İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2007: sömürülen ve yeni ciddi CVE kayıtları

67 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2006-7065
    26İzleyin

    Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL style

    OrtaCVSS 5,0Kavram kanıtıEPSS %20

    microsoft · ie2 Mar 2007

  • CVE-2006-7066
    35İzleyin

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an

    YüksekCVSS 7,1Kavram kanıtıEPSS %22

    microsoft · windows xp2 Mar 2007

  • CVE-2006-7079
    43Planlayın

    Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program v

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    exv2 · content management system2 Mar 2007

  • CVE-2007-1232
    32İzleyin

    Directory traversal vulnerability in SQLiteManager 1.2.0 allows remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,1Kavram kanıtıEPSS %38

    sqlite manager · sqlite manager3 Mar 2007

  • CVE-2007-1238
    20İzleyin

    Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service (application crash) by attempting to insert a corru

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · office3 Mar 2007

  • CVE-2007-1239
    21İzleyin

    Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via

    OrtaCVSS 4,3İstismar yokEPSS %12

    microsoft · excel3 Mar 2007

  • CVE-2007-0774
    54Planlayın

    Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Serv

    YüksekCVSS 7,5SilahlaştırılmışEPSS %81

    apache · tomcat jk web server connector4 Mar 2007

  • CVE-2007-1277
    38İzleyin

    WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backd

    YüksekCVSS 7,5Kavram kanıtıEPSS %27

    wordpress · wordpress5 Mar 2007

  • CVE-2007-1285
    36İzleyin

    The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PH

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    php · php6 Mar 2007

  • CVE-2007-1286
    40Planlayın

    Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unser

    OrtaCVSS 6,8SilahlaştırılmışEPSS %40

    php · php6 Mar 2007

  • CVE-2007-1301
    40Planlayın

    Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authentica

    KritikCVSS 9,0Kavram kanıtıEPSS %12

    mailenable · mailenable enterprise6 Mar 2007

  • CVE-2007-1306
    37İzleyin

    Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation

    YüksekCVSS 7,8Kavram kanıtıEPSS %20

    digium · asterisk6 Mar 2007

  • CVE-2007-1327
    34İzleyin

    The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service (NULL de

    YüksekCVSS 7,8Kavram kanıtıEPSS %10

    silc · silc-server7 Mar 2007

  • CVE-2007-1347
    37İzleyin

    Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause

    YüksekCVSS 7,1Kavram kanıtıEPSS %31

    microsoft · windows 20008 Mar 2007

  • CVE-2007-1350
    33İzleyin

    Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username du

    OrtaCVSS 6,8İstismar yokEPSS %19

    novell · netmail8 Mar 2007

  • CVE-2007-1373
    58Planlayın

    Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers to execute arbitrary

    KritikCVSS 10,0SilahlaştırılmışEPSS %60

    pmail · mercury mail transport system9 Mar 2007

  • CVE-2007-1376
    33İzleyin

    The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resour

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    php · php9 Mar 2007

  • CVE-2007-1377
    25İzleyin

    AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of servic

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    adobe · acrobat reader9 Mar 2007

  • CVE-2007-1383
    44Planlayın

    Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowi

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    php · php9 Mar 2007

  • CVE-2007-1365
    45Planlayın

    Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragmented IPv6 packets du

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    openbsd · openbsd10 Mar 2007

  • CVE-2007-1399
    45Planlayın

    Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote atta

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    php · php10 Mar 2007

  • CVE-2007-1403
    39İzleyin

    Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a

    YüksekCVSS 7,5Kavram kanıtıEPSS %29

    macromedia · shockwave10 Mar 2007

  • CVE-2007-1404
    49Planlayın

    tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP packet that is not pr

    YüksekCVSS 7,3Kavram kanıtıEPSS %68

    prosysinfo · tftp server tftpdwin10 Mar 2007

  • CVE-2007-1413
    33İzleyin

    Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 version

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    php · php12 Mar 2007

  • CVE-2007-1421
    43Planlayın

    Multiple PHP remote file inclusion vulnerabilities in Premod SubDog 2 allow remote attackers to execute arbitrary PHP code via a URL in the

