İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2006: sömürülen ve yeni ciddi CVE kayıtları

65 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2006-3340
    25İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is enabled, allow remote a

    OrtaCVSS 5,1Kavram kanıtıEPSS %15

    pearlinger · pearl for mambo3 Tem 2006

  • CVE-2006-3354
    25İzleyin

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Record

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    microsoft · ie5 Tem 2006

  • CVE-2006-3357
    41Planlayın

    Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a d

    YüksekCVSS 7,5İstismar yokEPSS %35

    microsoft · internet explorer6 Tem 2006

  • CVE-2006-3392
    44Planlayın

    Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read ar

    OrtaCVSS 5,0SilahlaştırılmışEPSS %79

    usermin · usermin6 Tem 2006

  • CVE-2006-3427
    27İzleyin

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL attribute on an uninit

    OrtaCVSS 5,0Kavram kanıtıEPSS %24

    microsoft · internet explorer6 Tem 2006

  • CVE-2006-3431
    38İzleyin

    Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a cr

    YüksekCVSS 7,5Kavram kanıtıEPSS %28

    microsoft · excel7 Tem 2006

  • CVE-2006-3471
    26İzleyin

    Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a ch

    OrtaCVSS 5,0Kavram kanıtıEPSS %20

    microsoft · ie10 Tem 2006

  • CVE-2006-3472
    23İzleyin

    Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with an A tag containing a

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    microsoft · ie10 Tem 2006

  • CVE-2006-3493
    32İzleyin

    Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microso

    OrtaCVSS 5,1Kavram kanıtıEPSS %40

    microsoft · office10 Tem 2006

  • CVE-2006-0007
    43Planlayın

    Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows us

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · office11 Tem 2006

  • CVE-2006-0033
    42Planlayın

    Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted att

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · office11 Tem 2006

  • CVE-2006-1300
    31İzleyin

    Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to b

    OrtaCVSS 5,0İstismar yokEPSS %36

    microsoft · .net framework11 Tem 2006

  • CVE-2006-1314
    48Planlayın

    Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and

    YüksekCVSS 7,5Kavram kanıtıEPSS %61

    microsoft · windows 200011 Tem 2006

  • CVE-2006-1315
    35İzleyin

    The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote

    OrtaCVSS 5,0Kavram kanıtıEPSS %48

    microsoft · server service11 Tem 2006

  • CVE-2006-1316
    42Planlayın

    Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted att

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · office11 Tem 2006

  • CVE-2006-2372
    67Bu hafta

    Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 allows remote a

    KritikCVSS 10,0Kavram kanıtıEPSS %90

    microsoft · dhcp client service11 Tem 2006

  • CVE-2006-2389
    49Planlayın

    Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted att

    KritikCVSS 9,3Kavram kanıtıEPSS %38

    microsoft · office11 Tem 2006

  • CVE-2006-0026
    53Planlayın

    Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote attackers to execute arb

    OrtaCVSS 6,5Kavram kanıtıEPSS %89

    microsoft · internet information server11 Tem 2006

  • CVE-2006-3510
    14İzleyin

    The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial

    DüşükCVSS 2,6Kavram kanıtıEPSS %14

    microsoft · ie11 Tem 2006

  • CVE-2006-3511
    26İzleyin

    Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the fonts property of the Html

    OrtaCVSS 5,0Kavram kanıtıEPSS %21

    microsoft · internet explorer11 Tem 2006

  • CVE-2006-3512
    27İzleyin

    Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled property of a DXTFilte

    OrtaCVSS 5,0Kavram kanıtıEPSS %24

    microsoft · internet explorer11 Tem 2006

  • CVE-2006-3513
    27İzleyin

    danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the Data pr

    OrtaCVSS 5,0Kavram kanıtıEPSS %22

    microsoft · ie11 Tem 2006

  • CVE-2006-3524
    50Planlayın

    Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a long CSeq field valu

    YüksekCVSS 7,5SilahlaştırılmışEPSS %67

    sipfoundry · sipxtapi11 Tem 2006

  • CVE-2006-3545
    24İzleyin

    Microsoft Internet Explorer 7.0 Beta allows remote attackers to cause a denial of service (application crash) via a web page with multiple e

