İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2007: sömürülen ve yeni ciddi CVE kayıtları

50 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-0656
    35İzleyin

    PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote attackers to execute a

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    phpbb2-modificat · phpbb2-modificat1 Şub 2007

  • CVE-2007-0671
    78Bu hafta

    Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assist

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %43

    microsoft · access2 Şub 2007

  • CVE-2007-0674
    33İzleyin

    Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-assisted remote attack

    YüksekCVSS 7,1İstismar yokEPSS %16

    microsoft · windows mobile2 Şub 2007

  • CVE-2007-0675
    35İzleyin

    A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feat

    YüksekCVSS 7,6İstismar yokEPSS %17

    microsoft · windows vista2 Şub 2007

  • CVE-2007-0785
    51Planlayın

    PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote attackers to execute

    YüksekCVSS 7,5Kavram kanıtıEPSS %68

    flipsource · flip6 Şub 2007

  • CVE-2007-0796
    34İzleyin

    Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service (daemon crash) or po

    YüksekCVSS 7,5İstismar yokEPSS %12

    bluecoat · winproxy6 Şub 2007

  • CVE-2007-0811
    22İzleyin

    Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL p

    OrtaCVSS 4,3Kavram kanıtıEPSS %18

    microsoft · ie7 Şub 2007

  • CVE-2007-0816
    23İzleyin

    The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote atta

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    broadcom · brightstor arcserve backup7 Şub 2007

  • CVE-2007-0446
    53Planlayın

    Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1

    KritikCVSS 10,0İstismar yokEPSS %44

    hp · mercury loadrunner agent8 Şub 2007

  • CVE-2007-0870
    36İzleyin

    Unspecified vulnerability in Microsoft Word 2000 allows remote attackers to cause a denial of service (crash) via unknown vectors, a differe

    YüksekCVSS 7,6İstismar yokEPSS %21

    microsoft · word11 Şub 2007

  • CVE-2007-0878
    37İzleyin

    Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service (loss of

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · windows mobile12 Şub 2007

  • CVE-2007-0882
    69Bu hafta

    Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "

    KritikCVSS 10,0SilahlaştırılmışEPSS %98

    sun · sunos12 Şub 2007

  • CVE-2007-0887
    34İzleyin

    axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service (NULL der

    YüksekCVSS 7,8Kavram kanıtıEPSS %10

    gecad technologies · axigen mail server12 Şub 2007

  • CVE-2006-1311
    46Planlayın

    The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · learning essentials13 Şub 2007

  • CVE-2006-3448
    48Planlayın

    Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows

    KritikCVSS 9,3İstismar yokEPSS %36

    microsoft · step-by-step interactive training13 Şub 2007

  • CVE-2006-5270
    46Planlayın

    Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefron

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · antigen13 Şub 2007

  • CVE-2007-0025
    48Planlayın

    The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-

    KritikCVSS 9,3İstismar yokEPSS %36

    microsoft · visual studio .net13 Şub 2007

  • CVE-2007-0026
    37İzleyin

    The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code

    YüksekCVSS 7,6İstismar yokEPSS %24

    microsoft · windows 200013 Şub 2007

  • CVE-2007-0214
    45Planlayın

    The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execu

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · windows 200013 Şub 2007

  • CVE-2007-0900
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals is enabled, allow rem

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    tagit · tagboard13 Şub 2007

  • CVE-2007-0208
    46Planlayın

    Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the p

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · office13 Şub 2007

  • CVE-2007-0209
    46Planlayın

    Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote at

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · office13 Şub 2007

  • CVE-2006-4697
    46Planlayın

    Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers to

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · windows 200013 Şub 2007

  • CVE-2007-0217
    58Planlayın

    The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP

    KritikCVSS 10,0Kavram kanıtıEPSS %58

    microsoft · windows 200013 Şub 2007

  • CVE-2007-0219
    52Planlayın

    Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from (1) Msb1fren.dll, (2) Htmlmm.ocx, and (3) Blnmgrps.dll as ActiveX c

