İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2005: sömürülen ve yeni ciddi CVE kayıtları

32 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2005-2758
    44Planlayın

    Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute a

    KritikCVSS 10,0İstismar yokEPSS %13

    symantec · antivirus scan engine5 Eki 2005

  • CVE-2005-3142
    52Planlayın

    Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arb

    KritikCVSS 10,0İstismar yokEPSS %41

    kaspersky lab · kaspersky anti-virus5 Eki 2005

  • CVE-2005-3155
    49Planlayın

    Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %63

    mailenable · mailenable enterprise5 Eki 2005

  • CVE-2005-1978
    46Planlayın

    COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbi

    YüksekCVSS 7,5Kavram kanıtıEPSS %53

    microsoft · windows 200012 Eki 2005

  • CVE-2005-1979
    30İzleyin

    Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit

    OrtaCVSS 5,0Kavram kanıtıEPSS %32

    microsoft · windows 200012 Eki 2005

  • CVE-2005-1980
    30İzleyin

    Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service hang) via a crafte

    OrtaCVSS 5,0Kavram kanıtıEPSS %33

    microsoft · windows 200012 Eki 2005

  • CVE-2005-2119
    31İzleyin

    The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of mem

    OrtaCVSS 5,0Kavram kanıtıEPSS %35

    microsoft · windows 200012 Eki 2005

  • CVE-2005-2128
    32İzleyin

    QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a craft

    OrtaCVSS 5,0İstismar yokEPSS %40

    microsoft · windows media player12 Eki 2005

  • CVE-2005-2715
    58Planlayın

    Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and

    KritikCVSS 10,0Kavram kanıtıEPSS %60

    symantec veritas · netbackup data and business center12 Eki 2005

  • CVE-2005-1985
    41Planlayın

    The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attacker

    YüksekCVSS 7,5İstismar yokEPSS %37

    microsoft · windows 200013 Eki 2005

  • CVE-2005-1987
    43Planlayın

    Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to

    YüksekCVSS 7,5İstismar yokEPSS %44

    microsoft · exchange server13 Eki 2005

  • CVE-2005-2120
    45Planlayın

    Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remo

    OrtaCVSS 6,5SilahlaştırılmışEPSS %61

    microsoft · windows 200013 Eki 2005

  • CVE-2005-2943
    35İzleyin

    Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line op

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    davide libenzi · xmail13 Eki 2005

  • CVE-2005-3190
    49Planlayın

    Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to e

    YüksekCVSS 7,5SilahlaştırılmışEPSS %64

    broadcom · igateway13 Eki 2005

  • CVE-2005-2661
    34İzleyin

    Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers t

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    up-imapproxy · up-imapproxy14 Eki 2005

  • CVE-2005-3202
    30İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    oracle · html db14 Eki 2005

  • CVE-2005-3204
    23İzleyin

    Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query

    OrtaCVSS 4,3Kavram kanıtıEPSS %20

    oracle · application server14 Eki 2005

  • CVE-2005-3206
    26İzleyin

    iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop)

    OrtaCVSS 5,0Kavram kanıtıEPSS %21

    oracle · database server14 Eki 2005

  • CVE-2005-3207
    26İzleyin

    The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a user

    OrtaCVSS 5,0Kavram kanıtıEPSS %19

    oracle · forms14 Eki 2005

  • CVE-2005-3231
    24İzleyin

    Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detection via a malicious ex

    OrtaCVSS 5,1İstismar yokEPSS %14

    cat · quick heal14 Eki 2005

  • CVE-2005-3120
    46Planlayın

    Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certai

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    invisible-island · lynx17 Eki 2005

  • CVE-2005-3252
    55Planlayın

    Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code v

    YüksekCVSS 7,5SilahlaştırılmışEPSS %83

    sourcefire · snort18 Eki 2005

  • CVE-2005-2117
    31İzleyin

    Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters

    OrtaCVSS 5,1İstismar yokEPSS %37

    microsoft · windows explorer21 Eki 2005

  • CVE-2005-2118
    34İzleyin

    Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary com

    OrtaCVSS 5,1İstismar yokEPSS %47

    microsoft · windows 200021 Eki 2005

  • CVE-2005-2122
    54Planlayın

    Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a sh

    KritikCVSS 10,0İstismar yokEPSS %46

    microsoft · windows 200021 Eki 2005

  • CVE-2005-2126
    14İzleyin

    The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" i

    DüşükCVSS 2,6İstismar yokEPSS %14

    microsoft · ie21 Eki 2005

  • CVE-2005-3277
    46Planlayın

    The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or si

    KritikCVSS 10,0Kavram kanıtıEPSS %21

    hp · hp-ux21 Eki 2005

  • CVE-2005-3299
    25İzleyin

    PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files vi

    OrtaCVSS 5,0Kavram kanıtıEPSS %15

    phpmyadmin · phpmyadmin23 Eki 2005

  • CVE-2005-2970
    24İzleyin

    Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memor

    OrtaCVSS 5,0İstismar yokEPSS %14

    apache · http server25 Eki 2005

  • CVE-2005-3312
    21İzleyin

    The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · internet explorer26 Eki 2005

  • CVE-2005-3243
    33İzleyin

    Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    ethereal group · ethereal27 Eki 2005

  • CVE-2005-3330
    35İzleyin

    The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows rem

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    snoopy · snoopy27 Eki 2005