İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2007: sömürülen ve yeni ciddi CVE kayıtları

55 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-0015
    42Planlayın

    Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.

    OrtaCVSS 6,8SilahlaştırılmışEPSS %48

    apple · quicktime1 Oca 2007

  • CVE-2007-0017
    31İzleyin

    Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plu

    OrtaCVSS 6,8Kavram kanıtıEPSS %12

    videolan · vlc media player2 Oca 2007

  • CVE-2007-0044
    34İzleyin

    Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the bro

    OrtaCVSS 4,3Kavram kanıtıEPSS %56

    adobe · acrobat3 Oca 2007

  • CVE-2007-0045
    31İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Ad

    OrtaCVSS 4,3İstismar yokEPSS %47

    adobe · acrobat3 Oca 2007

  • CVE-2007-0046
    47Planlayın

    Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to ex

    YüksekCVSS 7,5Kavram kanıtıEPSS %56

    adobe · acrobat reader3 Oca 2007

  • CVE-2007-0048
    30İzleyin

    Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x

    OrtaCVSS 5,0İstismar yokEPSS %33

    adobe · acrobat3 Oca 2007

  • CVE-2007-0086
    34İzleyin

    The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of servic

    YüksekCVSS 7,8İstismar yokEPSS %10

    apache · http server5 Oca 2007

  • CVE-2007-0087
    38İzleyin

    Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows remote attackers to c

    YüksekCVSS 7,8İstismar yokEPSS %24

    microsoft · internet information server5 Oca 2007

  • CVE-2007-0099
    45Planlayın

    Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applications, allows remote

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · xml core services8 Oca 2007

  • CVE-2007-0103
    32İzleyin

    The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly i

    OrtaCVSS 6,8Kavram kanıtıEPSS %16

    adobe · acrobat reader8 Oca 2007

  • CVE-2007-0105
    33İzleyin

    Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engin

    YüksekCVSS 7,5İstismar yokEPSS %11

    cisco · secure access control server8 Oca 2007

  • CVE-2007-0107
    31İzleyin

    WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    wordpress · wordpress8 Oca 2007

  • CVE-2007-0126
    40Planlayın

    Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index b

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    opera · opera browser8 Oca 2007

  • CVE-2007-0134
    34İzleyin

    Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, w

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    igeneric · ig shop9 Oca 2007

  • CVE-2007-0027
    46Planlayın

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · excel9 Oca 2007

  • CVE-2007-0024
    50Planlayın

    Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000

    KritikCVSS 9,3Kavram kanıtıEPSS %44

    microsoft · windows 20009 Oca 2007

  • CVE-2007-0028
    47Planlayın

    Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which a

    KritikCVSS 9,3İstismar yokEPSS %33

    microsoft · excel9 Oca 2007

  • CVE-2007-0029
    46Planlayın

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · excel9 Oca 2007

  • CVE-2007-0030
    47Planlayın

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · excel9 Oca 2007

  • CVE-2007-0031
    50Planlayın

    Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attack

    KritikCVSS 9,3Kavram kanıtıEPSS %42

    microsoft · excel9 Oca 2007

  • CVE-2007-0033
    47Planlayın

    Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal me

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · office9 Oca 2007

  • CVE-2007-0034
    48Planlayın

    Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers

    KritikCVSS 9,3İstismar yokEPSS %37

    microsoft · office9 Oca 2007

  • CVE-2007-0167
    33İzleyin

    Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow remote attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    ppc search engine · ppc search engine9 Oca 2007

  • CVE-2007-0168
    36İzleyin

    The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Busi

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    broadcom · brightstor arcserve backup11 Oca 2007

  • CVE-2007-0169
    51Planlayın

    Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Bu

    YüksekCVSS 7,5SilahlaştırılmışEPSS %70

    broadcom · brightstor arcserve backup11 Oca 2007

  • CVE-2007-0233
    34İzleyin

    wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeric parameter with a va

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    wordpress · wordpress12 Oca 2007

  • CVE-2007-0236
    47Planlayın

    Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause

    KritikCVSS 10,0Kavram kanıtıEPSS %21

    apple · mac os x16 Oca 2007

  • CVE-2007-0247
    26İzleyin

    squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory lis

    OrtaCVSS 5,0Kavram kanıtıEPSS %20

    squid · squid16 Oca 2007

  • CVE-2006-5171
    45Planlayın

    Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, E

    KritikCVSS 10,0İstismar yokEPSS %16

    ca · protection suites16 Oca 2007

  • CVE-2006-5172
    45Planlayın

    Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, E

    KritikCVSS 10,0İstismar yokEPSS %15

    ca · protection suites16 Oca 2007

  • CVE-2007-0256
    35İzleyin

    VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.