    KritikCVSS 10,0İstismar yokEPSS %39

    microsoft · windows 200013 Şub 2007

  • CVE-2007-0908
    24İzleyin

    The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variabl

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    php · php13 Şub 2007

  • CVE-2007-0913
    41Planlayın

    Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · powerpoint13 Şub 2007

  • CVE-2007-0927
    43Planlayın

    Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce head

    YüksekCVSS 7,5Kavram kanıtıEPSS %44

    utorrent · utorrent14 Şub 2007

  • CVE-2007-0949
    45Planlayın

    Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    itinysoft studio · total video player14 Şub 2007

  • CVE-2007-0977
    40Planlayın

    IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner acces

    YüksekCVSS 7,1SilahlaştırılmışEPSS %19

    ibm · lotus domino15 Şub 2007

  • CVE-2007-0981
    34İzleyin

    Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypa

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    mozilla · firefox15 Şub 2007

  • CVE-2006-5276
    64Bu hafta

    Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; all

    KritikCVSS 10,0SilahlaştırılmışEPSS %79

    snort · snort19 Şub 2007

  • CVE-2007-0325
    48Planlayın

    Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in Of

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    trend micro · client-server-messaging security20 Şub 2007

  • CVE-2007-1036
    55Planlayın

    The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attack

    YüksekCVSS 7,5SilahlaştırılmışEPSS %82

    jboss · jboss application server21 Şub 2007

  • CVE-2007-1070
    62Bu hafta

    Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62,

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    trend micro · serverprotect21 Şub 2007

  • CVE-2007-1061
    46Planlayın

    SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allow

    OrtaCVSS 6,8Kavram kanıtıEPSS %61

    francisco burzi · php-nuke21 Şub 2007

  • CVE-2006-6490
    43Planlayın

    Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Sy

    KritikCVSS 10,0İstismar yokEPSS %10

    supportsoft · scriptrunner22 Şub 2007

  • CVE-2007-1071
    37İzleyin

    Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (se

    YüksekCVSS 7,8Kavram kanıtıEPSS %18

    apple · mac os x22 Şub 2007

  • CVE-2006-7027
    45Planlayın

    Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which al

    KritikCVSS 10,0İstismar yokEPSS %15

    microsoft · isa server22 Şub 2007

  • CVE-2006-7029
    24İzleyin

    Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frameset with only one fram

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · internet explorer22 Şub 2007

  • CVE-2006-7030
    25İzleyin

    Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain malformed HTML, possi

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · windows 200022 Şub 2007

  • CVE-2006-7031
    31İzleyin

    Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a table element with a

    OrtaCVSS 6,5Kavram kanıtıEPSS %18

    microsoft · windows 200022 Şub 2007

  • CVE-2007-1085
    33İzleyin

    Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inject arbitrary web scr

    YüksekCVSS 7,6Kavram kanıtıEPSS %11

    google · desktop22 Şub 2007

  • CVE-2007-1090
    33İzleyin

    Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (crash) via a malformed

    YüksekCVSS 7,1Kavram kanıtıEPSS %17

    microsoft · windows 2003 server26 Şub 2007

  • CVE-2007-1091
    35İzleyin

    Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and

    OrtaCVSS 6,8İstismar yokEPSS %25

    microsoft · ie26 Şub 2007

  • CVE-2007-1094
    37İzleyin

    Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (NULL dereference and application crash) via JavaScript o

    YüksekCVSS 7,8İstismar yokEPSS %18

    microsoft · internet explorer26 Şub 2007

  • CVE-2007-0009
    42Planlayın

    Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.1

    OrtaCVSS 6,8İstismar yokEPSS %50

    mozilla · firefox26 Şub 2007

  • CVE-2007-1114
    21İzleyin

    The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is not specified in an H

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · ie26 Şub 2007

  • CVE-2007-1117
    45Planlayın

    Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspecified vecto

    KritikCVSS 10,0İstismar yokEPSS %17

    microsoft · publisher26 Şub 2007

  • CVE-2007-1122
    30İzleyin

    Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 and 1.01 allow remote

    OrtaCVSS 6,4İstismar yokEPSS %15

    zephyrsoft toolbox · address book continued26 Şub 2007