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    premod subdog · premod subdog12 Mar 2007

  • CVE-2007-1435
    54Planlayın

    Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GET or (2) PUT request

    KritikCVSS 10,0SilahlaştırılmışEPSS %45

    d-link · tftp server13 Mar 2007

  • CVE-2007-1278
    24İzleyin

    Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft I

    OrtaCVSS 4,3İstismar yokEPSS %23

    microsoft · internet information server16 Mar 2007

  • CVE-2007-0450
    47Planlayın

    Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules

    OrtaCVSS 5,0Kavram kanıtıEPSS %91

    apache · http server16 Mar 2007

  • CVE-2007-1492
    32İzleyin

    winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service (infinite loop) via a large cch argumen

    YüksekCVSS 7,1Kavram kanıtıEPSS %14

    microsoft · windows xp16 Mar 2007

  • CVE-2007-1447
    44Planlayın

    The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial o

    KritikCVSS 10,0İstismar yokEPSS %14

    broadcom · brightstor arcserve backup16 Mar 2007

  • CVE-2007-1499
    26İzleyin

    Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary c

    OrtaCVSS 4,3Kavram kanıtıEPSS %29

    microsoft · windows vista17 Mar 2007

  • CVE-2007-1512
    44Planlayın

    Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Go

    KritikCVSS 10,0İstismar yokEPSS %11

    microsoft · windows 200020 Mar 2007

  • CVE-2007-1525
    38İzleyin

    Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code v

    OrtaCVSS 6,8Kavram kanıtıEPSS %37

    dayfox designs · dayfox blog20 Mar 2007

  • CVE-2007-1527
    23İzleyin

    The LLTD Mapper in Microsoft Windows Vista does not verify that an IP address in a TLV type 0x07 field in a HELLO packet corresponds to a va

    OrtaCVSS 5,0İstismar yokEPSS %10

    microsoft · windows vista20 Mar 2007

  • CVE-2007-1528
    23İzleyin

    The LLTD Mapper in Microsoft Windows Vista allows remote attackers to spoof hosts, and nonexistent bridge relationships, into the network to

    OrtaCVSS 5,0İstismar yokEPSS %10

    microsoft · windows vista20 Mar 2007

  • CVE-2007-1530
    25İzleyin

    The LLTD Mapper in Microsoft Windows Vista does not properly gather responses to EMIT packets, which allows remote attackers to cause a deni

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · windows vista20 Mar 2007

  • CVE-2007-1531
    27İzleyin

    Microsoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which allows remote attackers to cause a denial of s

    OrtaCVSS 5,0Kavram kanıtıEPSS %23

    microsoft · windows vista20 Mar 2007

  • CVE-2007-1532
    28İzleyin

    The neighbor discovery implementation in Microsoft Windows Vista allows remote attackers to conduct a redirect attack by (1) responding to q

    OrtaCVSS 6,4İstismar yokEPSS %10

    microsoft · windows vista20 Mar 2007

  • CVE-2007-1533
    23İzleyin

    The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports within a solicitation se

    OrtaCVSS 5,0İstismar yokEPSS %10

    microsoft · windows vista20 Mar 2007

  • CVE-2007-1534
    41Planlayın

    DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 for 2 minutes after W

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · windows vista20 Mar 2007

  • CVE-2007-1535
    34İzleyin

    Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Ter

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · windows vista20 Mar 2007

  • CVE-2007-1536
    41Planlayın

    Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    file · file20 Mar 2007

  • CVE-2007-1560
    28İzleyin

    The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of servi

    OrtaCVSS 5,0İstismar yokEPSS %28

    squid · squid21 Mar 2007

  • CVE-2007-0348
    48Planlayın

    Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) Wi

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    roxio · cineplayer21 Mar 2007

