Yayın tarihine göre
Haziran 2005: sömürülen ve yeni ciddi CVE kayıtları
25 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2005-1790Silahlaştırılmış | Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of servicmicrosoft · internet explorer · CWE-399 | Düşük2,6 | — | %83,4 | 1 Haz 2005 |
34İzleyin | CVE-2005-1794Kavram kanıtı | Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificatmicrosoft · remote desktop connection | Yüksek7,4 | — | %16,3 | 1 Haz 2005 |
59Planlayın | CVE-2005-1812Silahlaştırılmış | Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code futuresoft · tftp server 2000 · CWE-119 | Kritik10,0 | — | %62,9 | 1 Haz 2005 |
40Planlayın | CVE-2005-1815Silahlaştırılmış | Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly hummingbird · connectivity | Orta5,0 | — | %47,1 | 1 Haz 2005 |
40Planlayın | CVE-2005-1758Silahlaştırılmış | Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrarnovell · netmail | Yüksek7,5 | — | %16,0 | 8 Haz 2005 |
24İzleyin | CVE-2005-1267Kavram kanıtı | The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remotlbl · tcpdump | Orta5,0 | — | %13,5 | 10 Haz 2005 |
38İzleyin | CVE-2005-1935İstismar yok | Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitrmicrosoft · windows 2000 | Yüksek7,5 | — | %26,6 | 13 Haz 2005 |
25İzleyin | CVE-2005-0488İstismar yok | Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive enmicrosoft · telnet client | Orta5,0 | — | %17,1 | 14 Haz 2005 |
21İzleyin | CVE-2005-0563İstismar yok | Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to imicrosoft · exchange server · CWE-79 | Orta4,3 | — | %14,2 | 14 Haz 2005 |
30İzleyin | CVE-2005-1205İstismar yok | The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive envmicrosoft · windows 2003 server | Orta5,0 | — | %33,0 | 14 Haz 2005 |
48Planlayın | CVE-2005-1206İstismar yok | Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows rmicrosoft · windows 2000 | Yüksek7,5 | — | %59,3 | 14 Haz 2005 |
54Planlayın | CVE-2005-1208İstismar yok | Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitmicrosoft · windows 2000 | Kritik10,0 | — | %47,3 | 14 Haz 2005 |
29İzleyin | CVE-2005-1211İstismar yok | Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a microsoft · internet explorer | Orta5,1 | — | %28,7 | 14 Haz 2005 |
37İzleyin | CVE-2005-1212İstismar yok | Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmarkmicrosoft · windows 2000 | Yüksek7,5 | — | %24,9 | 14 Haz 2005 |
52Planlayın | CVE-2005-1213Silahlaştırılmış | Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP smicrosoft · outlook express | Yüksek7,5 | — | %73,9 | 14 Haz 2005 |
24İzleyin | CVE-2005-1214İstismar yok | Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malmicrosoft · windows 2000 | Orta5,1 | — | %12,8 | 14 Haz 2005 |
36İzleyin | CVE-2005-1215İstismar yok | Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP requesmicrosoft · isa server | Yüksek7,5 | — | %19,0 | 14 Haz 2005 |
38İzleyin | CVE-2005-1216İstismar yok | Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISAmicrosoft · isa server | Yüksek7,5 | — | %25,8 | 14 Haz 2005 |
34İzleyin | CVE-2005-1306Kavram kanıtı | The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascripadobe · acrobat · CWE-611 | Yüksek7,5 | — | %14,5 | 15 Haz 2005 |
56Planlayın | CVE-2005-0773Silahlaştırılmış | Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allowsymantec veritas · backup exec | Yüksek7,5 | — | %86,3 | 18 Haz 2005 |
36İzleyin | CVE-2005-1250Kavram kanıtı | SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allowsipswitch · whatsup | Yüksek7,5 | — | %20,8 | 22 Haz 2005 |
25İzleyin | CVE-2005-1524Kavram kanıtı | PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arthe cacti group · cacti | Orta5,0 | — | %15,8 | 22 Haz 2005 |
35İzleyin | CVE-2005-1526Kavram kanıtı | PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code the cacti group · cacti | Yüksek7,5 | — | %16,5 | 22 Haz 2005 |
56Planlayın | CVE-2005-0771Silahlaştırılmış | VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calsymantec veritas · backup exec | Kritik10,0 | — | %54,1 | 23 Haz 2005 |