    YüksekCVSS 7,8Kavram kanıtıEPSS %11

    videolan · vlc media player16 Oca 2007

  • CVE-2007-0222
    24İzleyin

    Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read

    OrtaCVSS 5,0İstismar yokEPSS %13

    oracle · application server16 Oca 2007

  • CVE-2007-0243
    30İzleyin

    Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    sun · jdk17 Oca 2007

  • CVE-2007-0352
    48Planlayın

    Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a craft

    KritikCVSS 9,3Kavram kanıtıEPSS %36

    microsoft · html help workshop18 Oca 2007

  • CVE-2007-0356
    25İzleyin

    The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attackers to cause a denial

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    common controls replacement project · foldertreeview activex control18 Oca 2007

  • CVE-2007-0373
    31İzleyin

    Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute arbitrary SQL commands via (1) the searchword

    OrtaCVSS 6,8İstismar yokEPSS %12

    joomla · joomla19 Oca 2007

  • CVE-2007-0021
    37İzleyin

    Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null pointer dereference and applicat

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    apple · ichat22 Oca 2007

  • CVE-2007-0427
    46Planlayın

    Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help

    KritikCVSS 9,3Kavram kanıtıEPSS %31

    microsoft · html help workshop22 Oca 2007

  • CVE-2007-0449
    64Bu hafta

    Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r

    KritikCVSS 10,0SilahlaştırılmışEPSS %79

    broadcom · brightstor arcserve backup laptops desktops23 Oca 2007

  • CVE-2007-0468
    34İzleyin

    Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ (MSVC) in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote at

    OrtaCVSS 6,8İstismar yokEPSS %24

    microsoft · visual studio23 Oca 2007

  • CVE-2007-0018
    48Planlayın

    Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    altdo · convert mp3 master24 Oca 2007

  • CVE-2007-0444
    32İzleyin

    Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0,

    YüksekCVSS 7,2Kavram kanıtıEPSS %13

    citrix · metaframe24 Oca 2007

  • CVE-2007-0493
    35İzleyin

    Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum

    YüksekCVSS 7,8İstismar yokEPSS %12

    isc · bind25 Oca 2007

  • CVE-2007-0494
    30İzleyin

    ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum

    OrtaCVSS 4,3İstismar yokEPSS %44

    isc · bind25 Oca 2007

  • CVE-2007-0515
    49Planlayın

    Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial

    KritikCVSS 9,3Kavram kanıtıEPSS %38

    microsoft · office25 Oca 2007

  • CVE-2006-6956
    20İzleyin

    Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via a web page that contains a large number of nest

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · internet explorer29 Oca 2007

  • CVE-2007-0463
    25İzleyin

    Format string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote attackers to cause a denial of service (applicat

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    apple · software update29 Oca 2007

  • CVE-2007-0561
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Xero Portal 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    xero portal · xero portal30 Oca 2007

  • CVE-2007-0562
    21İzleyin

    Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    microsoft · windows explorer30 Oca 2007

  • CVE-2007-0455
    34İzleyin

    Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a den

    YüksekCVSS 7,5İstismar yokEPSS %11

    gd graphics library project · gd graphics library30 Oca 2007

  • CVE-2007-0464
    24İzleyin

    The _CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    apple · mac os x30 Oca 2007

  • CVE-2007-0584
    51Planlayın

    PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm (g-neric) allows remote att

    YüksekCVSS 7,5Kavram kanıtıEPSS %70

    g-neric · php generic library and framework30 Oca 2007

  • CVE-2007-0465
    36İzleyin

    Format string vulnerability in Apple Installer 2.1.5 on Mac OS X 10.4.8 allows user-assisted remote attackers to execute arbitrary code via

    YüksekCVSS 7,6Kavram kanıtıEPSS %18

    apple · installer30 Oca 2007

  • CVE-2007-0612
    44Planlayın

    Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Expl

    YüksekCVSS 7,8Kavram kanıtıEPSS %43

    microsoft · ie31 Oca 2007

  • CVE-2007-0646
    31İzleyin

    Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to

    YüksekCVSS 7,1Kavram kanıtıEPSS %10

    apple · mac os x31 Oca 2007