İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2005: sömürülen ve yeni ciddi CVE kayıtları

22 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2005-2428
    42Planlayın

    Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, whi

    OrtaCVSS 5,0Kavram kanıtıEPSS %73

    ibm · lotus domino3 Ağu 2005

  • CVE-2005-1272
    50Planlayın

    Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remo

    YüksekCVSS 7,5SilahlaştırılmışEPSS %66

    broadcom · brightstor enterprise backup5 Ağu 2005

  • CVE-2005-0058
    44Planlayın

    Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000,

    YüksekCVSS 7,5Kavram kanıtıEPSS %46

    microsoft · windows 200010 Ağu 2005

  • CVE-2005-1218
    37İzleyin

    The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial

    OrtaCVSS 5,0Kavram kanıtıEPSS %57

    microsoft · windows 200010 Ağu 2005

  • CVE-2005-1983
    68Bu hafta

    Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attack

    KritikCVSS 10,0SilahlaştırılmışEPSS %93

    microsoft · windows 200010 Ağu 2005

  • CVE-2005-1984
    47Planlayın

    Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote att

    YüksekCVSS 7,5İstismar yokEPSS %55

    microsoft · windows 200010 Ağu 2005

  • CVE-2005-1988
    34İzleyin

    Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-m

    OrtaCVSS 5,1Kavram kanıtıEPSS %45

    microsoft · ie10 Ağu 2005

  • CVE-2005-1989
    44Planlayın

    Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when br

    YüksekCVSS 7,5Kavram kanıtıEPSS %45

    microsoft · ie10 Ağu 2005

  • CVE-2005-1990
    35İzleyin

    Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary

    OrtaCVSS 5,1Kavram kanıtıEPSS %48

    microsoft · ie10 Ağu 2005

  • CVE-2005-2535
    54Planlayın

    Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary command

    YüksekCVSS 7,5SilahlaştırılmışEPSS %80

    broadcom · arcserve backup 200010 Ağu 2005

  • CVE-2005-2551
    47Planlayın

    Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and ob

    YüksekCVSS 7,5SilahlaştırılmışEPSS %55

    novell · edirectory12 Ağu 2005

  • CVE-2005-2103
    44Planlayın

    Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    gaim project · gaim16 Ağu 2005

  • CVE-2005-2470
    34İzleyin

    Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a

    YüksekCVSS 7,5İstismar yokEPSS %13

    adobe · acrobat16 Ağu 2005

  • CVE-2005-2611
    66Bu hafta

    VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Serve

    KritikCVSS 10,0SilahlaştırılmışEPSS %87

    symantec veritas · backup exec17 Ağu 2005

  • CVE-2005-2612
    42Planlayın

    Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_las

    YüksekCVSS 7,5SilahlaştırılmışEPSS %38

    wordpress · wordpress17 Ağu 2005

  • CVE-2005-2616
    33İzleyin

    Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path parameter to (1) ini

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    ezupload · ezupload17 Ağu 2005

  • CVE-2005-2127
    49Planlayın

    Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute a

    YüksekCVSS 7,5Kavram kanıtıEPSS %63

    ati · catalyst driver19 Ağu 2005

  • CVE-2005-2665
    35İzleyin

    Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitra

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    elm development group · elm23 Ağu 2005

  • CVE-2005-2668
    63Bu hafta

    Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_

    KritikCVSS 10,0SilahlaştırılmışEPSS %75

    ca · etrust admin23 Ağu 2005

  • CVE-2005-2678
    33İzleyin

    Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via

    OrtaCVSS 5,0İstismar yokEPSS %41

    microsoft · internet information server23 Ağu 2005

  • CVE-2005-2728
    23İzleyin

    The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP head

    OrtaCVSS 5,0İstismar yokEPSS %10

    apache · http server30 Ağu 2005

  • CVE-2005-2733
    45Planlayın

    upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote atta

    YüksekCVSS 7,5SilahlaştırılmışEPSS %51

    alexander palmo · simple php blog30 Ağu 2005