İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2006: sömürülen ve yeni ciddi CVE kayıtları

62 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2006-5854
    47Planlayın

    Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to exec

    YüksekCVSS 7,5Kavram kanıtıEPSS %57

    novell · netware client3 Ara 2006

  • CVE-2006-6236
    43Planlayın

    Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary co

    KritikCVSS 9,3İstismar yokEPSS %20

    adobe · acrobat reader3 Ara 2006

  • CVE-2006-6251
    50Planlayın

    Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file,

    YüksekCVSS 7,5SilahlaştırılmışEPSS %67

    vuplayer · vuplayer4 Ara 2006

  • CVE-2006-6252
    20İzleyin

    Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · windows live messenger4 Ara 2006

  • CVE-2006-6263
    31İzleyin

    Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next ho

    OrtaCVSS 6,8İstismar yokEPSS %12

    microsoft · teredo4 Ara 2006

  • CVE-2006-6264
    34İzleyin

    Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, w

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · teredo4 Ara 2006

  • CVE-2006-6266
    31İzleyin

    Teredo clients, when following item 6 of RFC4380 section 5.2.3, start direct IPv6 connectivity tests (aka ping tests) in response to packets

    OrtaCVSS 6,8İstismar yokEPSS %11

    microsoft · teredo4 Ara 2006

  • CVE-2006-6287
    33İzleyin

    Stack-based buffer overflow in AtomixMP3 2.3 and earlier allows remote attackers to execute arbitrary code via a long pathname in an M3U fil

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    atomix productions · atomixmp34 Ara 2006

  • CVE-2006-6293
    35İzleyin

    Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code v

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    f-prot · f-prot antivirus5 Ara 2006

  • CVE-2006-6296
    31İzleyin

    The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP

    OrtaCVSS 6,1Kavram kanıtıEPSS %21

    microsoft · windows 20005 Ara 2006

  • CVE-2006-5855
    48Planlayın

    Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial o

    KritikCVSS 10,0İstismar yokEPSS %26

    ibm · tivoli storage manager6 Ara 2006

  • CVE-2006-5856
    31İzleyin

    Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section na

    OrtaCVSS 6,8İstismar yokEPSS %14

    adobe · download manager6 Ara 2006

  • CVE-2006-5994
    47Planlayın

    Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v.

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · office6 Ara 2006

  • CVE-2006-6310
    25İzleyin

    Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an invalid src attribute va

    OrtaCVSS 5,0Kavram kanıtıEPSS %15

    microsoft · internet explorer6 Ara 2006

  • CVE-2006-6311
    28İzleyin

    Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in an HTML table tag wi

    OrtaCVSS 5,0Kavram kanıtıEPSS %26

    microsoft · internet explorer6 Ara 2006

  • CVE-2006-6334
    37İzleyin

    Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows

    OrtaCVSS 6,8Kavram kanıtıEPSS %34

    citrix · presentation server client7 Ara 2006

  • CVE-2006-6332
    36İzleyin

    Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    madwifi · madwifi10 Ara 2006

  • CVE-2006-6421
    29İzleyin

    Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated

    OrtaCVSS 6,0Kavram kanıtıEPSS %15

    phpbb group · phpbb10 Ara 2006

  • CVE-2006-6379
    36İzleyin

    Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserv

    YüksekCVSS 7,5Kavram kanıtıEPSS %21

    broadcom · brightstor arcserve backup10 Ara 2006

  • CVE-2006-6450
    37İzleyin

    Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote

    YüksekCVSS 7,5İstismar yokEPSS %21

    novell · zenworks patch management server10 Ara 2006

  • CVE-2006-6456
    47Planlayın

    Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecifie

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · office11 Ara 2006

  • CVE-2006-6478
    33İzleyin

    Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parame

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    scriptphp · annoncescripthp11 Ara 2006

  • CVE-2006-6423
    61Bu hafta

    Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.

    KritikCVSS 10,0SilahlaştırılmışEPSS %70

    mailenable · mailenable enterprise11 Ara 2006

  • CVE-2006-5577
    25İzleyin

    Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML ta

    OrtaCVSS 4,3İstismar yokEPSS %25

    microsoft · ie12 Ara 2006

  • CVE-2006-5578
    17İzleyin

    Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information vi

    DüşükCVSS 2,6İstismar yokEPSS %21

    microsoft · ie12 Ara 2006

  • CVE-2006-5579
    47Planlayın

    Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain errors simultaneously,

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · windows server 200312 Ara 2006

