İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2006: sömürülen ve yeni ciddi CVE kayıtları

46 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2006-1618
    34İzleyin

    Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 allows remote attacker

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    doomsday · doomsday5 Nis 2006

  • CVE-2006-1626
    25İzleyin

    Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by

    OrtaCVSS 4,3Kavram kanıtıEPSS %25

    microsoft · internet explorer5 Nis 2006

  • CVE-2006-1651
    34İzleyin

    Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packe

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · isa server6 Nis 2006

  • CVE-2006-1652
    56Planlayın

    Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attacke

    KritikCVSS 9,0SilahlaştırılmışEPSS %68

    ultravnc · tabbed viewer6 Nis 2006

  • CVE-2006-1615
    43Planlayın

    Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute

    KritikCVSS 10,0İstismar yokEPSS %11

    clamav · clamav6 Nis 2006

  • CVE-2006-1664
    34İzleyin

    Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attacke

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    xine · xine-lib7 Nis 2006

  • CVE-2006-0996
    20İzleyin

    Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script o

    OrtaCVSS 4,3Kavram kanıtıEPSS %11

    php · php10 Nis 2006

  • CVE-2006-0015
    34İzleyin

    Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team

    OrtaCVSS 6,8Kavram kanıtıEPSS %24

    microsoft · frontpage server extensions11 Nis 2006

  • CVE-2006-1185
    51Planlayın

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invali

    YüksekCVSS 7,5Kavram kanıtıEPSS %70

    microsoft · ie11 Nis 2006

  • CVE-2006-1186
    57Planlayın

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2)

    KritikCVSS 10,0Kavram kanıtıEPSS %58

    microsoft · ie11 Nis 2006

  • CVE-2006-1188
    47Planlayın

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, w

    YüksekCVSS 7,5Kavram kanıtıEPSS %57

    microsoft · ie11 Nis 2006

  • CVE-2006-1189
    59Planlayın

    Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted

    KritikCVSS 10,0Kavram kanıtıEPSS %61

    microsoft · internet explorer11 Nis 2006

  • CVE-2006-1190
    58Planlayın

    Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an embedd

    KritikCVSS 10,0Kavram kanıtıEPSS %61

    microsoft · internet explorer11 Nis 2006

  • CVE-2006-1191
    26İzleyin

    Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which all

    OrtaCVSS 4,0Kavram kanıtıEPSS %31

    microsoft · internet explorer11 Nis 2006

  • CVE-2006-1192
    20İzleyin

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts o

    DüşükCVSS 2,6Kavram kanıtıEPSS %31

    microsoft · ie11 Nis 2006

  • CVE-2006-1719
    24İzleyin

    Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) via any scrollbar Cascading Style Sheets (CSS)

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · ie11 Nis 2006

  • CVE-2006-0003
    45Planlayın

    Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsof

    OrtaCVSS 5,1SilahlaştırılmışEPSS %82

    microsoft · data access components11 Nis 2006

  • CVE-2006-0012
    27İzleyin

    Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to

    OrtaCVSS 5,1İstismar yokEPSS %24

    microsoft · windows 200011 Nis 2006

  • CVE-2006-0014
    27İzleyin

    Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book

    OrtaCVSS 5,1İstismar yokEPSS %24

    microsoft · outlook express11 Nis 2006

  • CVE-2006-1770
    43Planlayın

    Multiple PHP remote file inclusion vulnerabilities in Azerbaijan Design & Development Group (AZDG) AzDGVote allow remote attackers to execut

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    azerbaijan development group · azdgvote13 Nis 2006

  • CVE-2006-1776
    34İzleyin

    PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to execute arb

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    simplog · simplog13 Nis 2006

