Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: декабрь 2007 г.

48 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2007-6203
    41В плане

    Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "4

    СредняяCVSS 4,3Proof of conceptEPSS 80 %

    apache · http server3 дек. 2007 г.

  • CVE-2007-6236
    26Наблюдать

    Microsoft Windows Media Player (WMP) allows remote attackers to cause a denial of service (application crash) via a certain AIFF file that t

    СредняяCVSS 5,0Proof of conceptEPSS 18 %

    microsoft · windows media player4 дек. 2007 г.

  • CVE-2007-6239
    28Наблюдать

    The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial o

    СредняяCVSS 5,0Эксплойта нетEPSS 26 %

    squid · squid web proxy cache4 дек. 2007 г.

  • CVE-2007-5355
    28Наблюдать

    The Web Proxy Auto-Discovery (WPAD) feature in Microsoft Internet Explorer 6 and 7, when a primary DNS suffix with three or more components

    СредняяCVSS 5,8Эксплойта нетEPSS 17 %

    microsoft · windows 20005 дек. 2007 г.

  • CVE-2007-4575
    41В плане

    HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code

    КритическаяCVSS 9,3Эксплойта нетEPSS 14 %

    openoffice · openoffice5 дек. 2007 г.

  • CVE-2007-6262
    30Наблюдать

    A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arg

    СредняяCVSS 6,8Proof of conceptEPSS 11 %

    videolan · vlc media player5 дек. 2007 г.

  • CVE-2007-5969
    32Наблюдать

    MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4

    ВысокаяCVSS 7,1Эксплойта нетEPSS 14 %

    mysql · mysql server10 дек. 2007 г.

  • CVE-2007-6312
    22Наблюдать

    Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 a

    СредняяCVSS 4,3Эксплойта нетEPSS 15 %

    websense · enterpise11 дек. 2007 г.

  • CVE-2007-0064
    48В плане

    Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Wi

    КритическаяCVSS 9,3Эксплойта нетEPSS 35 %

    microsoft · windows 200011 дек. 2007 г.

  • CVE-2007-3039
    57В плане

    Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional

    КритическаяCVSS 9,0Готовый эксплойтEPSS 69 %

    microsoft · windows 200011 дек. 2007 г.

  • CVE-2007-3895
    48В плане

    Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafte

    КритическаяCVSS 9,3Эксплойта нетEPSS 36 %

    microsoft · windows 200011 дек. 2007 г.

  • CVE-2007-3901
    48В плане

    Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.

    ВысокаяCVSS 8,5Готовый эксплойтEPSS 45 %

    microsoft · windows 200011 дек. 2007 г.

  • CVE-2007-3902
    48В плане

    Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attac

    КритическаяCVSS 9,3Эксплойта нетEPSS 35 %

    microsoft · ie11 дек. 2007 г.

  • CVE-2007-3903
    36Наблюдать

    Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated

    СредняяCVSS 6,8Эксплойта нетEPSS 31 %

    microsoft · ie11 дек. 2007 г.

  • CVE-2007-5344
    35Наблюдать

    Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that cre

    СредняяCVSS 6,8Эксплойта нетEPSS 27 %

    microsoft · ie11 дек. 2007 г.

  • CVE-2007-5347
    35Наблюдать

    Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects,"

    СредняяCVSS 6,8Эксплойта нетEPSS 28 %

    microsoft · ie11 дек. 2007 г.

  • CVE-2007-5351
    52В плане

    Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows remote attackers to fo

    КритическаяCVSS 10,0Эксплойта нетEPSS 41 %

    microsoft · windows vista11 дек. 2007 г.

  • CVE-2007-5000
    31Наблюдать

    Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61

    СредняяCVSS 4,3Эксплойта нетEPSS 46 %

    apache · http server13 дек. 2007 г.

  • CVE-2007-6325
    30Наблюдать

    PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attackers to execute arbitr

    СредняяCVSS 6,8Proof of conceptEPSS 10 %

    fastpublish · fastpublish cms13 дек. 2007 г.

  • CVE-2007-6327
    33Наблюдать

    Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attackers to execute arbi

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    avs media · avsmjpegfile.dll13 дек. 2007 г.

  • CVE-2007-6329
    30Наблюдать

    Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it ea

    СредняяCVSS 6,4Эксплойта нетEPSS 15 %

    microsoft · office13 дек. 2007 г.

  • CVE-2007-6331
    46В плане

    Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfo

    КритическаяCVSS 9,3Proof of conceptEPSS 30 %

    hp · info center13 дек. 2007 г.

  • CVE-2007-6015
    45В плане

    Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled

    КритическаяCVSS 9,3Proof of conceptEPSS 27 %

    samba · samba13 дек. 2007 г.

