Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: февраль 2008 г.

59 записей · 2 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2007-6697
    33Наблюдать

    Buffer overflow in the LWZReadByte function in IMG_gif.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (app

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    sdl · sdl image1 февр. 2008 г.

  • CVE-2008-0550
    56В плане

    Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary co

    КритическаяCVSS 10,0Готовый эксплойтEPSS 53 %

    radio toolbox · steamcast1 февр. 2008 г.

  • CVE-2008-0551
    46В плане

    The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 a

    КритическаяCVSS 9,3Proof of conceptEPSS 29 %

    sejoong namo · activesquare1 февр. 2008 г.

  • CVE-2008-0566
    34Наблюдать

    PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute

    СредняяCVSS 6,8Proof of conceptEPSS 23 %

    deltascripts · php links4 февр. 2008 г.

  • CVE-2008-0567
    40В плане

    Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for Joomla! allow remote

    ВысокаяCVSS 7,5Proof of conceptEPSS 34 %

    chronoengine · chronoforms4 февр. 2008 г.

  • CVE-2008-0572
    33Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP code via a URL in th

    СредняяCVSS 6,8Proof of conceptEPSS 21 %

    mindmeld · mindmeld4 февр. 2008 г.

  • CVE-2008-0590
    43В плане

    Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service (crash) and possib

    КритическаяCVSS 9,0Proof of conceptEPSS 22 %

    progress · ws ftp server5 февр. 2008 г.

  • CVE-2008-0610
    49В плане

    Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for Ul

    КритическаяCVSS 9,3Готовый эксплойтEPSS 38 %

    ultravnc · ultravnc6 февр. 2008 г.

  • CVE-2008-0619
    40В плане

    Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arbitrary code or cause

    КритическаяCVSS 9,3Proof of conceptEPSS 10 %

    nero · mediaplayer6 февр. 2008 г.

  • CVE-2008-0621
    52В плане

    Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary c

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 73 %

    sap · sapgui6 февр. 2008 г.

  • CVE-2008-0635
    34Наблюдать

    Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via un

    ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %

    openads · openads6 февр. 2008 г.

  • CVE-2008-0457
    44В плане

    Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec B

    КритическаяCVSS 10,0Proof of conceptEPSS 11 %

    symantec · backupexec system recovery7 февр. 2008 г.

  • CVE-2008-0645
    40В плане

    Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL

    ВысокаяCVSS 7,5Proof of conceptEPSS 34 %

    portail web php · portail web php7 февр. 2008 г.

  • CVE-2008-0655
    76На этой неделе

    Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 37 %

    adobe · acrobat7 февр. 2008 г.

  • CVE-2008-0177
    36Наблюдать

    The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of th

    ВысокаяCVSS 7,8Proof of conceptEPSS 15 %

    kame · ipcomp7 февр. 2008 г.

  • CVE-2008-0659
    57В плане

    Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUpl

    КритическаяCVSS 10,0Proof of conceptEPSS 56 %

    aurigma · image uploader activex control7 февр. 2008 г.

  • CVE-2008-0660
    48В плане

    Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and

    КритическаяCVSS 9,3Proof of conceptEPSS 37 %

    aurigma · image uploader activex control7 февр. 2008 г.

  • CVE-2007-5333
    39Наблюдать

    Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters

    СредняяCVSS 5,0Proof of conceptEPSS 62 %

    apache · tomcat11 февр. 2008 г.

  • CVE-2008-0671
    45В плане

    Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitr

    КритическаяCVSS 10,0Proof of conceptEPSS 15 %

    tintin · tintin\+\+11 февр. 2008 г.

  • CVE-2007-5659
    87Срочно

    Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 87 %

    adobe · acrobat12 февр. 2008 г.

  • CVE-2007-5663
    41В плане

    Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure J

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    adobe · acrobat12 февр. 2008 г.

  • CVE-2008-0726
    41В плане

    Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to th

    КритическаяCVSS 9,3Эксплойта нетEPSS 14 %

    adobe · acrobat12 февр. 2008 г.

  • CVE-2008-0075
    57В плане

    Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code

    КритическаяCVSS 10,0Эксплойта нетEPSS 57 %

    microsoft · internet information server12 февр. 2008 г.

  • CVE-2008-0084
    53В плане

    Unspecified vulnerability in the TCP/IP support in Microsoft Windows Vista allows remote DHCP servers to cause a denial of service (hang and

    ВысокаяCVSS 7,8Эксплойта нетEPSS 73 %

    microsoft · windows vista12 февр. 2008 г.

  • CVE-2008-0088
    36Наблюдать

    Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM

    СредняяCVSS 6,8Эксплойта нетEPSS 28 %

    microsoft · windows 200012 февр. 2008 г.

  • CVE-2007-0065
    53В плане

    Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2,

    КритическаяCVSS 10,0Эксплойта нетEPSS 43 %

    microsoft · windows 200012 февр. 2008 г.

  • CVE-2007-0216
    48В плане

    wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to ex

    КритическаяCVSS 9,3Proof of conceptEPSS 38 %

    microsoft · office12 февр. 2008 г.

  • CVE-2008-0076
    46В плане

    Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via cr

    КритическаяCVSS 9,3Эксплойта нетEPSS 28 %

    microsoft · ie12 февр. 2008 г.

  • CVE-2008-0077
    46В плане

    Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by ass

    ВысокаяCVSS 8,8Эксплойта нетEPSS 37 %

    microsoft · internet explorer12 февр. 2008 г.

  • CVE-2008-0078
    46В плане

    Unspecified vulnerability in an ActiveX control (dxtmsft.dll) in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attack

    КритическаяCVSS 9,3Эксплойта нетEPSS 29 %

    microsoft · activex12 февр. 2008 г.

