İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2006: sömürülen ve yeni ciddi CVE kayıtları

54 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2006-3952
    50Planlayın

    Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrary code via a long ar

    YüksekCVSS 7,5SilahlaştırılmışEPSS %66

    efs software · efs ftp server1 Ağu 2006

  • CVE-2006-3961
    40Planlayın

    Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home

    OrtaCVSS 6,8SilahlaştırılmışEPSS %34

    mcafee · antispyware1 Ağu 2006

  • CVE-2006-3459
    46Planlayın

    Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow co

    YüksekCVSS 7,5SilahlaştırılmışEPSS %53

    libtiff · libtiff2 Ağu 2006

  • CVE-2006-3990
    36İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Paul M.

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    phpsavant · savant24 Ağu 2006

  • CVE-2006-3995
    30İzleyin

    Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.ph

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    user home pages · user home pages4 Ağu 2006

  • CVE-2006-0395
    40Planlayın

    The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which a

    OrtaCVSS 5,1SilahlaştırılmışEPSS %55

    apple · mac os x4 Ağu 2006

  • CVE-2006-4018
    36İzleyin

    Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attacke

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    clamav · clamav8 Ağu 2006

  • CVE-2006-3450
    42Planlayın

    Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to

    YüksekCVSS 7,5İstismar yokEPSS %41

    microsoft · ie8 Ağu 2006

  • CVE-2006-3451
    42Planlayın

    Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to cons

    YüksekCVSS 7,5İstismar yokEPSS %41

    microsoft · ie8 Ağu 2006

  • CVE-2006-3637
    33İzleyin

    Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted r

    OrtaCVSS 5,1Kavram kanıtıEPSS %43

    microsoft · ie8 Ağu 2006

  • CVE-2006-3638
    41Planlayın

    Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial o

    YüksekCVSS 7,5İstismar yokEPSS %36

    microsoft · ie8 Ağu 2006

  • CVE-2006-3438
    41Planlayın

    Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to e

    KritikCVSS 9,3İstismar yokEPSS %11

    microsoft · hyperlink object library8 Ağu 2006

  • CVE-2006-3444
    35İzleyin

    Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges v

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    microsoft · windows 20008 Ağu 2006

  • CVE-2006-3449
    43Planlayın

    Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to ex

    YüksekCVSS 7,5İstismar yokEPSS %42

    microsoft · powerpoint8 Ağu 2006

  • CVE-2006-3639
    40Planlayın

    Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote a

    YüksekCVSS 7,5İstismar yokEPSS %32

    microsoft · ie8 Ağu 2006

  • CVE-2006-3640
    27İzleyin

    Microsoft Internet Explorer 5.01 and 6 allows certain script to persist across navigations between pages, which allows remote attackers to o

    OrtaCVSS 5,0İstismar yokEPSS %24

    microsoft · ie8 Ağu 2006

  • CVE-2006-3643
    30İzleyin

    Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedde

    OrtaCVSS 6,0İstismar yokEPSS %21

    microsoft · ie8 Ağu 2006

  • CVE-2006-3649
    23İzleyin

    Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, P

    OrtaCVSS 5,1İstismar yokEPSS %10

    microsoft · visual basic8 Ağu 2006

  • CVE-2006-3439
    65Bu hafta

    Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including

    KritikCVSS 10,0SilahlaştırılmışEPSS %84

    microsoft · windows 20008 Ağu 2006

  • CVE-2006-3440
    57Planlayın

    Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arb

    KritikCVSS 10,0Kavram kanıtıEPSS %57

    microsoft · windows 20008 Ağu 2006

  • CVE-2006-3441
    59Planlayın

    Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to exec

    KritikCVSS 10,0Kavram kanıtıEPSS %61

    microsoft · windows 20008 Ağu 2006

  • CVE-2006-3648
    37İzleyin

    Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitr

    YüksekCVSS 7,6İstismar yokEPSS %23

    microsoft · windows 20008 Ağu 2006

  • CVE-2006-4046
    35İzleyin

    Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10_rc5 and earlier on Linux/BSD, allow

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    open cubic player · open cubic player9 Ağu 2006

  • CVE-2006-4052
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute ar

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    turnkey web tools · php simple shop9 Ağu 2006

  • CVE-2006-4059
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    usolved · newsolved lite9 Ağu 2006

  • CVE-2006-4071
    17İzleyin

    Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and po

    DüşükCVSS 2,6Kavram kanıtıEPSS %23

    microsoft · windows 2003 server9 Ağu 2006

  • CVE-2006-4075
    25İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 and earlier allow remote at

