İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2007: sömürülen ve yeni ciddi CVE kayıtları

71 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-2426
    49Planlayın

    PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin for WordPress allows r

    YüksekCVSS 7,5Kavram kanıtıEPSS %62

    wildbits · mygallery1 May 2007

  • CVE-2007-2434
    44Planlayın

    Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows remote attackers to cause a denial of service (application crash) or execut

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    aventail · aventail connect2 May 2007

  • CVE-2007-2457
    34İzleyin

    PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows remote attackers to ex

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    pixaria · pixaria gallery2 May 2007

  • CVE-2007-2458
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arbitrary PHP code via

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    pixaria · pixaria gallery2 May 2007

  • CVE-2007-2481
    39İzleyin

    PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when register_globals

    OrtaCVSS 6,8Kavram kanıtıEPSS %40

    ruben boelinger · wordtube3 May 2007

  • CVE-2007-2484
    41Planlayın

    PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_global

    OrtaCVSS 6,8Kavram kanıtıEPSS %45

    ruben boelinger · wp-table3 May 2007

  • CVE-2007-2485
    46Planlayın

    PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allows remote attackers t

    YüksekCVSS 7,5Kavram kanıtıEPSS %54

    ruben boelinger · myflash3 May 2007

  • CVE-2007-2498
    40Planlayın

    libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain .MP4 file.

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    nullsoft · winamp3 May 2007

  • CVE-2007-2239
    41Planlayın

    Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamContro

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    axis · 2100 network camera7 May 2007

  • CVE-2007-0035
    47Planlayın

    Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly h

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · office8 May 2007

  • CVE-2007-0215
    39İzleyin

    Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execut

    YüksekCVSS 7,6İstismar yokEPSS %31

    microsoft · excel8 May 2007

  • CVE-2007-1203
    46Planlayın

    Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote a

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · excel8 May 2007

  • CVE-2007-1214
    36İzleyin

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code

    OrtaCVSS 6,8İstismar yokEPSS %28

    microsoft · excel8 May 2007

  • CVE-2007-0039
    44Planlayın

    The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remot

    YüksekCVSS 7,8İstismar yokEPSS %44

    microsoft · exchange server8 May 2007

  • CVE-2007-0213
    60Bu hafta

    Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote at

    KritikCVSS 10,0Kavram kanıtıEPSS %66

    microsoft · exchange server8 May 2007

  • CVE-2007-0220
    37İzleyin

    Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remo

    OrtaCVSS 6,8İstismar yokEPSS %33

    microsoft · exchange server8 May 2007

  • CVE-2007-0221
    42Planlayın

    Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (ser

    YüksekCVSS 7,8İstismar yokEPSS %37

    microsoft · exchange server8 May 2007

  • CVE-2007-0940
    60Bu hafta

    Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM an

    KritikCVSS 9,3İstismar yokEPSS %75

    microsoft · biztalk server8 May 2007

  • CVE-2007-0942
    47Planlayın

    Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 o

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · windows 20008 May 2007

  • CVE-2007-0944
    48Planlayın

    Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Wi

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · windows 20008 May 2007

  • CVE-2007-0945
    46Planlayın

    Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and 7 on Windows Vista

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · windows 20008 May 2007

  • CVE-2007-0946
    46Planlayın

    Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · windows xp8 May 2007

  • CVE-2007-0947
    47Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows rem

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · windows 2003 server8 May 2007

  • CVE-2007-1202
    36İzleyin

    Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly p

    OrtaCVSS 6,8İstismar yokEPSS %29

    microsoft · word8 May 2007

  • CVE-2007-1747
    46Planlayın

    Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote at

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · office8 May 2007

  • CVE-2007-2221
    47Planlayın

    Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Win

    KritikCVSS 9,3Kavram kanıtıEPSS %34

    microsoft · windows 20008 May 2007

  • CVE-2007-2508
    63Bu hafta

    Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute

    KritikCVSS 10,0SilahlaştırılmışEPSS %77

    trend micro · serverprotect8 May 2007

  • CVE-2007-1669
    35İzleyin

    zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399,

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    barracuda networks · barracuda spam firewall8 May 2007