  • CVE-2008-0080
    52В плане

    Heap-based buffer overflow in the WebDAV Mini-Redirector in Microsoft Windows XP SP2, Server 2003 SP1 and SP2, and Vista allows remote attac

    КритическаяCVSS 10,0Эксплойта нетEPSS 40 %

    microsoft · windows 2003 server12 февр. 2008 г.

  • CVE-2008-0102
    51В плане

    Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a cra

    КритическаяCVSS 10,0Эксплойта нетEPSS 36 %

    microsoft · publisher12 февр. 2008 г.

  • CVE-2008-0104
    46В плане

    Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a cra

    КритическаяCVSS 9,3Эксплойта нетEPSS 28 %

    microsoft · office12 февр. 2008 г.

  • CVE-2008-0105
    50В плане

    Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute ar

    КритическаяCVSS 9,3Proof of conceptEPSS 43 %

    microsoft · office12 февр. 2008 г.

  • CVE-2008-0108
    53В плане

    Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Su

    КритическаяCVSS 9,3Proof of conceptEPSS 52 %

    microsoft · office12 февр. 2008 г.

  • CVE-2008-0109
    46В плане

    Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code vi

    КритическаяCVSS 9,3Эксплойта нетEPSS 30 %

    microsoft · office12 февр. 2008 г.

  • CVE-2008-0103
    46В плане

    Unspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to e

    КритическаяCVSS 9,3Эксплойта нетEPSS 30 %

    microsoft · office12 февр. 2008 г.

  • CVE-2008-0748
    45В плане

    Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38

    КритическаяCVSS 10,0Proof of conceptEPSS 16 %

    sony · axruploadserver activex control13 февр. 2008 г.

  • CVE-2007-6149
    44В плане

    Multiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allow

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    adobe · connect enterprise server13 февр. 2008 г.

  • CVE-2008-0639
    47В плане

    Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Wi

    КритическаяCVSS 10,0Эксплойта нетEPSS 23 %

    novell · client13 февр. 2008 г.

  • CVE-2008-0782
    24Наблюдать

    Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a ..

    СредняяCVSS 5,0Proof of conceptEPSS 14 %

    moinmoin · moinmoin14 февр. 2008 г.

  • CVE-2008-0803
    40В плане

    Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a

    ВысокаяCVSS 7,5Proof of conceptEPSS 32 %

    lookstrike · lan manager15 февр. 2008 г.

  • CVE-2007-6258
    42В плане

    Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary

    ВысокаяCVSS 7,5Proof of conceptEPSS 41 %

    apache · mod jk18 февр. 2008 г.

  • CVE-2008-0871
    40В плане

    Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a (

    СредняяCVSS 6,8Готовый эксплойтEPSS 32 %

    now · sms mms gateway21 февр. 2008 г.

  • CVE-2008-0912
    45В плане

    Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10

    КритическаяCVSS 10,0Proof of conceptEPSS 15 %

    sybase · mobilink22 февр. 2008 г.

  • CVE-2008-0935
    60На этой неделе

    Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.34 allows remote att

    КритическаяCVSS 10,0Готовый эксплойтEPSS 65 %

    novell · iprint25 февр. 2008 г.

  • CVE-2008-0944
    23Наблюдать

    Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application c

    СредняяCVSS 5,0Proof of conceptEPSS 11 %

    ipswitch · instant messaging25 февр. 2008 г.

  • CVE-2008-0984
    42В плане

    The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrit

    КритическаяCVSS 9,3Proof of conceptEPSS 15 %

    miro · miro player26 февр. 2008 г.

  • CVE-2008-1043
    45В плане

    PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 BETA allows remote att

    ВысокаяCVSS 7,5Proof of conceptEPSS 48 %

    linux web shop · php user base27 февр. 2008 г.

  • CVE-2008-1046
    33Наблюдать

    PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code

    СредняяCVSS 6,8Proof of conceptEPSS 21 %

    quinsonnas · quinsonnas mail checker27 февр. 2008 г.

  • CVE-2008-1051
    33Наблюдать

    PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary

    СредняяCVSS 6,8Proof of conceptEPSS 21 %

    phpprofiles · phpprofiles 27 февр. 2008 г.

  • CVE-2008-1059
    44В плане

    PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote a

    ВысокаяCVSS 7,5Proof of conceptEPSS 48 %

    wordpress · sniplets plugin28 февр. 2008 г.

  • CVE-2008-1060
    43В плане

    Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute

    ВысокаяCVSS 7,5Proof of conceptEPSS 44 %

    wordpress · sniplets plugin28 февр. 2008 г.

  • CVE-2008-0411
    31Наблюдать

    Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitr

    СредняяCVSS 6,8Proof of conceptEPSS 14 %

    ghostscript · ghostscript28 февр. 2008 г.

  • CVE-2008-1067
    34Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the

    СредняяCVSS 6,8Proof of conceptEPSS 21 %

    phpqladmin · phpqladmin28 февр. 2008 г.

  • CVE-2008-1069
    36Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a

    СредняяCVSS 6,8Proof of conceptEPSS 28 %

    quantum game library · quantum game library28 февр. 2008 г.

  • CVE-2008-1074
    38Наблюдать

    PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a U

    СредняяCVSS 6,8Proof of conceptEPSS 36 %

    group e · group e28 февр. 2008 г.

  • CVE-2007-6016
    52В плане

    Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the

    КритическаяCVSS 9,3Готовый эксплойтEPSS 50 %

    symantec · backup exec for windows server29 февр. 2008 г.

  • CVE-2008-1110
    30Наблюдать

    Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote atta

    СредняяCVSS 6,8Proof of conceptEPSS 10 %

    xine · xine-lib29 февр. 2008 г.