  • CVE-2007-6204
    61На этой неделе

    Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute ar

    КритическаяCVSS 10,0Готовый эксплойтEPSS 69 %

    hp · openview network node manager13 дек. 2007 г.

  • CVE-2007-6195
    44В плане

    Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX

    КритическаяCVSS 10,0Эксплойта нетEPSS 13 %

    hp · hp-ux14 дек. 2007 г.

  • CVE-2007-6357
    28Наблюдать

    Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Micros

    СредняяCVSS 5,8Эксплойта нетEPSS 15 %

    microsoft · access14 дек. 2007 г.

  • CVE-2007-6377
    50В плане

    Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitra

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 66 %

    badblue · badblue14 дек. 2007 г.

  • CVE-2007-6387
    48В плане

    Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics Ans

    КритическаяCVSS 9,3Proof of conceptEPSS 38 %

    intuit · bookkeeping14 дек. 2007 г.

  • CVE-2007-6401
    46В плане

    Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allow

    КритическаяCVSS 9,3Proof of conceptEPSS 29 %

    3ivx · mpeg-4 codec17 дек. 2007 г.

  • CVE-2007-5849
    41В плане

    Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers t

    КритическаяCVSS 9,3Proof of conceptEPSS 13 %

    apple · mac os x19 дек. 2007 г.

  • CVE-2007-5863
    44В плане

    Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle (MITM) attack between

    КритическаяCVSS 9,3Готовый эксплойтEPSS 22 %

    apple · mac os x19 дек. 2007 г.

  • CVE-2007-6454
    45В плане

    Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remot

    КритическаяCVSS 10,0Proof of conceptEPSS 16 %

    peercast · peercast19 дек. 2007 г.

  • CVE-2007-6242
    36Наблюдать

    Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vect

    СредняяCVSS 6,8Эксплойта нетEPSS 30 %

    adobe · flash player19 дек. 2007 г.

  • CVE-2007-6244
    21Наблюдать

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 allow remote attackers t

    СредняяCVSS 4,3Proof of conceptEPSS 12 %

    adobe · flash player19 дек. 2007 г.

  • CVE-2007-6246
    21Наблюдать

    Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running on Linux, uses insecure permissions for memo

    СредняяCVSS 4,4Эксплойта нетEPSS 11 %

    linux · linux kernel19 дек. 2007 г.

  • CVE-2007-6335
    36Наблюдать

    Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, whic

    ВысокаяCVSS 7,5Proof of conceptEPSS 18 %

    clam anti-virus · clamav19 дек. 2007 г.

  • CVE-2007-6483
    23Наблюдать

    Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    safenet · sentinel keys server20 дек. 2007 г.

  • CVE-2007-6485
    33Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute arbitrary PHP code vi

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    centreon · centreon20 дек. 2007 г.

  • CVE-2007-6494
    44В плане

    Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with

    КритическаяCVSS 10,0Proof of conceptEPSS 11 %

    hosting controller · hosting controller20 дек. 2007 г.

  • CVE-2007-6506
    42В плане

    The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4

    КритическаяCVSS 9,3Proof of conceptEPSS 16 %

    hp · software update20 дек. 2007 г.

  • CVE-2007-6507
    51В плане

    SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from

    КритическаяCVSS 10,0Готовый эксплойтEPSS 36 %

    trend micro · serverprotect20 дек. 2007 г.

  • CVE-2007-4567
    35Наблюдать

    The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended

    ВысокаяCVSS 7,8Proof of conceptEPSS 14 %

    linux · linux kernel20 дек. 2007 г.

  • CVE-2007-6509
    48В плане

    Unspecified vulnerability in Appian Enterprise Business Process Management (BPM) Suite 5.6 SP1 allows remote attackers to cause a denial of

    ВысокаяCVSS 7,8Готовый эксплойтEPSS 55 %

    appian · business process management suite21 дек. 2007 г.

  • CVE-2007-6514
    28Наблюдать

    Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unp

    СредняяCVSS 4,3Proof of conceptEPSS 38 %

    linux · linux kernel21 дек. 2007 г.

  • CVE-2007-4474
    50В плане

    Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll

    КритическаяCVSS 9,3Готовый эксплойтEPSS 44 %

    ibm · domino web access27 дек. 2007 г.

  • CVE-2007-6530
    48В плане

    Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by H

    КритическаяCVSS 9,3Готовый эксплойтEPSS 36 %

    persits · xupload27 дек. 2007 г.

  • CVE-2007-6533
    34Наблюдать

    Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    inmatrix · zoom player27 дек. 2007 г.

  • CVE-2007-6534
    30Наблюдать

    Multiple unspecified vulnerabilities in Microsoft Office Publisher allow user-assisted remote attackers to cause a denial of service (applic

    СредняяCVSS 6,8Эксплойта нетEPSS 11 %

    microsoft · publisher27 дек. 2007 г.