İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2006: sömürülen ve yeni ciddi CVE kayıtları

47 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2006-4704
    41Planlayın

    Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Micros

    OrtaCVSS 6,8SilahlaştırılmışEPSS %45

    microsoft · visual studio .net1 Kas 2006

  • CVE-2006-5645
    25İzleyin

    Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled sca

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    sophos · anti-virus1 Kas 2006

  • CVE-2006-5646
    25İzleyin

    Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    sophos · anti-virus1 Kas 2006

  • CVE-2006-5647
    31İzleyin

    Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote atta

    OrtaCVSS 6,4Kavram kanıtıEPSS %21

    sophos · anti-virus1 Kas 2006

  • CVE-2006-5465
    33İzleyin

    Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2

    YüksekCVSS 7,5İstismar yokEPSS %10

    php · php3 Kas 2006

  • CVE-2006-5702
    40Planlayın

    Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_mode parameter in (1)

    OrtaCVSS 5,0SilahlaştırılmışEPSS %53

    tiki · tikiwiki cms\/groupware3 Kas 2006

  • CVE-2006-5710
    36İzleyin

    The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, all

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    apple · mac os x3 Kas 2006

  • CVE-2006-5735
    34İzleyin

    Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to include and execute arbi

    YüksekCVSS 7,5İstismar yokEPSS %14

    punbb · punbb6 Kas 2006

  • CVE-2006-5745
    53Planlayın

    Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on

    YüksekCVSS 7,6SilahlaştırılmışEPSS %77

    microsoft · xml core services6 Kas 2006

  • CVE-2006-5768
    35İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when register_globals is enabled, allow remote attacke

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    cyberfolio · cyberfolio6 Kas 2006

  • CVE-2006-5779
    53Planlayın

    OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, w

    YüksekCVSS 7,5İstismar yokEPSS %76

    openldap · openldap7 Kas 2006

  • CVE-2006-5780
    49Planlayın

    Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code via a crafted TCP pac

    YüksekCVSS 7,5SilahlaştırılmışEPSS %63

    xlink technology · omni-nfs server7 Kas 2006

  • CVE-2006-5650
    50Planlayın

    The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via t

    YüksekCVSS 7,5SilahlaştırılmışEPSS %67

    aol · icq7 Kas 2006

  • CVE-2006-5792
    48Planlayın

    Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified vectors, as demonst

    YüksekCVSS 7,5SilahlaştırılmışEPSS %60

    xlink technology · omni-nfs x enterprise7 Kas 2006

  • CVE-2006-5815
    63Bu hafta

    Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause

    KritikCVSS 10,0SilahlaştırılmışEPSS %75

    proftpd project · proftpd8 Kas 2006

  • CVE-2006-5826
    26İzleyin

    Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbitrary code or cause a

    OrtaCVSS 5,8Kavram kanıtıEPSS %10

    texas imperial software · wftpd9 Kas 2006

  • CVE-2006-5835
    24İzleyin

    The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authenticat

    OrtaCVSS 5,0İstismar yokEPSS %13

    ibm · lotus notes9 Kas 2006

  • CVE-2006-5846
    29İzleyin

    Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files

    OrtaCVSS 6,4Kavram kanıtıEPSS %11

    freewebshop · freewebshop9 Kas 2006

  • CVE-2006-5864
    25İzleyin

    Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attacke

    OrtaCVSS 5,1Kavram kanıtıEPSS %16

    gnu · gv10 Kas 2006

  • CVE-2006-5882
    37İzleyin

    Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebo

    YüksekCVSS 8,3Kavram kanıtıEPSS %13

    linksys · wpc300n wireless-n notebook adapter driver14 Kas 2006

  • CVE-2006-3445
    43Planlayın

    Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up

    YüksekCVSS 7,5İstismar yokEPSS %42

    microsoft · windows 200014 Kas 2006

  • CVE-2006-4687
    28İzleyin

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV t

    OrtaCVSS 5,1İstismar yokEPSS %26

    microsoft · ie14 Kas 2006

  • CVE-2006-4691
    64Bu hafta

    Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and X

    KritikCVSS 10,0SilahlaştırılmışEPSS %79

    microsoft · windows 200014 Kas 2006

  • CVE-2006-5198
    40Planlayın

    The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote

    OrtaCVSS 4,0SilahlaştırılmışEPSS %62

    winzip · winzip14 Kas 2006

  • CVE-2006-4688
    53Planlayın

    Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attacker

    YüksekCVSS 7,5SilahlaştırılmışEPSS %75

    microsoft · windows 200014 Kas 2006

  • CVE-2006-4689
    30İzleyin

    Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up

    OrtaCVSS 5,0İstismar yokEPSS %34

    microsoft · windows 200014 Kas 2006

  • CVE-2006-5972
    46Planlayın

    Stack-based buffer overflow in WG111v2.SYS in NetGear WG111v2 wireless adapter (USB) allows remote attackers to execute arbitrary code via a

