İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2007: sömürülen ve yeni ciddi CVE kayıtları

53 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-1819
    49Planlayın

    Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Cente

    KritikCVSS 9,3SilahlaştırılmışEPSS %39

    hp · mercury quality center2 Nis 2007

  • CVE-2007-1825
    33İzleyin

    Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    php · php2 Nis 2007

  • CVE-2007-1211
    37İzleyin

    Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attac

    YüksekCVSS 7,1Kavram kanıtıEPSS %29

    microsoft · windows 20004 Nis 2007

  • CVE-2007-1866
    43Planlayın

    Stack-based buffer overflow in the dns_decode_reverse_name function in dns_decode.c in dproxy-nexgen allows remote attackers to execute arbi

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    dproxy · dproxy4 Nis 2007

  • CVE-2007-1868
    58Planlayın

    The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-da

    KritikCVSS 10,0SilahlaştırılmışEPSS %59

    ibm · tivoli provisioning manager os deployment4 Nis 2007

  • CVE-2007-0956
    49Planlayın

    The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username

    KritikCVSS 10,0İstismar yokEPSS %29

    mit · kerberos 55 Nis 2007

  • CVE-2007-0957
    39İzleyin

    Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) a

    KritikCVSS 9,0İstismar yokEPSS %10

    mit · kerberos 55 Nis 2007

  • CVE-2007-1687
    43Planlayın

    Multiple buffer overflows in the Internet Pictures Corporation iPIX Image Well ActiveX control (iPIX-ImageWell-ipix.dll) allow remote attack

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    internet pictures corporation · ipix image well10 Nis 2007

  • CVE-2007-0938
    54Planlayın

    Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request,

    KritikCVSS 10,0İstismar yokEPSS %45

    microsoft · content management server10 Nis 2007

  • CVE-2007-0939
    22İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inje

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · content management server10 Nis 2007

  • CVE-2007-1205
    46Planlayın

    Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 all

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · windows 200010 Nis 2007

  • CVE-2006-7192
    24İzleyin

    Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass reque

    OrtaCVSS 4,3İstismar yokEPSS %22

    microsoft · .net framework10 Nis 2007

  • CVE-2007-1910
    34İzleyin

    Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly ex

    OrtaCVSS 6,8Kavram kanıtıEPSS %24

    microsoft · word10 Nis 2007

  • CVE-2007-1911
    32İzleyin

    Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU consumption) via crafte

    YüksekCVSS 7,1Kavram kanıtıEPSS %11

    microsoft · word10 Nis 2007

  • CVE-2007-1912
    30İzleyin

    Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a crafted .HLP file.

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    microsoft · windows 200010 Nis 2007

  • CVE-2007-1357
    35İzleyin

    The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial

    YüksekCVSS 7,8Kavram kanıtıEPSS %13

    linux · linux kernel10 Nis 2007

  • CVE-2007-1946
    48Planlayın

    Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service (cr

    KritikCVSS 10,0İstismar yokEPSS %26

    microsoft · windows xp10 Nis 2007

  • CVE-2007-1559
    47Planlayın

    Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    roxio · cineplayer11 Nis 2007

  • CVE-2007-1748
    63Bu hafta

    Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Serve

    KritikCVSS 10,0SilahlaştırılmışEPSS %77

    microsoft · windows 200013 Nis 2007

  • CVE-2007-2031
    45Planlayın

    Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote attackers to execute

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    3proxy · 3proxy16 Nis 2007

  • CVE-2007-2052
    24İzleyin

    Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be us

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    python · python16 Nis 2007

  • CVE-2007-1674
    62Bu hafta

    Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    landesk · landesk management suite17 Nis 2007

  • CVE-2007-2057
    46Planlayın

    Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authenticati

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    aircrack-ng · airodump-ng17 Nis 2007

  • CVE-2007-2093
    44Planlayın

    Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject ar

    YüksekCVSS 7,5Kavram kanıtıEPSS %45

    limesoft · limesoft guestbook18 Nis 2007

  • CVE-2007-2108
    33İzleyin

    Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 on Windows allows remote a

    OrtaCVSS 6,8İstismar yokEPSS %21

    oracle · database server18 Nis 2007

  • CVE-2007-2141
    44Planlayın

    Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shout

    YüksekCVSS 7,5Kavram kanıtıEPSS %45

    shoutpro · shoutpro19 Nis 2007

  • CVE-2007-2156
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    rezervi generic · rezervi generic19 Nis 2007

  • CVE-2007-2161
    21İzleyin

    Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (browser hang) via JavaScript that matches a regular expr