  • CVE-2007-2545
    51Planlayın

    Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute arbitrary PHP code via

    YüksekCVSS 7,5Kavram kanıtıEPSS %68

    persism cms · persism cms8 May 2007

  • CVE-2007-2581
    28İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoi

    OrtaCVSS 4,3Kavram kanıtıEPSS %36

    microsoft · sharepoint server9 May 2007

  • CVE-2006-7196
    39İzleyin

    Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0

    OrtaCVSS 4,3Kavram kanıtıEPSS %72

    apache · tomcat9 May 2007

  • CVE-2007-1358
    16İzleyin

    Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows rem

    DüşükCVSS 2,6İstismar yokEPSS %19

    apache · tomcat9 May 2007

  • CVE-2007-1858
    15İzleyin

    The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain ins

    DüşükCVSS 2,6Kavram kanıtıEPSS %18

    apache · tomcat9 May 2007

  • CVE-2007-2582
    48Planlayın

    Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute ar

    KritikCVSS 10,0İstismar yokEPSS %26

    ibm · db29 May 2007

  • CVE-2007-2583
    19İzleyin

    The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to ca

    OrtaCVSS 4,0Kavram kanıtıEPSS %11

    oracle · mysql9 May 2007

  • CVE-2007-2586
    41Planlayın

    The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary

    KritikCVSS 9,3Kavram kanıtıEPSS %14

    cisco · ios9 May 2007

  • CVE-2007-2522
    48Planlayın

    Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Ent

    KritikCVSS 10,0İstismar yokEPSS %26

    broadcom · antispyware for the enterprise11 May 2007

  • CVE-2007-2597
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary PHP code via a URL in

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    telltargetcms · telltarget cms11 May 2007

  • CVE-2007-2607
    51Planlayın

    PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary

    YüksekCVSS 7,5Kavram kanıtıEPSS %70

    lavague · lavague11 May 2007

  • CVE-2007-2617
    40Planlayın

    srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when openin

    DüşükCVSS 2,1SilahlaştırılmışEPSS %3

    sun · solaris11 May 2007

  • CVE-2007-2446
    63Bu hafta

    Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary

    KritikCVSS 10,0SilahlaştırılmışEPSS %77

    samba · samba14 May 2007

  • CVE-2007-2447
    40Planlayın

    The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharac

    OrtaCVSS 6,0SilahlaştırılmışEPSS %49

    samba · samba14 May 2007

  • CVE-2007-2645
    41Planlayın

    Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    libexif · libexif14 May 2007

  • CVE-2007-2666
    35İzleyin

    Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted re

    YüksekCVSS 7,6Kavram kanıtıEPSS %15

    scintilla · scintilla14 May 2007

  • CVE-2007-2676
    51Planlayın

    PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitr

    YüksekCVSS 7,5Kavram kanıtıEPSS %70

    open translation engine · open translation engine14 May 2007

  • CVE-2007-2699
    37İzleyin

    The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policie

    YüksekCVSS 7,1İstismar yokEPSS %29

    bea · weblogic server15 May 2007

  • CVE-2007-2707
    47Planlayın

    PHP remote file inclusion vulnerability in linksnet_linkslog_rss.php in Linksnet Newsfeed 1.0 allows remote attackers to execute arbitrary P

    OrtaCVSS 6,8Kavram kanıtıEPSS %68

    linksnet · newsfeed16 May 2007

  • CVE-2007-2708
    49Planlayın

    PHP remote file inclusion vulnerability in newsadmin.php in Feindt Computerservice News (News-Script) 2.0 allows remote attackers to execute

    YüksekCVSS 7,5Kavram kanıtıEPSS %62

    feindt computerservice · news-script16 May 2007

  • CVE-2007-2711
    59Planlayın

    Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long string to TCP port 11

    KritikCVSS 10,0SilahlaştırılmışEPSS %63

    tinyirc · tinyidentd16 May 2007

  • CVE-2007-2714
    43Planlayın

    Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact and attack vectors.

