Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: октябрь 2007 г.

64 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2007-5144
    22Наблюдать

    Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to caus

    СредняяCVSS 4,3Эксплойта нетEPSS 16 %

    microsoft · windows live messenger1 окт. 2007 г.

  • CVE-2007-5145
    21Наблюдать

    Multiple buffer overflows in system DLL files in Microsoft Windows XP, as used by Microsoft Windows Explorer (explorer.exe) 6.00.2900.2180,

    СредняяCVSS 4,3Эксплойта нетEPSS 12 %

    microsoft · windows xp1 окт. 2007 г.

  • CVE-2007-5158
    22Наблюдать

    The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystro

    СредняяCVSS 4,3Proof of conceptEPSS 15 %

    microsoft · internet explorer1 окт. 2007 г.

  • CVE-2007-5003
    60На этой неделе

    Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 al

    КритическаяCVSS 10,0Готовый эксплойтEPSS 67 %

    ca · protection suites1 окт. 2007 г.

  • CVE-2007-5006
    46В плане

    Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify

    КритическаяCVSS 10,0Эксплойта нетEPSS 21 %

    ca · protection suites1 окт. 2007 г.

  • CVE-2007-5082
    59В плане

    Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote at

    КритическаяCVSS 10,0Готовый эксплойтEPSS 63 %

    broadcom · brightstor hierarchical storage manager1 окт. 2007 г.

  • CVE-2007-5083
    46В плане

    Multiple integer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to

    КритическаяCVSS 10,0Эксплойта нетEPSS 18 %

    broadcom · brightstor hierarchical storage manager1 окт. 2007 г.

  • CVE-2007-5184
    34Наблюдать

    Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via fo

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    smbftpd · smbftpd3 окт. 2007 г.

  • CVE-2007-5185
    40В плане

    Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code

    СредняяCVSS 6,8Proof of conceptEPSS 42 %

    phpwcms-xt · phpwcms-xt3 окт. 2007 г.

  • CVE-2007-5186
    41В плане

    PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled, allows remote attack

    СредняяCVSS 6,8Proof of conceptEPSS 46 %

    segue cms · segue cms3 окт. 2007 г.

  • CVE-2007-5217
    40В плане

    Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) Kazaa 3.2.7 and (2) G

    СредняяCVSS 6,8Готовый эксплойтEPSS 29 %

    altnet · altnet download manager4 окт. 2007 г.

  • CVE-2007-5219
    30Наблюдать

    Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in C

    СредняяCVSS 6,4Proof of conceptEPSS 15 %

    cyberlink · powerdvd4 окт. 2007 г.

  • CVE-2007-4990
    33Наблюдать

    The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) Quer

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    x.org · x font server5 окт. 2007 г.

  • CVE-2007-5234
    43В плане

    PHP remote file inclusion vulnerability in upload/common/footer.php in Ossigeno CMS 2.2 alpha3 allows remote attackers to execute arbitrary

    ВысокаяCVSS 7,5Proof of conceptEPSS 42 %

    ossigeno · ossigeno5 окт. 2007 г.

  • CVE-2007-5243
    49В плане

    Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote a

    КритическаяCVSS 9,3Готовый эксплойтEPSS 40 %

    borland software · interbase6 окт. 2007 г.

  • CVE-2007-5244
    48В плане

    Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allow

    КритическаяCVSS 9,3Готовый эксплойтEPSS 37 %

    borland software · interbase6 окт. 2007 г.

  • CVE-2007-5257
    45В плане

    Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and ear

    КритическаяCVSS 10,0Proof of conceptEPSS 15 %

    edraw · office viewer component6 окт. 2007 г.

  • CVE-2007-4924
    23Наблюдать

    The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to caus

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    ekiga · ekiga8 окт. 2007 г.

  • CVE-2007-5271
    36Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to execute arbitrary PHP

    СредняяCVSS 6,8Proof of conceptEPSS 28 %

    trionic · cite cms8 окт. 2007 г.

  • CVE-2007-5301
    30Наблюдать

    Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.8

    СредняяCVSS 6,8Proof of conceptEPSS 10 %

    alsaplayer · alsaplayer9 окт. 2007 г.

  • CVE-2007-5315
    39Наблюдать

    PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remote attackers to execu

    СредняяCVSS 6,8Proof of conceptEPSS 38 %

    softpedia · livealbum9 окт. 2007 г.

  • CVE-2007-2217
    49В плане

    Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute a

    КритическаяCVSS 9,3Proof of conceptEPSS 41 %

    microsoft · windows 20009 окт. 2007 г.