    OrtaCVSS 5,0İstismar yokEPSS %14

    microsoft · internet explorer12 Tem 2006

  • CVE-2006-3581
    24İzleyin

    Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via

    OrtaCVSS 5,1Kavram kanıtıEPSS %13

    audacious media player team · adplug13 Tem 2006

  • CVE-2006-1302
    41Planlayın

    Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain c

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · excel13 Tem 2006

  • CVE-2006-1304
    40Planlayın

    Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted

    KritikCVSS 9,3İstismar yokEPSS %10

    microsoft · excel13 Tem 2006

  • CVE-2006-2388
    40Planlayın

    Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to

    KritikCVSS 9,3İstismar yokEPSS %10

    microsoft · excel13 Tem 2006

  • CVE-2006-3590
    24İzleyin

    mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed sha

    OrtaCVSS 5,1İstismar yokEPSS %14

    microsoft · powerpoint14 Tem 2006

  • CVE-2006-3591
    28İzleyin

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the URL property of a Tr

    OrtaCVSS 5,0Kavram kanıtıEPSS %26

    microsoft · internet explorer18 Tem 2006

  • CVE-2006-3605
    27İzleyin

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitia

    OrtaCVSS 5,0Kavram kanıtıEPSS %24

    microsoft · internet explorer18 Tem 2006

  • CVE-2006-3652
    36İzleyin

    Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a

    YüksekCVSS 7,5İstismar yokEPSS %18

    microsoft · isa server18 Tem 2006

  • CVE-2006-3653
    14İzleyin

    wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumption or crash) via c

    DüşükCVSS 2,6Kavram kanıtıEPSS %14

    microsoft · works18 Tem 2006

  • CVE-2006-3654
    24İzleyin

    Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumpt

    DüşükCVSS 2,6İstismar yokEPSS %47

    microsoft · works18 Tem 2006

  • CVE-2006-3655
    26İzleyin

    Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted Pow

    OrtaCVSS 5,1Kavram kanıtıEPSS %20

    microsoft · powerpoint18 Tem 2006

  • CVE-2006-3656
    16İzleyin

    Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint fi

    DüşükCVSS 2,6Kavram kanıtıEPSS %20

    microsoft · powerpoint18 Tem 2006

  • CVE-2006-3657
    25İzleyin

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microso

    OrtaCVSS 5,0İstismar yokEPSS %16

    microsoft · ie18 Tem 2006

  • CVE-2006-3658
    24İzleyin

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by accessing the object references of a FolderIte

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · ie18 Tem 2006

  • CVE-2006-3659
    24İzleyin

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTM

    OrtaCVSS 5,0İstismar yokEPSS %14

    microsoft · ie18 Tem 2006

  • CVE-2006-3660
    35İzleyin

    Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe.

    YüksekCVSS 7,6Kavram kanıtıEPSS %18

    microsoft · powerpoint18 Tem 2006

  • CVE-2006-3668
    33İzleyin

    Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS

    YüksekCVSS 7,6Kavram kanıtıEPSS %10

    dynamic universal music bibliotheque · dumb18 Tem 2006

  • CVE-2006-3468
    36İzleyin

    Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP

    YüksekCVSS 7,8Kavram kanıtıEPSS %15

    linux · linux kernel21 Tem 2006

  • CVE-2006-3469
    25İzleyin

    Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to ca

    OrtaCVSS 4,0Kavram kanıtıEPSS %31

    mysql · mysql21 Tem 2006

  • CVE-2006-3687
    36İzleyin

    Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784,

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    d-link · di-604 broadband router21 Tem 2006

  • CVE-2006-3726
    45Planlayın

    Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to execute arbitrary co

    OrtaCVSS 6,5SilahlaştırılmışEPSS %63

    intervations · filecopa21 Tem 2006

  • CVE-2006-3729
    16İzleyin

    DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a denial of service (crash

    DüşükCVSS 2,6Kavram kanıtıEPSS %20

    microsoft · internet explorer21 Tem 2006

  • CVE-2006-3730
    60Bu hafta

    Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute

    YüksekCVSS 8,8SilahlaştırılmışEPSS %63

    microsoft · ie21 Tem 2006

  • CVE-2006-3733
    34İzleyin

    jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Resp

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    cisco · security monitoring analysis and response system21 Tem 2006

  • CVE-2006-3771
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in component.php in iManage CMS 4.0.12 and earlier allow remote attackers to execute arbi

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    imaginex-resource · imanage cms24 Tem 2006

  • CVE-2006-3772
    25İzleyin

    PHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote attackers to bypass security restrictions an

    OrtaCVSS 5,1Kavram kanıtıEPSS %16

    php-post · php-post24 Tem 2006

  • CVE-2006-3835
    34İzleyin

    Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension,

    OrtaCVSS 5,0Kavram kanıtıEPSS %46

    apache · tomcat25 Tem 2006

  • CVE-2006-3838
    62Bu hafta

    Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Side

    KritikCVSS 10,0SilahlaştırılmışEPSS %73

    eiqnetworks · enterprise security analyzer26 Tem 2006

  • CVE-2006-3880
    27İzleyin

    Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of servi

    OrtaCVSS 5,0Kavram kanıtıEPSS %24

    microsoft · windows 200026 Tem 2006

  • CVE-2006-3897
    27İzleyin

    Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by

    OrtaCVSS 5,0Kavram kanıtıEPSS %23

    microsoft · internet explorer27 Tem 2006

  • CVE-2006-3898
    27İzleyin

    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the Cl

    OrtaCVSS 5,0Kavram kanıtıEPSS %24

    microsoft · internet explorer27 Tem 2006

  • CVE-2006-3899
    27İzleyin

    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the st

    OrtaCVSS 5,0Kavram kanıtıEPSS %24

    microsoft · internet explorer27 Tem 2006

  • CVE-2006-3677
    54Planlayın

    Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properti

    YüksekCVSS 7,5SilahlaştırılmışEPSS %78

    mozilla · firefox27 Tem 2006

  • CVE-2006-3910
    25İzleyin

    Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (crash) by calling th

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    microsoft · ie27 Tem 2006

  • CVE-2006-3911
    35İzleyin

    PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    php live · php live27 Tem 2006

  • CVE-2006-3915
    26İzleyin

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterating over any native fu

    OrtaCVSS 5,0Kavram kanıtıEPSS %21

    microsoft · internet explorer27 Tem 2006

  • CVE-2006-3918
    46Planlayın

    http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before

    OrtaCVSS 4,3Kavram kanıtıEPSS %95

    apache · http server27 Tem 2006

  • CVE-2006-3747
    59Planlayın

    Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before

    YüksekCVSS 7,6SilahlaştırılmışEPSS %96

    apache · http server28 Tem 2006

  • CVE-2006-3942
    54Planlayın

    The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (sys

    YüksekCVSS 7,8SilahlaştırılmışEPSS %75

    microsoft · windows 200031 Tem 2006

  • CVE-2006-3943
    15İzleyin

    Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial o

    DüşükCVSS 2,6Kavram kanıtıEPSS %15

    microsoft · ie31 Tem 2006

  • CVE-2006-3944
    25İzleyin

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    microsoft · ie31 Tem 2006