İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2006: sömürülen ve yeni ciddi CVE kayıtları

48 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2006-5112
    50Planlayın

    Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HTTP GET request.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %66

    intervations · navicopa web server3 Eki 2006

  • CVE-2006-5152
    30İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a

    OrtaCVSS 6,8İstismar yokEPSS %10

    microsoft · internet explorer5 Eki 2006

  • CVE-2006-5156
    62Bu hafta

    Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbi

    KritikCVSS 10,0SilahlaştırılmışEPSS %74

    mcafee · epolicy orchestrator5 Eki 2006

  • CVE-2006-5162
    31İzleyin

    wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (unhandled exception and

    OrtaCVSS 5,0Kavram kanıtıEPSS %36

    microsoft · internet explorer5 Eki 2006

  • CVE-2006-4812
    46Planlayın

    Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserializ

    KritikCVSS 10,0Kavram kanıtıEPSS %20

    php · php10 Eki 2006

  • CVE-2006-5142
    34İzleyin

    Stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server allows remote attackers to execute arbitrary code via l

    YüksekCVSS 7,5İstismar yokEPSS %13

    broadcom · brightstor arcserve backup10 Eki 2006

  • CVE-2006-5143
    54Planlayın

    Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r1

    YüksekCVSS 7,5SilahlaştırılmışEPSS %79

    ca · brightstor arcserve backup10 Eki 2006

  • CVE-2006-5205
    23İzleyin

    Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    invision power services · invision gallery10 Eki 2006

  • CVE-2006-5216
    49Planlayın

    Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %63

    sergey lyubka · simple httpd10 Eki 2006

  • CVE-2006-5220
    24İzleyin

    Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attackers to execute arbi

    OrtaCVSS 5,1Kavram kanıtıEPSS %14

    objective development · webyep10 Eki 2006

  • CVE-2006-3435
    48Planlayın

    PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, wh

    KritikCVSS 9,3İstismar yokEPSS %37

    microsoft · office10 Eki 2006

  • CVE-2006-3436
    29İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via

    OrtaCVSS 4,3İstismar yokEPSS %38

    microsoft · .net framework10 Eki 2006

  • CVE-2006-3876
    40Planlayın

    Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allo

    KritikCVSS 9,3İstismar yokEPSS %11

    microsoft · office10 Eki 2006

  • CVE-2006-2387
    24İzleyin

    Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004

    OrtaCVSS 5,1İstismar yokEPSS %12

    microsoft · office10 Eki 2006

  • CVE-2006-3434
    46Planlayın

    Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · office10 Eki 2006

  • CVE-2006-3647
    45Planlayın

    Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrar

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · office10 Eki 2006

  • CVE-2006-3650
    49Planlayın

    Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-

    KritikCVSS 9,3İstismar yokEPSS %38

    microsoft · office10 Eki 2006

  • CVE-2006-3651
    46Planlayın

    Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · office10 Eki 2006

  • CVE-2006-3864
    47Planlayın

    Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user

    KritikCVSS 9,3İstismar yokEPSS %33

    microsoft · office10 Eki 2006

  • CVE-2006-3868
    27İzleyin

    Unspecified vulnerability in Microsoft Office XP and 2003 allows remote user-assisted attackers to execute arbitrary code via a malformed Sm

    OrtaCVSS 5,1İstismar yokEPSS %24

    microsoft · office10 Eki 2006

  • CVE-2006-3877
    41Planlayın

    Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allo

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · access10 Eki 2006

  • CVE-2006-4685
    16İzleyin

    The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redi

    DüşükCVSS 2,6İstismar yokEPSS %20

    microsoft · xml core services10 Eki 2006

  • CVE-2006-4686
    39İzleyin

    Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.