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    matt mullenweg · akismet16 May 2007

  • CVE-2007-2715
    43Planlayın

    Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2)

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    snaps gallery · snaps gallery16 May 2007

  • CVE-2007-2718
    22İzleyin

    Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet E

    OrtaCVSS 4,3Kavram kanıtıEPSS %16

    microsoft · internet explorer16 May 2007

  • CVE-2007-1689
    60Bu hafta

    Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows re

    KritikCVSS 10,0SilahlaştırılmışEPSS %65

    symantec · norton internet security16 May 2007

  • CVE-2007-1355
    34İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.

    OrtaCVSS 4,3Kavram kanıtıEPSS %58

    apache · tomcat21 May 2007

  • CVE-2007-2772
    35İzleyin

    (1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    ca · brightstor arcserve backup21 May 2007

  • CVE-2007-2788
    32İzleyin

    Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b0

    OrtaCVSS 6,8Kavram kanıtıEPSS %18

    sun · jdk21 May 2007

  • CVE-2007-2793
    49Planlayın

    PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a U

    YüksekCVSS 7,5Kavram kanıtıEPSS %64

    geeklog · geeklog21 May 2007

  • CVE-2007-2815
    62Bu hafta

    The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL

    KritikCVSS 10,0Kavram kanıtıEPSS %73

    microsoft · internet information services22 May 2007

  • CVE-2007-2816
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers to execute arbitrary PHP code via a URL in t

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    ol bookmarks · ol bookmarks22 May 2007

  • CVE-2007-2386
    52Planlayın

    Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termi

    KritikCVSS 9,4SilahlaştırılmışEPSS %49

    apple · mac os x24 May 2007

  • CVE-2007-1860
    24İzleyin

    mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the UR

    OrtaCVSS 5,0İstismar yokEPSS %13

    apache · tomcat jk web server connector25 May 2007

  • CVE-2007-2881
    48Planlayın

    Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to

    KritikCVSS 10,0İstismar yokEPSS %25

    sun · java system web proxy server29 May 2007

  • CVE-2007-2884
    48Planlayın

    Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service (CPU con

    KritikCVSS 9,3Kavram kanıtıEPSS %36

    microsoft · visual basic29 May 2007

  • CVE-2007-2888
    46Planlayın

    Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrary code via a long FI

    YüksekCVSS 7,6SilahlaştırılmışEPSS %54

    ezb systems · ultraiso29 May 2007

  • CVE-2007-2897
    52Planlayın

    Microsoft Internet Information Services (IIS) 6.0 allows remote attackers to cause a denial of service (server instability or device hang),

    YüksekCVSS 7,5İstismar yokEPSS %74

    microsoft · internet information server30 May 2007

  • CVE-2007-2903
    29İzleyin

    Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9

    OrtaCVSS 5,0Kavram kanıtıEPSS %28

    microsoft · office30 May 2007

  • CVE-2007-2937
    49Planlayın

    PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary PHP code via a URL i

    YüksekCVSS 7,5Kavram kanıtıEPSS %64

    troforum · troforum30 May 2007

  • CVE-2007-2938
    52Planlayın

    Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6, when Internet Explor

    KritikCVSS 10,0Kavram kanıtıEPSS %40

    honeywell · ademco atnbaseloader100 module30 May 2007

  • CVE-2007-2939
    46Planlayın

    Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL

    OrtaCVSS 6,8Kavram kanıtıEPSS %64

    mazens php chat · mazens php chat30 May 2007

  • CVE-2007-2918
    40Planlayın

    Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) Star

    OrtaCVSS 6,8SilahlaştırılmışEPSS %34

    logitech · videocall31 May 2007

  • CVE-2007-2969
    49Planlayın

    PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to execute arbitrary PHP

    YüksekCVSS 7,5Kavram kanıtıEPSS %61

    wanewsletter · wanewsletter31 May 2007