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    netgear · wg111v2 driver17 Kas 2006

  • CVE-2006-5988
    24İzleyin

    Unspecified vulnerability in Windows 2000 Advanced Server SP4 running Active Directory allows remote attackers to cause a denial of service

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · windows 200020 Kas 2006

  • CVE-2006-3890
    41Planlayın

    Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applic

    KritikCVSS 9,3Kavram kanıtıEPSS %14

    sky software · fileview activex control21 Kas 2006

  • CVE-2006-6010
    40Planlayın

    SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcC

    OrtaCVSS 5,0SilahlaştırılmışEPSS %14

    sap · sap web application server21 Kas 2006

  • CVE-2006-6026
    43Planlayın

    Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows r

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    realnetworks · helix dna server21 Kas 2006

  • CVE-2006-6027
    50Planlayın

    Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary co

    KritikCVSS 9,3Kavram kanıtıEPSS %44

    adobe · acrobat reader21 Kas 2006

  • CVE-2006-6059
    46Planlayın

    Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code via

    KritikCVSS 10,0Kavram kanıtıEPSS %18

    netgear · ma521 driver21 Kas 2006

  • CVE-2006-6061
    40Planlayın

    com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %10

    apple · mac os x21 Kas 2006

  • CVE-2006-6063
    48Planlayın

    Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file containin

    YüksekCVSS 7,5SilahlaştırılmışEPSS %59

    un4seen · xmplay21 Kas 2006

  • CVE-2006-6076
    62Bu hafta

    Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows rem

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    ca · brightstor arcserve backup24 Kas 2006

  • CVE-2006-6097
    20İzleyin

    GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contai

    OrtaCVSS 4,0Kavram kanıtıEPSS %11

    gnu · tar24 Kas 2006

  • CVE-2006-6121
    41Planlayın

    Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method.

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    acer · lunchapp.aplunch26 Kas 2006

  • CVE-2006-6125
    34İzleyin

    Heap-based buffer overflow in the wireless driver (WG311ND5.SYS) 2.3.1.10 for NetGear WG311v1 wireless adapter allows remote attackers to ex

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    netgear · wg311v126 Kas 2006

  • CVE-2006-5750
    34İzleyin

    Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows rem

    YüksekCVSS 7,5İstismar yokEPSS %13

    jboss · jboss application server27 Kas 2006

  • CVE-2006-6133
    46Planlayın

    Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and

    YüksekCVSS 7,6Kavram kanıtıEPSS %51

    microsoft · visual studio .net27 Kas 2006

  • CVE-2006-6134
    43Planlayın

    Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows

    YüksekCVSS 7,5İstismar yokEPSS %42

    microsoft · windows media player27 Kas 2006

  • CVE-2006-6170
    35İzleyin

    Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other produ

    YüksekCVSS 7,5İstismar yokEPSS %17

    proftpd project · proftpd30 Kas 2006

  • CVE-2006-6183
    61Bu hafta

    Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service (cr

    KritikCVSS 10,0SilahlaştırılmışEPSS %70

    3com · 3ctftpsvc30 Kas 2006

  • CVE-2006-6184
    60Bu hafta

    Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a d

    KritikCVSS 10,0SilahlaştırılmışEPSS %65

    alliedtelesyn · at-tftp30 Kas 2006

  • CVE-2006-6199
    50Planlayın

    Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote attackers to execute a

    YüksekCVSS 7,5SilahlaştırılmışEPSS %65

    blazevideo · blaze dvd30 Kas 2006

  • CVE-2006-6201
    31İzleyin

    Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006;

    YüksekCVSS 7,5İstismar yokEPSS %3

    revilloc · mailserver30 Kas 2006