    YüksekCVSS 7,5İstismar yokEPSS %30

    microsoft · xml core services10 Eki 2006

  • CVE-2006-4692
    29İzleyin

    Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and e

    OrtaCVSS 5,1İstismar yokEPSS %29

    microsoft · windows server 200310 Eki 2006

  • CVE-2006-4693
    44Planlayın

    Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · office10 Eki 2006

  • CVE-2006-4696
    49Planlayın

    Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows re

    KritikCVSS 9,0İstismar yokEPSS %43

    microsoft · windows 200010 Eki 2006

  • CVE-2006-5229
    40Planlayın

    OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote atta

    DüşükCVSS 2,6SilahlaştırılmışEPSS %58

    openbsd · openssh10 Eki 2006

  • CVE-2006-4842
    40Planlayın

    The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specify

    DüşükCVSS 3,6SilahlaştırılmışEPSS %7

    netscape · portable runtime api11 Eki 2006

  • CVE-2006-4154
    32İzleyin

    Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format

    OrtaCVSS 6,8İstismar yokEPSS %16

    apache · http server16 Eki 2006

  • CVE-2006-5296
    25İzleyin

    PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows

    OrtaCVSS 4,3Kavram kanıtıEPSS %26

    microsoft · powerpoint16 Eki 2006

  • CVE-2006-4182
    36İzleyin

    Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanni

    YüksekCVSS 7,5Kavram kanıtıEPSS %21

    clam anti-virus · clamav16 Eki 2006

  • CVE-2006-5295
    23İzleyin

    Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafte

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    clam anti-virus · clamav16 Eki 2006

  • CVE-2006-5302
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitrary PHP code via a URL

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    redaction system · redaction system17 Eki 2006

  • CVE-2006-5330
    27İzleyin

    CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 f

    OrtaCVSS 5,0İstismar yokEPSS %24

    adobe · flash player17 Eki 2006

  • CVE-2006-5379
    38İzleyin

    The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on oth

    YüksekCVSS 7,5Kavram kanıtıEPSS %27

    nvidia · binary graphics driver18 Eki 2006

  • CVE-2006-5392
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execute arbitrary PHP code

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    opendoc · fullcore18 Eki 2006

  • CVE-2006-5444
    56Planlayın

    Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2

    YüksekCVSS 7,5Kavram kanıtıEPSS %86

    digium · asterisk23 Eki 2006

  • CVE-2006-5448
    34İzleyin

    The drmstor.dll ActiveX object in Microsoft Windows Digital Rights Management System (DRM) allows remote attackers to cause a denial of serv

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · windows digital rights management23 Eki 2006

  • CVE-2006-5478
    56Planlayın

    Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e F

    YüksekCVSS 7,5SilahlaştırılmışEPSS %85

    novell · edirectory24 Eki 2006

  • CVE-2006-5506
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path paramet

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    wiclear · wiclear25 Eki 2006

  • CVE-2006-5517
    34İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote attackers to execute

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    rhode island secretary of state · open meetings filing system26 Eki 2006

  • CVE-2006-5518
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers to execute arbitrary

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    christopher fowler · rssonate26 Eki 2006

  • CVE-2006-5536
    24İzleyin

    Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to read arb

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    d-link · dsl-g624t26 Eki 2006

  • CVE-2006-5544
    31İzleyin

    Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phish

    OrtaCVSS 6,4İstismar yokEPSS %20

    microsoft · ie26 Eki 2006

  • CVE-2006-5559
    50Planlayın

    The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Micros

    KritikCVSS 9,3Kavram kanıtıEPSS %43

    microsoft · windows 200027 Eki 2006

  • CVE-2006-5567
    41Planlayın

    Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a

    KritikCVSS 9,3Kavram kanıtıEPSS %14

    nullsoft · winamp27 Eki 2006

  • CVE-2006-5614
    40Planlayın

    Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attacke

    DüşükCVSS 2,6SilahlaştırılmışEPSS %79

    microsoft · windows nt helper components30 Eki 2006

  • CVE-2006-5627
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitrary PHP code via a UR

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    qnecms · qnecms31 Eki 2006