İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2006: sömürülen ve yeni ciddi CVE kayıtları

57 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2006-2726
    36İzleyin

    PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files via the config[fsBase]

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    fastpublish · fastpublish cms1 Haz 2006

  • CVE-2006-2743
    23İzleyin

    Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple extensions, which al

    OrtaCVSS 5,1Kavram kanıtıEPSS %11

    drupal · drupal1 Haz 2006

  • CVE-2006-2766
    24İzleyin

    Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possib

    DüşükCVSS 2,6Kavram kanıtıEPSS %47

    microsoft · ie2 Haz 2006

  • CVE-2006-2769
    23İzleyin

    The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriag

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    sourcefire · snort2 Haz 2006

  • CVE-2006-2802
    23İzleyin

    Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (applicati

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    xine · gxine3 Haz 2006

  • CVE-2006-2811
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrary PHP code via a URL

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    cantico · ovidentia5 Haz 2006

  • CVE-2006-2842
    44Planlayın

    PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_

    YüksekCVSS 7,5Kavram kanıtıEPSS %47

    squirrelmail · squirrelmail6 Haz 2006

  • CVE-2006-2849
    33İzleyin

    PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote attackers to execute arbi

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    andrew godwin · bytehoard6 Haz 2006

  • CVE-2006-2852
    30İzleyin

    PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows remote attackers to exe

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    dotwidget · dotwidget cms6 Haz 2006

  • CVE-2006-2860
    29İzleyin

    PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the path

    OrtaCVSS 6,4Kavram kanıtıEPSS %13

    webspot · webspotblogging6 Haz 2006

  • CVE-2006-2864
    25İzleyin

    Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitrary PHP code via a URL

    OrtaCVSS 5,1Kavram kanıtıEPSS %15

    blueshoes · blueshoes framework6 Haz 2006

  • CVE-2006-2868
    23İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the

    OrtaCVSS 5,1Kavram kanıtıEPSS %11

    claroline · claroline6 Haz 2006

  • CVE-2006-2447
    43Planlayın

    SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands vi

    OrtaCVSS 5,1SilahlaştırılmışEPSS %75

    apache · spamassassin6 Haz 2006

  • CVE-2006-2878
    34İzleyin

    The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "c

    YüksekCVSS 7,5İstismar yokEPSS %13

    andreas gohr · dokuwiki6 Haz 2006

  • CVE-2006-2881
    25İzleyin

    Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, allow remote attackers

    OrtaCVSS 5,1Kavram kanıtıEPSS %17

    dreamcost · dreamaccount7 Haz 2006

  • CVE-2006-2900
    20İzleyin

    Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the targe

    OrtaCVSS 4,0İstismar yokEPSS %12

    microsoft · ie7 Haz 2006

  • CVE-2006-2906
    24İzleyin

    The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote a

    OrtaCVSS 5,4Kavram kanıtıEPSS %10

    thomas boutell · graphics draw library8 Haz 2006

  • CVE-2006-2919
    38İzleyin

    Unspecified vulnerability in Microsoft NetMeeting 3.01 allows remote attackers to cause a denial of service (crash or CPU consumption) and p

    YüksekCVSS 7,8İstismar yokEPSS %22

    microsoft · netmeeting8 Haz 2006

  • CVE-2006-2926
    51Planlayın

    Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denial of service and poss

    YüksekCVSS 7,5SilahlaştırılmışEPSS %70

    qbik · wingate9 Haz 2006

  • CVE-2006-2961
    49Planlayın

    Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (application crash) and possi

    YüksekCVSS 7,5SilahlaştırılmışEPSS %61

    aclogic · cesarftp12 Haz 2006

  • CVE-2006-2376
    42Planlayın

    Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote attackers to execute

    YüksekCVSS 7,5İstismar yokEPSS %41

    microsoft · windows 9813 Haz 2006

  • CVE-2006-0022
    34İzleyin

    Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac,

    YüksekCVSS 7,6İstismar yokEPSS %14

    microsoft · powerpoint13 Haz 2006

  • CVE-2006-0025
    52Planlayın

    Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image wit

    KritikCVSS 9,3İstismar yokEPSS %48

    microsoft · windows media player13 Haz 2006

  • CVE-2006-1193
    22İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows us

