяCVSS 6,8Proof of conceptEPSS 27 %

    adodb lite · adodb lite24 сент. 2007 г.

  • CVE-2007-5065
    43В плане

    PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for Joomla! allows remote

    ВысокаяCVSS 7,5Proof of conceptEPSS 42 %

    joomla · joomla24 сент. 2007 г.

  • CVE-2007-5067
    52В плане

    Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since he

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 73 %

    imatix · xitami24 сент. 2007 г.

  • CVE-2007-5095
    35Наблюдать

    Microsoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML documents contained inside some media file

    ВысокаяCVSS 7,5Эксплойта нетEPSS 15 %

    microsoft · windows xp26 сент. 2007 г.

  • CVE-2007-5098
    41В плане

    Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when register_globals is enabled, allow remote attackers t

    СредняяCVSS 6,8Proof of conceptEPSS 45 %

    dragonfrugal · dfd cart26 сент. 2007 г.

  • CVE-2007-5099
    46В плане

    PHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote attackers to execute arbitrary PHP code vi

    ВысокаяCVSS 7,5Proof of conceptEPSS 52 %

    david watters · helplink26 сент. 2007 г.

  • CVE-2007-5102
    39Наблюдать

    PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remote attackers to

    СредняяCVSS 6,8Proof of conceptEPSS 38 %

    wordsmith · wordsmith26 сент. 2007 г.

  • CVE-2007-5107
    48В плане

    Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media ask.com Ask Toolbar

    КритическаяCVSS 9,3Готовый эксплойтEPSS 35 %

    ask.com · ask toolbar26 сент. 2007 г.

  • CVE-2007-5133
    35Наблюдать

    Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain

    ВысокаяCVSS 7,1Proof of conceptEPSS 22 %

    microsoft · windows 2003 server27 сент. 2007 г.

  • CVE-2007-5135
    32Наблюдать

    Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers

    СредняяCVSS 6,8Эксплойта нетEPSS 16 %

    openssl · openssl27 сент. 2007 г.

  • CVE-2007-4880
    63На этой неделе

    Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2

    КритическаяCVSS 10,0Готовый эксплойтEPSS 75 %

    ibm · tivoli storage manager client27 сент. 2007 г.