İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2005: sömürülen ve yeni ciddi CVE kayıtları

27 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2005-0360
    24İzleyin

    The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote att

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · log sink class activex control5 Tem 2005

  • CVE-2005-1921
    54Planlayın

    Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1

    YüksekCVSS 7,5SilahlaştırılmışEPSS %79

    php · xml rpc5 Tem 2005

  • CVE-2005-2086
    56Planlayın

    PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %85

    phpbb group · phpbb5 Tem 2005

  • CVE-2005-2087
    38İzleyin

    Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers t

    OrtaCVSS 5,0Kavram kanıtıEPSS %61

    microsoft · ie5 Tem 2005

  • CVE-2005-2088
    23İzleyin

    The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache

    OrtaCVSS 4,3İstismar yokEPSS %20

    apache · http server5 Tem 2005

  • CVE-2005-2089
    26İzleyin

    Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attac

    OrtaCVSS 4,3İstismar yokEPSS %30

    microsoft · internet information services5 Tem 2005

  • CVE-2005-2090
    25İzleyin

    Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application fi

    OrtaCVSS 4,3İstismar yokEPSS %26

    apache · tomcat5 Tem 2005

  • CVE-2005-2150
    26İzleyin

    Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate na

    OrtaCVSS 5,0İstismar yokEPSS %19

    microsoft · windows 200011 Tem 2005

  • CVE-2005-2199
    33İzleyin

    PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    skrypty · ppa gallery11 Tem 2005

  • CVE-2005-0564
    38İzleyin

    Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers

    YüksekCVSS 7,5İstismar yokEPSS %25

    microsoft · word12 Tem 2005

  • CVE-2005-1219
    45Planlayın

    Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with cra

    YüksekCVSS 7,5Kavram kanıtıEPSS %49

    microsoft · image color management12 Tem 2005

  • CVE-2005-2223
    35İzleyin

    Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a d

    OrtaCVSS 5,0İstismar yokEPSS %50

    mailenable · mailenable professional12 Tem 2005

  • CVE-2005-2224
    25İzleyin

    aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) vi

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · asp.net12 Tem 2005

  • CVE-2005-2225
    25İzleyin

    Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is

    OrtaCVSS 5,0İstismar yokEPSS %16

    microsoft · msn messenger service12 Tem 2005

  • CVE-2005-2226
    24İzleyin

    Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could all

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · outlook express12 Tem 2005

  • CVE-2005-2250
    33İzleyin

    Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    nokia · affix13 Tem 2005

  • CVE-2005-2265
    40Planlayın

    Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violatio

    OrtaCVSS 5,0SilahlaştırılmışEPSS %68

    mozilla · firefox13 Tem 2005

  • CVE-2005-2277
    44Planlayın

    Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters i

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    nokia · affix15 Tem 2005

  • CVE-2005-1689
    42Planlayın

    Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitr

    KritikCVSS 9,8İstismar yokEPSS %11

    mit · kerberos 518 Tem 2005

  • CVE-2005-2278
    53Planlayın

    Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrar

    YüksekCVSS 7,2SilahlaştırılmışEPSS %84

    mailenable · mailenable professional18 Tem 2005

  • CVE-2005-2287
    40Planlayın

    SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large TCP packet with a lea

    OrtaCVSS 5,0SilahlaştırılmışEPSS %56

    softiacom · wmailserver18 Tem 2005

  • CVE-2005-2297
    40Planlayın

    Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary cod

    OrtaCVSS 4,6SilahlaştırılmışEPSS %74

    sybase · easerver19 Tem 2005

  • CVE-2005-2307
    28İzleyin

    netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service cra

    OrtaCVSS 5,0Kavram kanıtıEPSS %25

    microsoft · windows 200019 Tem 2005

  • CVE-2005-2308
    35İzleyin

    The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    microsoft · ie19 Tem 2005

  • CVE-2005-2310
    41Planlayın

    Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an M

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    nullsoft · winamp19 Tem 2005

  • CVE-2005-2371
    27İzleyin

    Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..",

    OrtaCVSS 5,0İstismar yokEPSS %22

    oracle · reports26 Tem 2005

  • CVE-2005-2373
    42Planlayın

    Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST,

    YüksekCVSS 7,2SilahlaştırılmışEPSS %45

    whitsoft development · slimftpd26 Tem 2005