İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2006: sömürülen ve yeni ciddi CVE kayıtları

23 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2006-0097
    34İzleyin

    Stack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Windows allows attacker

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    php · php6 Oca 2006

  • CVE-2006-0143
    39İzleyin

    Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF

    YüksekCVSS 7,5Kavram kanıtıEPSS %31

    microsoft · windows 20009 Oca 2006

  • CVE-2006-0146
    34İzleyin

    The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Ca

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    mantis · mantis9 Oca 2006

  • CVE-2006-0147
    34İzleyin

    Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    john lim · adodb9 Oca 2006

  • CVE-2006-0162
    33İzleyin

    Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (c

    YüksekCVSS 7,5İstismar yokEPSS %10

    clam anti-virus · clamav10 Oca 2006

  • CVE-2006-0020
    43Planlayın

    An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millenni

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · windows 200010 Oca 2006

  • CVE-2006-0002
    44Planlayın

    Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows

    YüksekCVSS 7,5İstismar yokEPSS %45

    microsoft · exchange server10 Oca 2006

  • CVE-2006-0010
    47Planlayın

    Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows

    KritikCVSS 9,3İstismar yokEPSS %33

    microsoft · windows 200010 Oca 2006

  • CVE-2006-0179
    24İzleyin

    The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN packets (syn flood) to a

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    cisco · ip phone 794011 Oca 2006

  • CVE-2006-0187
    26İzleyin

    By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function)

    OrtaCVSS 5,1Kavram kanıtıEPSS %19

    microsoft · visual studio .net12 Oca 2006

  • CVE-2006-0189
    35İzleyin

    Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka "a

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    estara · softphone13 Oca 2006

  • CVE-2006-0200
    43Planlayın

    Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to ex

    KritikCVSS 9,3İstismar yokEPSS %19

    php · php13 Oca 2006

  • CVE-2006-0254
    27İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via

    OrtaCVSS 4,3Kavram kanıtıEPSS %32

    apache · geronimo17 Oca 2006

  • CVE-2006-0287
    49Planlayın

    Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspe

    KritikCVSS 10,0Kavram kanıtıEPSS %29

    oracle · application server18 Oca 2006

  • CVE-2006-0289
    44Planlayın

    Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecif

    KritikCVSS 10,0İstismar yokEPSS %12

    oracle · application server18 Oca 2006

  • CVE-2006-0306
    24İzleyin

    The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARC

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    ca · unicenter remote control18 Oca 2006

  • CVE-2006-0316
    43Planlayın

    Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and

    KritikCVSS 10,0İstismar yokEPSS %10

    aol · aol client software18 Oca 2006

  • CVE-2006-0354
    25İzleyin

    Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (terminat

    OrtaCVSS 5,5Kavram kanıtıEPSS %10

    cisco · aironet ap110022 Oca 2006

  • CVE-2006-0376
    35İzleyin

    The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user w

    YüksekCVSS 7,5İstismar yokEPSS %18

    microsoft · windows 200022 Oca 2006

  • CVE-2006-0441
    51Planlayın

    Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which trigge

    YüksekCVSS 7,5SilahlaştırılmışEPSS %71

    karjasoft · sami ftp server26 Oca 2006

  • CVE-2006-0057
    36İzleyin

    Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unkn

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · ie27 Oca 2006

  • CVE-2006-0468
    33İzleyin

    CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vi

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    stalker · communigate pro30 Oca 2006

  • CVE-2006-0476
    52Planlayın

    Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (F

    YüksekCVSS 7,6SilahlaştırılmışEPSS %74

    nullsoft · winamp31 Oca 2006