İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2006: sömürülen ve yeni ciddi CVE kayıtları

45 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2006-4534
    47Planlayın

    Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via

    KritikCVSS 9,3İstismar yokEPSS %34

    microsoft · office5 Eyl 2006

  • CVE-2006-4095
    34İzleyin

    BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which c

    YüksekCVSS 7,5İstismar yokEPSS %11

    isc · bind5 Eyl 2006

  • CVE-2006-4560
    36İzleyin

    Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with a

    YüksekCVSS 7,5İstismar yokEPSS %18

    microsoft · ie5 Eyl 2006

  • CVE-2006-4602
    43Planlayın

    Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP cod

    YüksekCVSS 7,5SilahlaştırılmışEPSS %44

    tiki · tikiwiki cms\/groupware6 Eyl 2006

  • CVE-2006-4627
    24İzleyin

    System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of

    OrtaCVSS 5,0İstismar yokEPSS %14

    microsoft · system information activex control7 Eyl 2006

  • CVE-2006-4379
    48Planlayın

    Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IM

    YüksekCVSS 7,5Kavram kanıtıEPSS %60

    ipswitch · imail plus8 Eyl 2006

  • CVE-2006-4656
    33İzleyin

    PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier allows remote attack

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    web-provence · sl site8 Eyl 2006

  • CVE-2006-4670
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to execute arbitrary PHP cod

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    gtasoft · photokorn gallery8 Eyl 2006

  • CVE-2006-0001
    50Planlayın

    Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a c

    KritikCVSS 9,3İstismar yokEPSS %41

    microsoft · office12 Eyl 2006

  • CVE-2006-0032
    24İzleyin

    Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is

    OrtaCVSS 4,3Kavram kanıtıEPSS %24

    microsoft · windows 200012 Eyl 2006

  • CVE-2006-3311
    25İzleyin

    Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote at

    OrtaCVSS 5,1İstismar yokEPSS %17

    adobe · flash player12 Eyl 2006

  • CVE-2006-3442
    38İzleyin

    Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote attackers to execute ar

    YüksekCVSS 7,6İstismar yokEPSS %27

    microsoft · windows xp12 Eyl 2006

  • CVE-2006-3873
    39İzleyin

    Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch b

    YüksekCVSS 7,5İstismar yokEPSS %29

    microsoft · ie12 Eyl 2006

  • CVE-2006-4384
    25İzleyin

    Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64

    OrtaCVSS 5,1Kavram kanıtıEPSS %16

    apple · quicktime12 Eyl 2006

  • CVE-2006-4640
    30İzleyin

    Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protec

    OrtaCVSS 6,8İstismar yokEPSS %10

    adobe · flash player12 Eyl 2006

  • CVE-2006-4777
    54Planlayın

    Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer

    YüksekCVSS 7,6SilahlaştırılmışEPSS %79

    microsoft · ie13 Eyl 2006

  • CVE-2006-4832
    33İzleyin

    Buffer overflow in the telnet service in Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2) and earlier, and S

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    verso netperformer · frame relay access device act15 Eyl 2006

  • CVE-2006-4844
    23İzleyin

    PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other

    OrtaCVSS 5,1Kavram kanıtıEPSS %10

    claroline · claroline18 Eyl 2006

  • CVE-2006-4847
    52Planlayın

    Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long

    OrtaCVSS 6,5SilahlaştırılmışEPSS %85

    ipswitch · ws ftp server18 Eyl 2006

  • CVE-2006-4868
    55Planlayın

    Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Win

    KritikCVSS 9,3SilahlaştırılmışEPSS %61

    microsoft · windows 200019 Eyl 2006

  • CVE-2006-4870
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitra

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    aewebworks · aedating19 Eyl 2006

  • CVE-2006-4888
    25İzleyin

    Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML I

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · ie19 Eyl 2006

  • CVE-2006-4889
    25İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled, al

    OrtaCVSS 5,1Kavram kanıtıEPSS %16

    telekorn · signkorn guestbook19 Eyl 2006

  • CVE-2006-4438
    28İzleyin

    Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute ar

    OrtaCVSS 6,4Kavram kanıtıEPSS %10

    doctor web ltd · dr.web20 Eyl 2006

  • CVE-2006-4920
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP c

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    siteatschool · siteatschool20 Eyl 2006

  • CVE-2006-4899
    23İzleyin

    The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    broadcom · etrust security command center22 Eyl 2006

  • CVE-2006-4901
    28İzleyin

    Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to sp

    OrtaCVSS 6,4Kavram kanıtıEPSS %10

    broadcom · etrust audit client22 Eyl 2006

  • CVE-2006-4948
    46Planlayın

    Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary c

    YüksekCVSS 7,5SilahlaştırılmışEPSS %54

    prosysinfo · tftp server tftpdwin22 Eyl 2006

  • CVE-2006-4965
    24İzleyin

    Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    apple · quicktime24 Eyl 2006

  • CVE-2006-4969
    34İzleyin

    Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    wahm e-commerce · pie cart pro24 Eyl 2006

  • CVE-2006-5000
    45Planlayın

    Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote aut

    OrtaCVSS 6,5İstismar yokEPSS %64

    ipswitch · ws ftp server26 Eyl 2006

  • CVE-2006-5001
    30İzleyin

    Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certa

    OrtaCVSS 5,0İstismar yokEPSS %31

    ipswitch · ws ftp server26 Eyl 2006

  • CVE-2006-4924
    42Planlayın

    sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) vi

    YüksekCVSS 7,8Kavram kanıtıEPSS %37

    openbsd · openssh26 Eyl 2006

  • CVE-2006-4694
    41Planlayın

    Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitr

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · office27 Eyl 2006

  • CVE-2006-5020
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    solidstate · solidstate27 Eyl 2006

  • CVE-2006-5028
    34İzleyin

    Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remot

    OrtaCVSS 5,0Kavram kanıtıEPSS %46

    swsoft · plesk27 Eyl 2006

  • CVE-2006-5048
    32İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier for Joomla! allow rem

    OrtaCVSS 6,8Kavram kanıtıEPSS %15

    joomla · joomla\!27 Eyl 2006

  • CVE-2006-5051
    45Planlayın

    Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbit

    YüksekCVSS 8,1Kavram kanıtıEPSS %44

    openbsd · openssh27 Eyl 2006

  • CVE-2006-5058
    33İzleyin

    Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call of Duty 2 1.3 and ea

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    activision · call of duty27 Eyl 2006

  • CVE-2006-2937
    34İzleyin

    OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumpti

    YüksekCVSS 7,8İstismar yokEPSS %10

    openssl · openssl28 Eyl 2006

  • CVE-2006-3738
    55Planlayın

    Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspeci

    KritikCVSS 10,0İstismar yokEPSS %49

    openssl · openssl28 Eyl 2006

  • CVE-2006-4343
    23İzleyin

    The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remo

    OrtaCVSS 4,3Kavram kanıtıEPSS %19

    openssl · openssl28 Eyl 2006

  • CVE-2006-4925
    25İzleyin

    packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUT

    OrtaCVSS 5,0İstismar yokEPSS %15

    openbsd · openssh28 Eyl 2006

  • CVE-2006-5084
    35İzleyin

    Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote attackers to cause a de

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    skype technologies · skype28 Eyl 2006

  • CVE-2006-5085
    44Planlayın

    Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the n

    YüksekCVSS 7,5Kavram kanıtıEPSS %47

    pixel motion · pixel motion blog28 Eyl 2006