    OrtaCVSS 4,3İstismar yokEPSS %12

    microsoft · internet explorer22 Nis 2007

  • CVE-2007-2165
    24İzleyin

    The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module

    OrtaCVSS 5,1İstismar yokEPSS %12

    proftpd project · proftpd22 Nis 2007

  • CVE-2007-2167
    43Planlayın

    Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number

    YüksekCVSS 7,5Kavram kanıtıEPSS %44

    aimstats · aimstats22 Nis 2007

  • CVE-2007-2175
    55Planlayın

    Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to exe

    YüksekCVSS 7,6SilahlaştırılmışEPSS %83

    apple · safari24 Nis 2007

  • CVE-2007-0746
    43Planlayın

    Heap-based buffer overflow in the VideoConference framework in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to execute arbit

    KritikCVSS 10,0İstismar yokEPSS %10

    apple · mac os x24 Nis 2007

  • CVE-2007-2193
    48Planlayın

    Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-ass

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    acd systems · acdsee24 Nis 2007

  • CVE-2007-2194
    46Planlayın

    Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a l

    KritikCVSS 10,0Kavram kanıtıEPSS %18

    gentoo · xnview24 Nis 2007

  • CVE-2007-2171
    47Planlayın

    Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote att

    KritikCVSS 10,0İstismar yokEPSS %24

    novell · groupwise24 Nis 2007

  • CVE-2007-2199
    41Planlayın

    PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConc

    OrtaCVSS 6,8Kavram kanıtıEPSS %46

    cjg explorer pro · cjg explorer pro24 Nis 2007

  • CVE-2007-2200
    43Planlayın

    Directory traversal vulnerability in navigator/navigator_ok.php in Pagode 0.5.8 allows remote attackers to read and possibly delete arbitrar

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    pagode · pagode24 Nis 2007

  • CVE-2007-2209
    30İzleyin

    Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly othe

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    accusoft · imagegear24 Nis 2007

  • CVE-2007-2244
    47Planlayın

    Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbi

    KritikCVSS 9,3Kavram kanıtıEPSS %31

    adobe · golive25 Nis 2007

  • CVE-2007-2139
    63Bu hafta

    Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used

    KritikCVSS 10,0SilahlaştırılmışEPSS %77

    ca · brightstor arcserve backup25 Nis 2007

  • CVE-2007-2285
    35İzleyin

    Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 (Ext JS) allows remote attackers to read a

    YüksekCVSS 7,8Kavram kanıtıEPSS %11

    jack slocum · ext js26 Nis 2007

  • CVE-2007-1683
    38İzleyin

    Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.dll) allows remote at

    OrtaCVSS 6,8Kavram kanıtıEPSS %37

    incredimail · immenushellext activex control26 Nis 2007

  • CVE-2007-2291
    36İzleyin

    CRLF injection vulnerability in the Digest Authentication support for Microsoft Internet Explorer 7.0.5730.11 allows remote attackers to con

    YüksekCVSS 7,5İstismar yokEPSS %20

    microsoft · internet explorer26 Nis 2007

  • CVE-2007-2292
    21İzleyin

    CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remot

    OrtaCVSS 4,3İstismar yokEPSS %12

    mozilla · firefox26 Nis 2007

  • CVE-2007-2293
    37İzleyin

    Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3

    YüksekCVSS 7,6Kavram kanıtıEPSS %23

    asterisk · asterisk26 Nis 2007

  • CVE-2007-2340
    40Planlayın

    Multiple PHP remote file inclusion vulnerabilities in inc/include_all.inc.php in phporacleview allow remote attackers to execute arbitrary P

    OrtaCVSS 6,8Kavram kanıtıEPSS %42

    phporacleview · phporacleview27 Nis 2007

  • CVE-2007-2353
    28İzleyin

    Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installati

    OrtaCVSS 5,0Kavram kanıtıEPSS %27

    apache · axis30 Nis 2007

  • CVE-2007-2356
    32İzleyin

    Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote atta

    OrtaCVSS 6,8Kavram kanıtıEPSS %15

    gimp · gimp30 Nis 2007

  • CVE-2007-2362
    41Planlayın

    Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitra

    KritikCVSS 9,0Kavram kanıtıEPSS %16

    don moore · mydns30 Nis 2007

  • CVE-2007-2365
    49Planlayın

    Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assisted remote attackers

    KritikCVSS 9,3Kavram kanıtıEPSS %41

    adobe · golive30 Nis 2007

  • CVE-2007-2366
    39İzleyin

    Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.

    YüksekCVSS 7,4Kavram kanıtıEPSS %33

    corel · paint shop pro30 Nis 2007

  • CVE-2007-2374
    42Planlayın

    Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · windows 200030 Nis 2007

  • CVE-2007-2380
    24İzleyin

    The Microsoft Atlas framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows r

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · atlas framework30 Nis 2007