İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2006: sömürülen ve yeni ciddi CVE kayıtları

34 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2006-2111
    29İzleyin

    A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redire

    OrtaCVSS 4,3Kavram kanıtıEPSS %40

    microsoft · outlook express1 May 2006

  • CVE-2006-2151
    33İzleyin

    PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enabled, allows remote a

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    phpbb group · phpbb toplist3 May 2006

  • CVE-2006-1516
    31İzleyin

    The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attacker

    OrtaCVSS 5,0Kavram kanıtıEPSS %35

    mysql · mysql5 May 2006

  • CVE-2006-1518
    38İzleyin

    Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code

    OrtaCVSS 6,5Kavram kanıtıEPSS %38

    mysql · mysql5 May 2006

  • CVE-2006-2212
    43Planlayın

    Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a long (1) USER or (2)

    OrtaCVSS 6,4SilahlaştırılmışEPSS %58

    karjasoft · sami ftp server5 May 2006

  • CVE-2006-2218
    47Planlayın

    Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "except

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · internet explorer5 May 2006

  • CVE-2006-2223
    23İzleyin

    RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or M

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    quagga · quagga5 May 2006

  • CVE-2006-2224
    23İzleyin

    RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to m

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    quagga · quagga routing software suite5 May 2006

  • CVE-2006-2237
    40Planlayın

    The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell

    OrtaCVSS 5,1SilahlaştırılmışEPSS %58

    awstats · awstats8 May 2006

  • CVE-2006-1172
    24İzleyin

    Stack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control 1.1.0.0 allows remote attackers to execute

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    tdc · cryptomathic cenroll activex control9 May 2006

  • CVE-2006-2270
    34İzleyin

    PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary code via a URL

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    jetbox · jetbox cms9 May 2006

  • CVE-2006-0027
    54Planlayın

    Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal

    YüksekCVSS 7,5SilahlaştırılmışEPSS %78

    microsoft · exchange server9 May 2006

  • CVE-2006-0034
    39İzleyin

    Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinat

    YüksekCVSS 7,5İstismar yokEPSS %31

    microsoft · distributed transaction coordinator9 May 2006

  • CVE-2006-1184
    29İzleyin

    Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers

    OrtaCVSS 5,0İstismar yokEPSS %29

    microsoft · distributed transaction coordinator9 May 2006

  • CVE-2006-2297
    22İzleyin

    Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to execute arbitrary code

    OrtaCVSS 4,0Kavram kanıtıEPSS %19

    microsoft · infotech storage system library9 May 2006

  • CVE-2006-0994
    36İzleyin

    Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is

    YüksekCVSS 7,5İstismar yokEPSS %21

    sophos · sophos anti-virus10 May 2006

  • CVE-2006-2362
    33İzleyin

    Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows con

    YüksekCVSS 7,3Kavram kanıtıEPSS %14

    gnu · binutils15 May 2006

  • CVE-2006-2369
    58Planlayın

    RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authenticat

    YüksekCVSS 7,5SilahlaştırılmışEPSS %92

    vnc · realvnc15 May 2006

  • CVE-2006-2407
    51Planlayın

    Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) Fre

    YüksekCVSS 7,5SilahlaştırılmışEPSS %71

    weonlydo · wodsshserver16 May 2006

  • CVE-2006-2426
    29İzleyin

    Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to caus

    OrtaCVSS 6,4Kavram kanıtıEPSS %12

    sun · jdk17 May 2006

  • CVE-2006-2460
    28İzleyin

    Sugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not protect critical variables such as $_GLOBALS

    OrtaCVSS 6,4Kavram kanıtıEPSS %10

    sugarcrm · sugarcrm19 May 2006

  • CVE-2006-2492
    79Bu hafta

    Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allow

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %48

    microsoft · office19 May 2006

  • CVE-2006-2502
    40Planlayın

    Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers t

    OrtaCVSS 5,1SilahlaştırılmışEPSS %53

    cyrus · imapd22 May 2006

  • CVE-2006-0747
    24İzleyin

    Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    freetype · freetype23 May 2006

  • CVE-2006-2548
    34İzleyin

    Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a po

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    perlpodder · perlpodder23 May 2006

  • CVE-2006-2554
    29İzleyin

    Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code v

    OrtaCVSS 6,4Kavram kanıtıEPSS %12

    genecys · genecys23 May 2006

  • CVE-2006-2557
    29İzleyin

    PHP remote file inclusion vulnerability in extras/poll/poll.php in Florian Amrhein NewsPortal before 0.37, and TR Newsportal (TRanx rebuilde

    OrtaCVSS 6,4Kavram kanıtıEPSS %13

    florian amrhein · newsportal23 May 2006

  • CVE-2006-2444
    38İzleyin

    The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service

    YüksekCVSS 7,8Kavram kanıtıEPSS %22

    linux · linux kernel25 May 2006

  • CVE-2006-2630
    62Bu hafta

    Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown

    KritikCVSS 10,0SilahlaştırılmışEPSS %73

    symantec · client security27 May 2006

  • CVE-2006-2656
    34İzleyin

    Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    libtiff · libtiff30 May 2006

  • CVE-2006-2661
    25İzleyin

    ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null de

    OrtaCVSS 5,0Kavram kanıtıEPSS %16

    freetype · freetype30 May 2006

  • CVE-2006-2667
    34İzleyin

    Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary commands by inserting

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    wordpress · wordpress30 May 2006

  • CVE-2006-2685
    40Planlayın

    PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_globals enabled, allow

    OrtaCVSS 4,0SilahlaştırılmışEPSS %49

    kevin johnson · basic analysis and security engine31 May 2006

  • CVE-2006-2686
    29İzleyin

    PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[

    OrtaCVSS 6,4Kavram kanıtıEPSS %13

    actionapps · actionapps31 May 2006