41Planlayın | CVE-2005-0772İstismar yok | VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a deniaveritas · backup exec · CWE-476 | Yüksek7,5 | — | %35,7 | 28 Haz 2005 |
- CVE-2005-179040Planlayın
Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of servic
DüşükCVSS 2,6SilahlaştırılmışEPSS %83microsoft · internet explorer1 Haz 2005
- CVE-2005-179434İzleyin
Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificat
YüksekCVSS 7,4Kavram kanıtıEPSS %16microsoft · remote desktop connection1 Haz 2005
- CVE-2005-181259Planlayın
Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code
KritikCVSS 10,0SilahlaştırılmışEPSS %62futuresoft · tftp server 20001 Haz 2005
- CVE-2005-181540Planlayın
Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly
OrtaCVSS 5,0SilahlaştırılmışEPSS %47hummingbird · connectivity1 Haz 2005
- CVE-2005-175840Planlayın
Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrar
YüksekCVSS 7,5SilahlaştırılmışEPSS %16novell · netmail8 Haz 2005
- CVE-2005-126724İzleyin
The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remot
OrtaCVSS 5,0Kavram kanıtıEPSS %13lbl · tcpdump10 Haz 2005
- CVE-2005-193538İzleyin
Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitr
YüksekCVSS 7,5İstismar yokEPSS %26microsoft · windows 200013 Haz 2005
- CVE-2005-048825İzleyin
Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive en
OrtaCVSS 5,0İstismar yokEPSS %17microsoft · telnet client14 Haz 2005
- CVE-2005-056321İzleyin
Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to i
OrtaCVSS 4,3İstismar yokEPSS %14microsoft · exchange server14 Haz 2005
- CVE-2005-120530İzleyin
The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive env
OrtaCVSS 5,0İstismar yokEPSS %33microsoft · windows 2003 server14 Haz 2005
- CVE-2005-120648Planlayın
Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows r
YüksekCVSS 7,5İstismar yokEPSS %59microsoft · windows 200014 Haz 2005
- CVE-2005-120854Planlayın
Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbit
KritikCVSS 10,0İstismar yokEPSS %47microsoft · windows 200014 Haz 2005
- CVE-2005-121129İzleyin
Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a
OrtaCVSS 5,1İstismar yokEPSS %28microsoft · internet explorer14 Haz 2005
- CVE-2005-121237İzleyin
Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark
YüksekCVSS 7,5İstismar yokEPSS %24microsoft · windows 200014 Haz 2005
- CVE-2005-121352Planlayın
Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP s
YüksekCVSS 7,5SilahlaştırılmışEPSS %73microsoft · outlook express14 Haz 2005
- CVE-2005-121424İzleyin
Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a mal
OrtaCVSS 5,1İstismar yokEPSS %12microsoft · windows 200014 Haz 2005
- CVE-2005-121536İzleyin
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP reques
YüksekCVSS 7,5İstismar yokEPSS %19microsoft · isa server14 Haz 2005
- CVE-2005-121638İzleyin
Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA
YüksekCVSS 7,5İstismar yokEPSS %25microsoft · isa server14 Haz 2005
- CVE-2005-130634İzleyin
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascrip
YüksekCVSS 7,5Kavram kanıtıEPSS %14adobe · acrobat15 Haz 2005
- CVE-2005-077356Planlayın
Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allow
YüksekCVSS 7,5SilahlaştırılmışEPSS %86symantec veritas · backup exec18 Haz 2005
- CVE-2005-125036İzleyin
SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows
YüksekCVSS 7,5Kavram kanıtıEPSS %20ipswitch · whatsup22 Haz 2005
- CVE-2005-152425İzleyin
PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute ar
OrtaCVSS 5,0Kavram kanıtıEPSS %15the cacti group · cacti22 Haz 2005
- CVE-2005-152635İzleyin
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code
YüksekCVSS 7,5Kavram kanıtıEPSS %16the cacti group · cacti22 Haz 2005
- CVE-2005-077156Planlayın
VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by cal
KritikCVSS 10,0SilahlaştırılmışEPSS %54symantec veritas · backup exec23 Haz 2005
- CVE-2005-077241Planlayın
VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denia
YüksekCVSS 7,5İstismar yokEPSS %35veritas · backup exec28 Haz 2005