    OrtaCVSS 5,1Kavram kanıtıEPSS %17

    wim fleischhauer · docpile we10 Ağu 2006

  • CVE-2006-4089
    23İzleyin

    Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service (application c

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    andy lo-a-foe · alsaplayer11 Ağu 2006

  • CVE-2006-4110
    29İzleyin

    Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or

    OrtaCVSS 4,3Kavram kanıtıEPSS %39

    apache · http server14 Ağu 2006

  • CVE-2006-4138
    36İzleyin

    Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute arbitrary

    YüksekCVSS 7,6Kavram kanıtıEPSS %20

    microsoft · help file viewer14 Ağu 2006

  • CVE-2006-4144
    13İzleyin

    Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of servi

    DüşükCVSS 2,6Kavram kanıtıEPSS %11

    imagemagick · imagemagick15 Ağu 2006

  • CVE-2006-4159
    34İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute arbitrary PHP code via

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    chaussette · chaussette16 Ağu 2006

  • CVE-2006-3121
    24İzleyin

    The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allo

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    high availability linux project · heartbeat16 Ağu 2006

  • CVE-2006-4193
    44Planlayın

    Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute ar

    YüksekCVSS 7,5Kavram kanıtıEPSS %47

    microsoft · ie16 Ağu 2006

  • CVE-2006-4197
    34İzleyin

    Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    musicbrainz · libmusicbrainz17 Ağu 2006

  • CVE-2006-4201
    33İzleyin

    Unspecified vulnerability in the backup agent and Cell Manager in HP OpenView Storage Data Protector 5.1 and 5.5 before 20060810 allows remo

    YüksekCVSS 7,5İstismar yokEPSS %10

    hp · openview storage data protector17 Ağu 2006

  • CVE-2006-4208
    24İzleyin

    Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticate

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    skippy.net · wp-db backup plugin for wordpress17 Ağu 2006

  • CVE-2006-4219
    36İzleyin

    The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary

    YüksekCVSS 7,5Kavram kanıtıEPSS %21

    microsoft · ie18 Ağu 2006

  • CVE-2006-4227
    30İzleyin

    MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of t

    OrtaCVSS 6,5Kavram kanıtıEPSS %13

    mysql · mysql18 Ağu 2006

  • CVE-2006-4236
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the (1) sho

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    powergap · powergap business21 Ağu 2006

  • CVE-2006-4253
    35İzleyin

    Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly e

    YüksekCVSS 7,6Kavram kanıtıEPSS %15

    mozilla · firefox21 Ağu 2006

  • CVE-2006-4287
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers to execute arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    nes game · nes game22 Ağu 2006

  • CVE-2006-3869
    43Planlayın

    Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch b

    YüksekCVSS 7,5İstismar yokEPSS %43

    microsoft · ie22 Ağu 2006

  • CVE-2006-4301
    32İzleyin

    Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple Dire

    OrtaCVSS 5,0Kavram kanıtıEPSS %39

    microsoft · ie22 Ağu 2006

  • CVE-2006-4313
    40Planlayın

    Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow a

    OrtaCVSS 5,0SilahlaştırılmışEPSS %12

    cisco · vpn 3000 concentrator series software23 Ağu 2006

  • CVE-2006-4304
    44Planlayın

    Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before

    KritikCVSS 10,0İstismar yokEPSS %11

    freebsd · freebsd23 Ağu 2006

  • CVE-2006-4318
    45Planlayın

    Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.

    OrtaCVSS 6,5SilahlaştırılmışEPSS %62

    texas imperial software · wftpd23 Ağu 2006

  • CVE-2006-3124
    36İzleyin

    Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    streamripper · streamripper26 Ağu 2006

  • CVE-2006-4364
    37İzleyin

    Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial

    OrtaCVSS 5,0Kavram kanıtıEPSS %57

    alt-n · mdaemon26 Ağu 2006

  • CVE-2006-4305
    62Bu hafta

    Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connect

    KritikCVSS 10,0SilahlaştırılmışEPSS %71

    mysql · maxdb29 Ağu 2006

  • CVE-2006-4446
    39İzleyin

    Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP1 allows remote atta

    OrtaCVSS 5,0Kavram kanıtıEPSS %62

    microsoft · ie29 Ağu 2006

  • CVE-2006-4489
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbitrary PHP code via (

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    ultrize · minibill31 Ağu 2006

  • CVE-2006-4494
    37İzleyin

    Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    microsoft · visual studio31 Ağu 2006

  • CVE-2006-4495
    36İzleyin

    Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    microsoft · ie31 Ağu 2006