  • CVE-2007-2228
    44В плане

    rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64

    ВысокаяCVSS 7,8Эксплойта нетEPSS 43 %

    microsoft · windows 20009 окт. 2007 г.

  • CVE-2007-3892
    38Наблюдать

    Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" components via unspecif

    ВысокаяCVSS 7,5Эксплойта нетEPSS 25 %

    microsoft · internet explorer9 окт. 2007 г.

  • CVE-2007-3893
    34Наблюдать

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via unspecified ve

    СредняяCVSS 6,8Эксплойта нетEPSS 24 %

    microsoft · internet explorer9 окт. 2007 г.

  • CVE-2007-3897
    53В плане

    Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Proto

    КритическаяCVSS 9,3Эксплойта нетEPSS 54 %

    microsoft · outlook express9 окт. 2007 г.

  • CVE-2007-3899
    46В плане

    Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execut

    КритическаяCVSS 9,3Эксплойта нетEPSS 29 %

    microsoft · office9 окт. 2007 г.

  • CVE-2007-4466
    40В плане

    Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attackers to execute arbi

    СредняяCVSS 6,8Готовый эксплойтEPSS 30 %

    electronic arts · snoopyctrl9 окт. 2007 г.

  • CVE-2007-5322
    36Наблюдать

    Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote attackers to execute

    ВысокаяCVSS 7,5Proof of conceptEPSS 18 %

    microsoft · visual foxpro9 окт. 2007 г.

  • CVE-2007-3896
    53В плане

    The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows rem

    КритическаяCVSS 9,3Proof of conceptEPSS 53 %

    microsoft · windows 2003 server10 окт. 2007 г.

  • CVE-2007-5362
    38Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 component for Mambo and J

    СредняяCVSS 6,8Proof of conceptEPSS 36 %

    mambo · mambo10 окт. 2007 г.

  • CVE-2007-5363
    36Наблюдать

    PHP remote file inclusion vulnerability in admin.panoramic.php in the Panoramic Picture Viewer (com_panoramic) mambot (plugin) 1.0 for Jooml

    СредняяCVSS 6,8Proof of conceptEPSS 31 %

    joomla · joomla10 окт. 2007 г.

  • CVE-2007-5169
    40В плане

    Stack-based buffer overflow in MAIPM6.dll in Adobe PageMaker 7.0.1 and 7.0.2 on Windows allows user-assisted remote attackers to execute arb

    КритическаяCVSS 9,3Эксплойта нетEPSS 10 %

    adobe · pagemaker11 окт. 2007 г.

  • CVE-2007-5365
    52В плане

    Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementati

    ВысокаяCVSS 7,2Proof of conceptEPSS 80 %

    openbsd · openbsd11 окт. 2007 г.

  • CVE-2007-5381
    41В плане

    Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attack

    КритическаяCVSS 9,3Proof of conceptEPSS 14 %

    cisco · ios11 окт. 2007 г.

  • CVE-2007-5387
    36Наблюдать

    PHP remote file inclusion vulnerability in active/components/xmlrpc/client.php in Pindorama 0.1 allows remote attackers to execute arbitrary

    СредняяCVSS 6,8Proof of conceptEPSS 28 %

    pindorama · pindorama12 окт. 2007 г.

  • CVE-2007-5388
    39Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (

    СредняяCVSS 6,8Proof of conceptEPSS 38 %

    webdesktop · webdesktop12 окт. 2007 г.

  • CVE-2007-5407
    39Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in the JContentSubscription (com_jcs) 1.5.8 component for Joomla! allow remote attackers

    СредняяCVSS 6,8Proof of conceptEPSS 40 %

    joomlaequipment · jcontentsubscription12 окт. 2007 г.

  • CVE-2007-5412
    38Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass (com_mp3_allopass) 1.0 component for Joomla! allow remote at

    СредняяCVSS 6,8Proof of conceptEPSS 37 %

    quoc-huy · mp3 allopass12 окт. 2007 г.

  • CVE-2007-5423
    53В плане

    tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 76 %

    tiki · tikiwiki cms\/groupware12 окт. 2007 г.

  • CVE-2007-5208
    50В плане

    hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute

    ВысокаяCVSS 7,6Готовый эксплойтEPSS 67 %

    hp · linux imaging and printing project12 окт. 2007 г.

  • CVE-2007-5325
    44В плане

    Multiple buffer overflows in (1) the Message Engine and (2) AScore.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    broadcom · brightstor arcserve backup12 окт. 2007 г.

