İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2005: sömürülen ve yeni ciddi CVE kayıtları

32 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2005-3388
    32İzleyin

    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to injec

    OrtaCVSS 4,3Kavram kanıtıEPSS %48

    php · php1 Kas 2005

  • CVE-2005-3390
    50Planlayın

    The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to mod

    YüksekCVSS 7,5Kavram kanıtıEPSS %65

    php · php1 Kas 2005

  • CVE-2005-3398
    40Planlayın

    The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method,

    OrtaCVSS 4,3SilahlaştırılmışEPSS %13

    sun · solaris1 Kas 2005

  • CVE-2005-3404
    33İzleyin

    Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the sect

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    adaptive technology resource centre · atutor1 Kas 2005

  • CVE-2005-3486
    33İzleyin

    Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1)

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    scorched 3d · scorched 3d3 Kas 2005

  • CVE-2005-3488
    34İzleyin

    Scorched 3D 39.1 (bf) and earlier allows remote attackers to cause a denial of service (long loop and server hang) via a negative numplayers

    YüksekCVSS 7,8Kavram kanıtıEPSS %10

    scorched 3d · scorched 3d3 Kas 2005

  • CVE-2005-3498
    40Planlayın

    IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled,

    OrtaCVSS 4,3SilahlaştırılmışEPSS %11

    ibm · websphere application server3 Kas 2005

  • CVE-2005-3507
    24İzleyin

    Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, and gain privileges vi

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    cutephp · cutenews6 Kas 2005

  • CVE-2005-3524
    46Planlayın

    Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a

    KritikCVSS 10,0Kavram kanıtıEPSS %21

    linux-ftpd-ssl · linux-ftpd-ssl6 Kas 2005

  • CVE-2005-3559
    26İzleyin

    Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %20

    digium · asterisk16 Kas 2005

  • CVE-2005-3560
    35İzleyin

    Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm Anti-Spyware 6.0 thr

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    zonelabs · zonealarm16 Kas 2005

  • CVE-2005-3589
    47Planlayın

    Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER

    YüksekCVSS 7,8SilahlaştırılmışEPSS %52

    filezilla · filezilla server terminal16 Kas 2005

  • CVE-2005-3591
    33İzleyin

    Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attacker

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    macromedia · flash player16 Kas 2005

  • CVE-2005-3595
    45Planlayın

    By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows remote attackers to

    KritikCVSS 10,0İstismar yokEPSS %16

    microsoft · windows xp16 Kas 2005

  • CVE-2005-3634
    25İzleyin

    frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    sap · sap web application server16 Kas 2005

  • CVE-2005-3644
    44Planlayın

    PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows r

    YüksekCVSS 7,8Kavram kanıtıEPSS %42

    microsoft · windows 200017 Kas 2005

  • CVE-2005-3116
    48Planlayın

    Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to

    KritikCVSS 10,0Kavram kanıtıEPSS %27

    symantec veritas · netbackup18 Kas 2005

  • CVE-2005-3314
    50Planlayın

    Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb argu

    YüksekCVSS 7,5SilahlaştırılmışEPSS %65

    novell · netmail18 Kas 2005

  • CVE-2005-2629
    24İzleyin

    Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to exec

    OrtaCVSS 5,1Kavram kanıtıEPSS %12

    realnetworks · helix player18 Kas 2005

  • CVE-2005-3683
    51Planlayın

    Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application

    YüksekCVSS 7,5SilahlaştırılmışEPSS %71

    freeftpd · freeftpd18 Kas 2005

  • CVE-2005-3684
    34İzleyin

    Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a denial of service (app

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    freeftpd · freeftpd18 Kas 2005

  • CVE-2005-3694
    35İzleyin

    centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service (segmentation fault a

    YüksekCVSS 7,8Kavram kanıtıEPSS %11

    centericq · centericq20 Kas 2005

  • CVE-2005-3737
    24İzleyin

    Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a

    OrtaCVSS 5,1Kavram kanıtıEPSS %13

    inkscape · inkscape21 Kas 2005

  • CVE-2005-3745
    25İzleyin

    Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web

    OrtaCVSS 4,3Kavram kanıtıEPSS %25

    apache · struts22 Kas 2005

  • CVE-2005-3757
    42Planlayın

    The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive inf

    YüksekCVSS 7,5SilahlaştırılmışEPSS %41

    google · mini search appliance22 Kas 2005

  • CVE-2005-3758
    23İzleyin

    Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to i

    OrtaCVSS 4,3İstismar yokEPSS %19

    google · mini search appliance22 Kas 2005

  • CVE-2005-3774
    25İzleyin

    Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    cisco · pix22 Kas 2005

  • CVE-2005-3792
    43Planlayın

    Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows r

    YüksekCVSS 7,5Kavram kanıtıEPSS %44

    francisco burzi · php-nuke24 Kas 2005

  • CVE-2005-3862
    36İzleyin

    Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives.

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    unalz · unalz29 Kas 2005

  • CVE-2005-2123
    48Planlayın

    Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remot

    YüksekCVSS 7,5Kavram kanıtıEPSS %61

    microsoft · windows 200029 Kas 2005

  • CVE-2005-2124
    47Planlayın

    Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to

    YüksekCVSS 7,6Kavram kanıtıEPSS %55

    microsoft · windows 200029 Kas 2005

  • CVE-2005-3912
    34İzleyin

    Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled, all

    YüksekCVSS 7,5İstismar yokEPSS %14

    webmin · webmin30 Kas 2005