Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: ноябрь 2007 г.

26 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2007-5775
    48В плане

    Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024.

    КритическаяCVSS 9,8Proof of conceptEPSS 29 %

    bitdefender · antivirus1 нояб. 2007 г.

  • CVE-2007-5779
    51В плане

    Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player (GOM Player) 2.1.6

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 71 %

    gom player · gom player1 нояб. 2007 г.

  • CVE-2007-5781
    39Наблюдать

    PHP remote file inclusion vulnerability in inc/sige_init.php in Sige 0.1 allows remote attackers to execute arbitrary PHP code via a URL in

    СредняяCVSS 6,8Proof of conceptEPSS 38 %

    sige · sige1 нояб. 2007 г.

  • CVE-2007-5660
    48В плане

    Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and Insta

    КритическаяCVSS 9,3Готовый эксплойтEPSS 36 %

    macrovision · flexnet connect2 нояб. 2007 г.

  • CVE-2007-5800
    38Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to

    СредняяCVSS 6,8Proof of conceptEPSS 36 %

    wordpress · wordpress2 нояб. 2007 г.

  • CVE-2007-5603
    48В плане

    Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, al

    КритическаяCVSS 9,3Готовый эксплойтEPSS 37 %

    sonicwall · ssl vpn5 нояб. 2007 г.

  • CVE-2007-5841
    36Наблюдать

    PHP remote file inclusion vulnerability in admin/index.php in nuBoard 0.5 allows remote attackers to execute arbitrary PHP code via a URL in

    СредняяCVSS 6,8Proof of conceptEPSS 31 %

    nuboard · nuboard6 нояб. 2007 г.

  • CVE-2007-5842
    41В плане

    Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers to execute arbitrary PHP code via a URL in

    СредняяCVSS 6,8Proof of conceptEPSS 46 %

    vortex portal · vortex portal6 нояб. 2007 г.

  • CVE-2007-5843
    38Наблюдать

    PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute arbitrary PHP code vi

    СредняяCVSS 6,8Proof of conceptEPSS 37 %

    scwiki · scwiki6 нояб. 2007 г.

  • CVE-2007-5846
    40В плане

    The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via

    ВысокаяCVSS 7,8Эксплойта нетEPSS 29 %

    net-snmp · net-snmp6 нояб. 2007 г.

  • CVE-2007-3751
    45В плане

    Unspecified vulnerability in QuickTime for Java in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via untruste

    КритическаяCVSS 9,3Эксплойта нетEPSS 25 %

    apple · quicktime7 нояб. 2007 г.

  • CVE-2007-4675
    47В плане

    Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to

    КритическаяCVSS 9,3Эксплойта нетEPSS 32 %

    apple · quicktime7 нояб. 2007 г.

  • CVE-2007-4676
    51В плане

    Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsi

    КритическаяCVSS 9,3Эксплойта нетEPSS 46 %

    apple · quicktime7 нояб. 2007 г.

  • CVE-2007-4677
    51В плане

    Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid color table size w

    КритическаяCVSS 9,3Эксплойта нетEPSS 46 %

    apple · quicktime7 нояб. 2007 г.

  • CVE-2007-5892
    45В плане

    Stack-based buffer overflow in the pdg2.dll ActiveX control in SSReader 4.0 and earlier allow remote attackers to execute arbitrary code via

    КритическаяCVSS 10,0Эксплойта нетEPSS 17 %

    ssreader · ultra star reader7 нояб. 2007 г.

  • CVE-2007-5909
    43В плане

    Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by Activ

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    autonomy · keyview export sdk9 нояб. 2007 г.

  • CVE-2007-5925
    19Наблюдать

    The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated

    СредняяCVSS 4,0Proof of conceptEPSS 11 %

    mysql · mysql9 нояб. 2007 г.

  • CVE-2007-3898
    41В плане

    The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS s

    СредняяCVSS 6,4Proof of conceptEPSS 52 %

    microsoft · windows 200013 нояб. 2007 г.

  • CVE-2007-5755
    41В плане

    Multiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL Radio allow remote attackers to execute ar

    КритическаяCVSS 9,3Готовый эксплойтEPSS 12 %

    aol · radio13 нояб. 2007 г.

  • CVE-2007-5941
    50В плане

    Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a denial of service and p

    КритическаяCVSS 10,0Proof of conceptEPSS 32 %

    adobe · shockwave player13 нояб. 2007 г.

  • CVE-2007-5905
    31Наблюдать

    Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a

    СредняяCVSS 6,8Эксплойта нетEPSS 13 %

    adobe · coldfusion15 нояб. 2007 г.

  • CVE-2007-5398
    40В плане

    Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operati

    КритическаяCVSS 9,3Эксплойта нетEPSS 11 %

    samba · samba16 нояб. 2007 г.

  • CVE-2007-6026
    45В плане

    Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003

    КритическаяCVSS 9,3Proof of conceptEPSS 28 %

    microsoft · jet19 нояб. 2007 г.

  • CVE-2007-6038
    35Наблюдать

    PHP remote file inclusion vulnerability in xajax_functions.php in the JUser (com_juser) 1.0.14 component for Joomla! allows remote attackers

    СредняяCVSS 6,8Proof of conceptEPSS 27 %

    joomlaequipment · juser20 нояб. 2007 г.

  • CVE-2007-6165
    50В плане

    Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDouble attachment contai

    КритическаяCVSS 9,3Готовый эксплойтEPSS 44 %

    apple · mac os x28 нояб. 2007 г.

  • CVE-2007-6166
    50В плане

    Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote

    КритическаяCVSS 9,3Готовый эксплойтEPSS 41 %

    apple · quicktime28 нояб. 2007 г.