  • CVE-2007-1561
    35İzleyin

    The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP I

    YüksekCVSS 7,8Kavram kanıtıEPSS %14

    asterisk · asterisk21 Mar 2007

  • CVE-2007-1562
    31İzleyin

    The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to con

    OrtaCVSS 6,8Kavram kanıtıEPSS %14

    mozilla · firefox21 Mar 2007

  • CVE-2007-1567
    55Planlayın

    Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of service or execute ar

    KritikCVSS 10,0Kavram kanıtıEPSS %50

    war ftp daemon · war ftp daemon21 Mar 2007

  • CVE-2007-1578
    45Planlayın

    Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attacker

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    atrium software · mercur imapd21 Mar 2007

  • CVE-2007-1579
    57Planlayın

    Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE command.

    KritikCVSS 10,0Kavram kanıtıEPSS %57

    atrium software · mercur imapd21 Mar 2007

  • CVE-2007-1620
    43Planlayın

    Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    php db designer · php db designer22 Mar 2007

  • CVE-2007-1643
    43Planlayın

    Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and earlier allow remote attackers to execute a

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    lan management system · lan management system23 Mar 2007

  • CVE-2007-1644
    50Planlayın

    The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployment

    KritikCVSS 10,0Kavram kanıtıEPSS %33

    microsoft · all windows23 Mar 2007

  • CVE-2007-1645
    44Planlayın

    Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long re

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    microsoft · windows 200023 Mar 2007

  • CVE-2007-1658
    48Planlayın

    Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local fil

    KritikCVSS 9,3Kavram kanıtıEPSS %36

    microsoft · windows vista24 Mar 2007

  • CVE-2007-1692
    35İzleyin

    The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries, which might all

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · windows 200026 Mar 2007

  • CVE-2007-1697
    62Bu hafta

    PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code

    KritikCVSS 10,0Kavram kanıtıEPSS %73

    philex · philex26 Mar 2007

  • CVE-2007-1699
    43Planlayın

    Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and com_swmenufree) 4.0 component for Mambo and Joomla! allo

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    joomla · swmenu component26 Mar 2007

  • CVE-2007-1721
    44Planlayın

    Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbitrary PHP code via a

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    realink · c-arbre27 Mar 2007

  • CVE-2007-1675
    58Planlayın

    Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.

    KritikCVSS 10,0Kavram kanıtıEPSS %61

    ibm · lotus domino28 Mar 2007

  • CVE-2007-1733
    43Planlayın

    Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long (1) /cgi-bin/ or (2)

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    intervations · navicopa web server28 Mar 2007

  • CVE-2007-1349
    23İzleyin

    PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular

    OrtaCVSS 5,0İstismar yokEPSS %10

    apache · mod perl29 Mar 2007

  • CVE-2007-1763
    33İzleyin

    The ATI kernel driver (atikmdag.sys) in Microsoft Windows Vista allows user-assisted remote attackers to cause a denial of service (crash) v

    YüksekCVSS 7,1İstismar yokEPSS %18

    microsoft · windows vista29 Mar 2007

  • CVE-2007-1765
    53Planlayın

    Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of

    KritikCVSS 9,3SilahlaştırılmışEPSS %54

    microsoft · windows 200029 Mar 2007

  • CVE-2007-1770
    45Planlayın

    Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when usi

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    esri · arcsde29 Mar 2007

  • CVE-2007-1777
    35İzleyin

    Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive th

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    php · php29 Mar 2007

  • CVE-2007-0038
    59Planlayın

    Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbit

    KritikCVSS 9,3SilahlaştırılmışEPSS %72

    microsoft · windows 200030 Mar 2007

  • CVE-2007-1785
    33İzleyin

    The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via c

    YüksekCVSS 7,1Kavram kanıtıEPSS %15

    ca · brightstor arcserve backup30 Mar 2007