İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2006: sömürülen ve yeni ciddi CVE kayıtları

31 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2006-0988
    49Planlayın

    The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows

    YüksekCVSS 7,8SilahlaştırılmışEPSS %59

    microsoft · windows 20003 Mar 2006

  • CVE-2006-0987
    40Planlayın

    The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides addit

    OrtaCVSS 5,0SilahlaştırılmışEPSS %58

    isc · bind3 Mar 2006

  • CVE-2006-0814
    23İzleyin

    response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via

    OrtaCVSS 5,0İstismar yokEPSS %10

    lighttpd · lighttpd6 Mar 2006

  • CVE-2006-1010
    30İzleyin

    Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to cause a denial of s

    OrtaCVSS 6,4Kavram kanıtıEPSS %17

    crossfire · crossfire6 Mar 2006

  • CVE-2006-1015
    29İzleyin

    Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepting remote input for

    OrtaCVSS 6,4Kavram kanıtıEPSS %12

    php · php6 Mar 2006

  • CVE-2006-1016
    50Planlayın

    Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1,

    YüksekCVSS 7,5SilahlaştırılmışEPSS %66

    microsoft · internet explorer6 Mar 2006

  • CVE-2006-1043
    27İzleyin

    Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbit

    OrtaCVSS 5,1Kavram kanıtıEPSS %22

    microsoft · visual interdev7 Mar 2006

  • CVE-2006-1148
    52Planlayın

    Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to exe

    YüksekCVSS 7,5SilahlaştırılmışEPSS %73

    peercast · peercast10 Mar 2006

  • CVE-2006-1206
    24İzleyin

    Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remot

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    dropbear ssh project · dropbear ssh13 Mar 2006

  • CVE-2006-0396
    23İzleyin

    Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute

    OrtaCVSS 5,1Kavram kanıtıEPSS %11

    apple · mac os x14 Mar 2006

  • CVE-2006-0009
    24İzleyin

    Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary c

    OrtaCVSS 5,1İstismar yokEPSS %14

    microsoft · office14 Mar 2006

  • CVE-2006-0028
    25İzleyin

    Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att

    OrtaCVSS 5,1İstismar yokEPSS %16

    microsoft · excel14 Mar 2006

  • CVE-2006-0029
    24İzleyin

    Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att

    OrtaCVSS 5,1İstismar yokEPSS %14

    microsoft · excel14 Mar 2006

  • CVE-2006-0030
    32İzleyin

    Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att

    OrtaCVSS 5,1Kavram kanıtıEPSS %39

    microsoft · excel14 Mar 2006

  • CVE-2006-0031
    25İzleyin

    Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted a

    OrtaCVSS 5,1İstismar yokEPSS %18

    microsoft · office14 Mar 2006

  • CVE-2006-1236
    38İzleyin

    Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long se

    YüksekCVSS 7,5Kavram kanıtıEPSS %27

    crossfire · crossfire14 Mar 2006

  • CVE-2006-1245
    49Planlayın

    Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute

    YüksekCVSS 7,5Kavram kanıtıEPSS %61

    microsoft · ie16 Mar 2006

  • CVE-2006-1255
    61Bu hafta

    Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service

    KritikCVSS 10,0SilahlaştırılmışEPSS %68

    mercur · mercur messaging18 Mar 2006

  • CVE-2006-1257
    39İzleyin

    The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by

    YüksekCVSS 7,5İstismar yokEPSS %30

    microsoft · commerce server18 Mar 2006

  • CVE-2006-1260
    24İzleyin

    Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.p

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    horde · horde18 Mar 2006

  • CVE-2006-0058
    39İzleyin

    Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a

    YüksekCVSS 7,6Kavram kanıtıEPSS %28

    sendmail · sendmail22 Mar 2006

  • CVE-2006-1359
    58Planlayın

    Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a ce

    KritikCVSS 9,3SilahlaştırılmışEPSS %68

    microsoft · ie22 Mar 2006

  • CVE-2006-1364
    48Planlayın

    Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET,

    YüksekCVSS 7,5Kavram kanıtıEPSS %58

    microsoft · asp.net23 Mar 2006

  • CVE-2006-0323
    42Planlayın

    Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and H

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    realnetworks · helix player23 Mar 2006

  • CVE-2006-1388
    47Planlayın

    Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.

    YüksekCVSS 7,5Kavram kanıtıEPSS %55

    microsoft · ie24 Mar 2006

  • CVE-2006-0991
    31İzleyin

    Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to exe

    YüksekCVSS 7,1İstismar yokEPSS %11

    veritas · netbackup27 Mar 2006

  • CVE-2006-1490
    26İzleyin

    PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user

    OrtaCVSS 5,0Kavram kanıtıEPSS %20

    php · php29 Mar 2006

  • CVE-2006-1491
    42Planlayın

    Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execu

    YüksekCVSS 7,5Kavram kanıtıEPSS %39

    horde · application framework29 Mar 2006

  • CVE-2006-1510
    20İzleyin

    Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft

    OrtaCVSS 4,0Kavram kanıtıEPSS %13

    microsoft · .net framework29 Mar 2006

  • CVE-2006-1540
    46Planlayın

    MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute

    KritikCVSS 9,3Kavram kanıtıEPSS %28

    microsoft · office30 Mar 2006

  • CVE-2006-1547
    76Bu hafta

    ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service v

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %54

    apache · struts30 Mar 2006