  • CVE-2007-5326
    44В плане

    Multiple buffer overflows in (1) RPC and (2) rpcx.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, all

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    ca · brightstor arcserve backup12 окт. 2007 г.

  • CVE-2007-5327
    45В плане

    Stack-based buffer overflow in the RPC interface for the Message Engine (mediasvr.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5,

    КритическаяCVSS 10,0Эксплойта нетEPSS 16 %

    broadcom · brightstor arcserve backup12 окт. 2007 г.

  • CVE-2007-5330
    44В плане

    The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to (1) exec

    КритическаяCVSS 10,0Эксплойта нетEPSS 13 %

    broadcom · brightstor arcserve backup12 окт. 2007 г.

  • CVE-2007-4995
    40В плане

    Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified

    КритическаяCVSS 9,3Эксплойта нетEPSS 10 %

    openssl · openssl12 окт. 2007 г.

  • CVE-2007-5451
    36Наблюдать

    PHP remote file inclusion vulnerability in admin.color.php in the com_colorlab (aka com_color) 1.0 component for Joomla! allows remote attac

    СредняяCVSS 6,8Proof of conceptEPSS 31 %

    joomla · joomla14 окт. 2007 г.

  • CVE-2007-5456
    36Наблюдать

    Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download a

    ВысокаяCVSS 7,5Эксплойта нетEPSS 19 %

    microsoft · internet explorer14 окт. 2007 г.

  • CVE-2007-5457
    38Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 com

    СредняяCVSS 6,8Proof of conceptEPSS 37 %

    joomla · joomla14 окт. 2007 г.

  • CVE-2007-5461
    26Наблюдать

    Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, un

    НизкаяCVSS 3,5Proof of conceptEPSS 39 %

    apache · tomcat15 окт. 2007 г.

  • CVE-2007-5466
    46В плане

    Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strin

    КритическаяCVSS 10,0Proof of conceptEPSS 19 %

    extremail · extremail15 окт. 2007 г.

  • CVE-2007-5467
    44В плане

    Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, v

    КритическаяCVSS 10,0Proof of conceptEPSS 13 %

    extremail · extremail15 окт. 2007 г.

  • CVE-2007-5511
    40В плане

    SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 allows attacke

    СредняяCVSS 6,5Готовый эксплойтEPSS 31 %

    oracle · database server17 окт. 2007 г.

  • CVE-2007-5574
    35Наблюдать

    PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the pa

    СредняяCVSS 6,8Proof of conceptEPSS 27 %

    phpdj · phpdj18 окт. 2007 г.

  • CVE-2007-5592
    36Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier allow remote attackers to execute arbitrary PHP code via

    СредняяCVSS 6,8Proof of conceptEPSS 28 %

    awzmb · awzmb19 окт. 2007 г.

  • CVE-2007-5601
    50В плане

    Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions incl

    КритическаяCVSS 9,3Готовый эксплойтEPSS 42 %

    realnetworks · realplayer20 окт. 2007 г.

  • CVE-2007-5628
    35Наблюдать

    PHP remote file inclusion vulnerability in src/scripture.php in The Online Web Library Site (TOWels) 0.1 allows remote attackers to execute

    СредняяCVSS 6,8Proof of conceptEPSS 27 %

    towels · towels23 окт. 2007 г.

  • CVE-2007-5631
    39Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when register_globals is enabled, allow remote attackers to

    СредняяCVSS 6,8Proof of conceptEPSS 39 %

    peopleaggregator · peopleaggregator23 окт. 2007 г.

  • CVE-2007-5641
    39Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to execute arbitrary

    СредняяCVSS 6,8Proof of conceptEPSS 40 %

    phppm · php project management23 окт. 2007 г.

  • CVE-2007-5654
    32Наблюдать

    LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed

    СредняяCVSS 5,0Proof of conceptEPSS 41 %

    litespeed technologies · litespeed web server23 окт. 2007 г.

  • CVE-2007-5709
    40В плане

    Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code via a long file nam

    КритическаяCVSS 9,3Proof of conceptEPSS 10 %

    sony · sonicstage connect player30 окт. 2007 г.

  • CVE-2007-5722
    34Наблюдать

    Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourgame GLWorld and possib

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    ourgame.com · globallink30 окт. 2007 г.

  • CVE-2007-5728
    21Наблюдать

    Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inject arbitrary web scr

    СредняяCVSS 4,3Proof of conceptEPSS 14 %

    phppgadmin · phppgadmin30 окт. 2007 г.

  • CVE-2007-5740
    34Наблюдать

    The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbit

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    vergenet · perdition mail retrieval proxy31 окт. 2007 г.