    DüşükCVSS 2,6Kavram kanıtıEPSS %39

    microsoft · exchange server13 Haz 2006

  • CVE-2006-1303
    48Planlayın

    Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitra

    KritikCVSS 9,3İstismar yokEPSS %38

    microsoft · ie13 Haz 2006

  • CVE-2006-1313
    36İzleyin

    Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release object

    OrtaCVSS 6,8İstismar yokEPSS %29

    microsoft · windows 200013 Haz 2006

  • CVE-2006-2370
    51Planlayın

    Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earli

    YüksekCVSS 7,5SilahlaştırılmışEPSS %70

    microsoft · windows 200013 Haz 2006

  • CVE-2006-2371
    37İzleyin

    Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2

    YüksekCVSS 7,5İstismar yokEPSS %22

    microsoft · windows 200013 Haz 2006

  • CVE-2006-2373
    49Planlayın

    The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows loc

    KritikCVSS 10,0Kavram kanıtıEPSS %29

    microsoft · windows 200013 Haz 2006

  • CVE-2006-2378
    37İzleyin

    Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Win

    OrtaCVSS 6,8İstismar yokEPSS %34

    microsoft · ie13 Haz 2006

  • CVE-2006-2379
    53Planlayın

    Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote a

    KritikCVSS 9,3Kavram kanıtıEPSS %54

    microsoft · windows 200013 Haz 2006

  • CVE-2006-2380
    22İzleyin

    Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to

    OrtaCVSS 4,3İstismar yokEPSS %17

    microsoft · windows 200013 Haz 2006

  • CVE-2006-2382
    55Planlayın

    Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code v

    KritikCVSS 10,0İstismar yokEPSS %48

    microsoft · internet explorer13 Haz 2006

  • CVE-2006-2383
    49Planlayın

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code vi

    KritikCVSS 9,3Kavram kanıtıEPSS %40

    microsoft · internet explorer13 Haz 2006

  • CVE-2006-2384
    23İzleyin

    Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal

    OrtaCVSS 4,3İstismar yokEPSS %19

    microsoft · internet explorer13 Haz 2006

  • CVE-2006-2385
    36İzleyin

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows user-assisted remote attackers to execute arb

    YüksekCVSS 7,6İstismar yokEPSS %20

    microsoft · ie13 Haz 2006

  • CVE-2006-3059
    49Planlayın

    Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecifi

    KritikCVSS 9,3Kavram kanıtıEPSS %41

    microsoft · excel17 Haz 2006

  • CVE-2006-3081
    24İzleyin

    mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service

    OrtaCVSS 4,0Kavram kanıtıEPSS %25

    mysql · mysql19 Haz 2006

  • CVE-2006-3086
    54Planlayın

    Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll) allows remot

    KritikCVSS 9,3Kavram kanıtıEPSS %56

    microsoft · hyperlink object library19 Haz 2006

  • CVE-2006-3101
    24İzleyin

    Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web

    OrtaCVSS 4,3Kavram kanıtıEPSS %24

    cisco · secure access control server20 Haz 2006

  • CVE-2006-3109
    21İzleyin

    Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    cisco · call manager20 Haz 2006

  • CVE-2006-3014
    29İzleyin

    Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadshee

    OrtaCVSS 5,1Kavram kanıtıEPSS %30

    microsoft · excel21 Haz 2006

  • CVE-2006-3172
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL w

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    content\*builder · content\*builder22 Haz 2006

  • CVE-2006-3193
    24İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers

    OrtaCVSS 5,1Kavram kanıtıEPSS %14

    grayscale · bandsite cms22 Haz 2006

  • CVE-2006-2914
    26İzleyin

    PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder p

    OrtaCVSS 5,1Kavram kanıtıEPSS %20

    deluxebb · deluxebb23 Haz 2006

  • CVE-2006-3199
    24İzleyin

    Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL containing a long hostna

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    opera · opera browser23 Haz 2006

  • CVE-2006-3200
    25İzleyin

    Unspecified versions of Internet Explorer allow remote attackers to cause a denial of service (crash) via an IFRAME with a src tag containin

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · internet explorer23 Haz 2006

  • CVE-2006-3210
    24İzleyin

    Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allows remote attackers to conduct PHP remot

    OrtaCVSS 5,1Kavram kanıtıEPSS %13

    le ralf · ralf image gallery23 Haz 2006

  • CVE-2006-3227
    14İzleyin

    Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to

    DüşükCVSS 2,6İstismar yokEPSS %13

    microsoft · internet explorer26 Haz 2006

  • CVE-2006-3228
    41Planlayın

    Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    nullsoft · winamp26 Haz 2006

  • CVE-2006-3134
    40Planlayın

    Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to e

    KritikCVSS 9,3İstismar yokEPSS %11

    gracenote · cddbcontrol activex control27 Haz 2006

  • CVE-2006-3252
    49Planlayın

    Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to e

    YüksekCVSS 7,5SilahlaştırılmışEPSS %62

    algorithmic research · privatewire gateway27 Haz 2006

  • CVE-2006-3266
    25İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when register_globals is enabled, allow remote attacker

    OrtaCVSS 5,1Kavram kanıtıEPSS %17

    magnet · bee-hive lite27 Haz 2006

  • CVE-2006-3276
    34İzleyin

    Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via (1) a long U

    YüksekCVSS 7,5İstismar yokEPSS %13

    realnetworks · helix dna server28 Haz 2006

  • CVE-2006-3280
    47Planlayın

    Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains vi

    YüksekCVSS 7,5Kavram kanıtıEPSS %55

    microsoft · internet explorer28 Haz 2006

  • CVE-2006-3281
    34İzleyin

    Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitr

    OrtaCVSS 5,1Kavram kanıtıEPSS %48

    microsoft · internet explorer28 Haz 2006

  • CVE-2006-3317
    25İzleyin

    PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute arbitrary code via a URL in the phpraid_dir para

    OrtaCVSS 5,1Kavram kanıtıEPSS %17

    spiffyjr · phpraid29 Haz 2006