  • CVE-2006-1551
    45Planlayın

    Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via t

    YüksekCVSS 7,5SilahlaştırılmışEPSS %51

    georges auberger · pajax13 Nis 2006

  • CVE-2006-1786
    14İzleyin

    Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web

    DüşükCVSS 2,6Kavram kanıtıEPSS %12

    adobe · document server13 Nis 2006

  • CVE-2006-0749
    40Planlayın

    nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey b

    KritikCVSS 9,3İstismar yokEPSS %10

    mozilla · firefox14 Nis 2006

  • CVE-2006-0992
    62Bu hafta

    Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a l

    KritikCVSS 10,0SilahlaştırılmışEPSS %73

    novell · groupwise messenger14 Nis 2006

  • CVE-2006-1730
    40Planlayın

    Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey be

    KritikCVSS 9,3İstismar yokEPSS %10

    mozilla · firefox14 Nis 2006

  • CVE-2006-1834
    24İzleyin

    Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, w

    OrtaCVSS 5,1Kavram kanıtıEPSS %12

    opera · opera browser19 Nis 2006

  • CVE-2006-1868
    34İzleyin

    Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via

    YüksekCVSS 7,5İstismar yokEPSS %14

    oracle · database server20 Nis 2006

  • CVE-2006-1900
    35İzleyin

    Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote

    YüksekCVSS 7,6Kavram kanıtıEPSS %16

    w3c · amaya20 Nis 2006

  • CVE-2006-1905
    34İzleyin

    Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format stri

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    xine · xine20 Nis 2006

  • CVE-2006-1931
    23İzleyin

    The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections)

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    yukihiro matsumoto · ruby20 Nis 2006

  • CVE-2006-1959
    34İzleyin

    PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Serv

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    actualscripts · actualanalyzer21 Nis 2006

  • CVE-2006-1982
    36İzleyin

    Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, al

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    apple · mac os x21 Nis 2006

  • CVE-2006-1985
    24İzleyin

    Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attack

    OrtaCVSS 5,1Kavram kanıtıEPSS %13

    apple · safari21 Nis 2006

  • CVE-2006-1990
    23İzleyin

    Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary co

    OrtaCVSS 5,0İstismar yokEPSS %10

    php · php24 Nis 2006

  • CVE-2006-0230
    45Planlayın

    Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remot

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    symantec · antivirus scan engine24 Nis 2006

  • CVE-2006-1992
    22İzleyin

    mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested O

    DüşükCVSS 2,6Kavram kanıtıEPSS %40

    microsoft · internet explorer24 Nis 2006

  • CVE-2006-1993
    36İzleyin

    Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary cod

    OrtaCVSS 5,1Kavram kanıtıEPSS %54

    mozilla · firefox25 Nis 2006

  • CVE-2006-2022
    35İzleyin

    Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and earlier allows remote attackers to execut

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    ls3 · fenice25 Nis 2006

  • CVE-2006-2025
    29İzleyin

    Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denia

    OrtaCVSS 6,5Kavram kanıtıEPSS %10

    libtiff · libtiff25 Nis 2006

  • CVE-2006-2026
    29İzleyin

    Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and

    OrtaCVSS 6,5Kavram kanıtıEPSS %10

    libtiff · libtiff25 Nis 2006

  • CVE-2006-2055
    25İzleyin

    Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · outlook26 Nis 2006

  • CVE-2006-2056
    24İzleyin

    Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted remote attackers to modify command line argu

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · internet explorer26 Nis 2006

  • CVE-2006-2081
    40Planlayın

    Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METADATA function in the D

    OrtaCVSS 4,6SilahlaştırılmışEPSS %21

    oracle · database server27 Nis 2006

  • CVE-2006-2086
    50Planlayın

    Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juniper NetScreen IVE de

    YüksekCVSS 7,5SilahlaştırılmışEPSS %67

    juniper · junipersetup control29 Nis 2006

  • CVE-2006-2094
    27İzleyin

    Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security S

    OrtaCVSS 5,1Kavram kanıtıEPSS %23

    microsoft · ie29 Nis 2006