  • CVE-2006-5581
    48Planlayın

    Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functi

    KritikCVSS 9,3İstismar yokEPSS %36

    microsoft · internet explorer12 Ara 2006

  • CVE-2006-5583
    56Planlayın

    Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows

    KritikCVSS 10,0İstismar yokEPSS %53

    microsoft · windows 2003 server12 Ara 2006

  • CVE-2006-6335
    44Planlayın

    Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via (1) a SIT ar

    KritikCVSS 10,0İstismar yokEPSS %12

    sophos · sophos anti-virus12 Ara 2006

  • CVE-2006-2386
    36İzleyin

    Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact

    OrtaCVSS 6,8İstismar yokEPSS %28

    microsoft · outlook express12 Ara 2006

  • CVE-2006-4702
    35İzleyin

    Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server

    OrtaCVSS 6,8İstismar yokEPSS %27

    microsoft · windows media player12 Ara 2006

  • CVE-2006-5584
    39İzleyin

    The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote att

    YüksekCVSS 7,5İstismar yokEPSS %31

    microsoft · windows 200012 Ara 2006

  • CVE-2006-6561
    49Planlayın

    Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code

    KritikCVSS 9,3Kavram kanıtıEPSS %41

    microsoft · office14 Ara 2006

  • CVE-2006-5822
    44Planlayın

    Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, an

    KritikCVSS 10,0İstismar yokEPSS %11

    symantec · veritas netbackup client14 Ara 2006

  • CVE-2006-6222
    44Planlayın

    Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, an

    KritikCVSS 10,0İstismar yokEPSS %12

    symantec · veritas netbackup client14 Ara 2006

  • CVE-2006-6565
    40Planlayın

    FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) N

    OrtaCVSS 4,0SilahlaştırılmışEPSS %70

    filezilla-project · filezilla server15 Ara 2006

  • CVE-2006-6576
    50Planlayın

    Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (application crash) a

    YüksekCVSS 7,5SilahlaştırılmışEPSS %67

    goldenftpserver · golden ftp server15 Ara 2006

  • CVE-2006-6601
    22İzleyin

    Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID

    OrtaCVSS 4,3Kavram kanıtıEPSS %18

    windows · media player15 Ara 2006

  • CVE-2006-6602
    21İzleyin

    explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of servi

    OrtaCVSS 4,3Kavram kanıtıEPSS %14

    microsoft · windows explorer15 Ara 2006

  • CVE-2006-6617
    32İzleyin

    projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password f

    OrtaCVSS 6,5İstismar yokEPSS %20

    microsoft · project server18 Ara 2006

  • CVE-2006-6652
    42Planlayın

    Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple

    KritikCVSS 9,0Kavram kanıtıEPSS %20

    apple · mac os x19 Ara 2006

  • CVE-2006-6659
    25İzleyin

    The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (I

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    microsoft · ie19 Ara 2006

  • CVE-2006-6665
    40Planlayın

    Buffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted remote attackers to execute arbitrary code via a

    OrtaCVSS 6,8SilahlaştırılmışEPSS %30

    astonsoft · deepburner20 Ara 2006

  • CVE-2006-6697
    34İzleyin

    CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    oracle · application server portal21 Ara 2006

  • CVE-2006-6707
    47Planlayın

    Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control (NeoTraceExplorer.dll) in NeoTrace Express 3.25 and NeoTr

    YüksekCVSS 7,5SilahlaştırılmışEPSS %56

    mcafee · neotrace22 Ara 2006

  • CVE-2006-6723
    42Planlayın

    The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (memory consumption) v

    YüksekCVSS 7,8Kavram kanıtıEPSS %37

    microsoft · windows 200026 Ara 2006

  • CVE-2006-6424
    54Planlayın

    Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to

    KritikCVSS 9,0SilahlaştırılmışEPSS %60

    novell · netmail26 Ara 2006

  • CVE-2006-6425
    53Planlayın

    Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbi

    KritikCVSS 9,0SilahlaştırılmışEPSS %58

    novell · netmail26 Ara 2006

  • CVE-2006-6761
    42Planlayın

    Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbi

    OrtaCVSS 6,5SilahlaştırılmışEPSS %53

    novell · netmail26 Ara 2006

  • CVE-2006-6811
    29İzleyin

    KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Cha

    OrtaCVSS 6,5Kavram kanıtıEPSS %10

    kde · ksirc29 Ara 2006

  • CVE-2006-1305
    27İzleyin

    Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted

    OrtaCVSS 4,3İstismar yokEPSS %32

    microsoft · office31 Ara 2006

  • CVE-2006-4098
    44Planlayın

    Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engi

    KritikCVSS 10,0İstismar yokEPSS %12

    cisco · secure access control server31 Ara 2006

  • CVE-2006-4695
    49Planlayın

    Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute ar

    KritikCVSS 9,3İstismar yokEPSS %40

    microsoft · office web components31 Ara 2006

  • CVE-2006-5265
    23İzleyin

    Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allows remote attackers to cause a denial of serv

    OrtaCVSS 5,0İstismar yokEPSS %10

    microsoft · dynamics gp31 Ara 2006

  • CVE-2006-5266
    35İzleyin

    Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to execute arbitrary code

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · dynamics gp31 Ara 2006

  • CVE-2006-5574
    44Planlayın

    Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 200

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · office31 Ara 2006

  • CVE-2006-5858
    24İzleyin

    Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directorie

    OrtaCVSS 5,0İstismar yokEPSS %13

    adobe · coldfusion31 Ara 2006

  • CVE-2006-6863
    43Planlayın

    PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote attackers to execute ar

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    enigma · wordpress bridge31 Ara 2006

  • CVE-2006-6901
    44Planlayın

    Unspecified vulnerability in the Bluetooth stack in Microsoft Windows allows remote attackers to gain administrative access (aka Remote Root

    KritikCVSS 10,0İstismar yokEPSS %14

    microsoft · windows 2003 server31 Ara 2006

  • CVE-2006-6902
    44Planlayın

    Unspecified vulnerability in the Bluetooth stack in Microsoft Windows Mobile Pocket PC edition allows remote attackers to gain administrativ

    KritikCVSS 10,0İstismar yokEPSS %14

    microsoft · windows 2003 server31 Ara 2006

  • CVE-2006-6908
    49Planlayın

    Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, W

    KritikCVSS 10,0İstismar yokEPSS %30

    broadcom · widcomm bluetooth31 Ara 2006

  • CVE-2006-6917
    49Planlayın

    Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute

    KritikCVSS 10,0Kavram kanıtıEPSS %30

    broadcom · brightstor arcserve backup server31 Ara 2006