İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2007: sömürülen ve yeni ciddi CVE kayıtları

73 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-2986
    49Planlayın

    PHP remote file inclusion vulnerability in lib/live_status.lib.php in AdminBot MX 9.0.5 allows remote attackers to execute arbitrary PHP cod

    YüksekCVSS 7,5Kavram kanıtıEPSS %64

    nexen · adminbot mx1 Haz 2007

  • CVE-2007-2987
    47Planlayın

    Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary co

    KritikCVSS 9,3SilahlaştırılmışEPSS %33

    zenturi · zenturi programchecker1 Haz 2007

  • CVE-2007-0933
    39İzleyin

    Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ (Rev.

    YüksekCVSS 7,8İstismar yokEPSS %27

    d-link · dwl-g650\+5 Haz 2007

  • CVE-2007-3045
    20İzleyin

    Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended on HI-UX/WE2 before 20070213, and on HP-UX before 20070314, allows remote attac

    OrtaCVSS 5,0İstismar yokEPSS %1

    hitachi · hi ux we25 Haz 2007

  • CVE-2007-3057
    48Planlayın

    PHP remote file inclusion vulnerability in include/wysiwyg/spaw_control.class.php in the icontent 4.5 module for XOOPS allows remote attacke

    OrtaCVSS 6,8Kavram kanıtıEPSS %68

    xoops · icontent module5 Haz 2007

  • CVE-2007-3068
    40Planlayın

    Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF playlist containing

    OrtaCVSS 6,8SilahlaştırılmışEPSS %32

    dvd x studios · dvd x player5 Haz 2007

  • CVE-2007-0067
    35İzleyin

    Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a

    YüksekCVSS 7,8İstismar yokEPSS %13

    ibm · lotus domino web server6 Haz 2007

  • CVE-2007-3075
    36İzleyin

    Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via directory traversal seq

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · internet explorer6 Haz 2007

  • CVE-2007-2237
    27İzleyin

    Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via

    OrtaCVSS 5,5Kavram kanıtıEPSS %15

    microsoft · windows xp6 Haz 2007

  • CVE-2007-2863
    47Planlayın

    Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allow

    KritikCVSS 10,0İstismar yokEPSS %23

    ca · anti-virus for the enterprise6 Haz 2007

  • CVE-2007-2864
    52Planlayın

    Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allow

    KritikCVSS 9,3SilahlaştırılmışEPSS %49

    ca · etrust secure content manager6 Haz 2007

  • CVE-2007-3091
    36İzleyin

    Race condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1,

    YüksekCVSS 7,1İstismar yokEPSS %27

    microsoft · windows 2003 server6 Haz 2007

  • CVE-2007-3092
    43Planlayın

    Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer6 Haz 2007

  • CVE-2007-2919
    47Planlayın

    Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipViewer before 4.1 allow

    KritikCVSS 9,3SilahlaştırılmışEPSS %33

    e-book systems · flipviewer6 Haz 2007

  • CVE-2007-3109
    28İzleyin

    The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial

    OrtaCVSS 6,4İstismar yokEPSS %10

    microsoft · frontpage7 Haz 2007

  • CVE-2007-3111
    53Planlayın

    Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used on Windows 2000 SP4,

    KritikCVSS 10,0Kavram kanıtıEPSS %44

    provideo · camimage activex control7 Haz 2007

  • CVE-2007-1685
    44Planlayın

    Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    bluecoat · k9 web protection8 Haz 2007

  • CVE-2007-3147
    49Planlayın

    Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to

    KritikCVSS 9,3SilahlaştırılmışEPSS %40

    yahoo · messenger11 Haz 2007

  • CVE-2007-3148
    41Planlayın

    Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    yahoo · messenger11 Haz 2007

  • CVE-2007-3169
    41Planlayın

    Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions befor

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    edraw · office viewer component11 Haz 2007

  • CVE-2007-3175
    35İzleyin

    Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via (1) the draft para

    YüksekCVSS 7,5İstismar yokEPSS %16

    w2b · online banking11 Haz 2007

  • CVE-2007-0218
    46Planlayın

    Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dl

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · windows 200012 Haz 2007

  • CVE-2007-0934
    46Planlayın

    Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .V

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · visio12 Haz 2007

  • CVE-2007-0936
    46Planlayın

    Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio (.VS

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · office12 Haz 2007

  • CVE-2007-1750
    46Planlayın

    Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via a crafted Cascading Style S

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · windows 200012 Haz 2007

  • CVE-2007-1751
    55Planlayın

    Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an unini

    KritikCVSS 9,3İstismar yokEPSS %60

    microsoft · internet explorer12 Haz 2007

  • CVE-2007-2218
    41Planlayın

    Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allo

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · windows 200012 Haz 2007

  • CVE-2007-2222
    53Planlayın

    Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Inter

    KritikCVSS 9,3Kavram kanıtıEPSS %54

    microsoft · windows 200012 Haz 2007

  • CVE-2007-3027
    47Planlayın

    Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer

    KritikCVSS 9,3İstismar yokEPSS %34

    microsoft · windows 200012 Haz 2007

  • CVE-2007-2219
    47Planlayın

    Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · windows 200012 Haz 2007

  • CVE-2007-2225
    25İzleyin

    A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing M

    OrtaCVSS 4,3İstismar yokEPSS %25

    microsoft · windows 2003 server12 Haz 2007

  • CVE-2007-2227
    25İzleyin

    The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "no

    OrtaCVSS 4,3İstismar yokEPSS %25

    microsoft · windows 2003 server12 Haz 2007

  • CVE-2007-3181
    44Planlayın

    Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count va

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    bakbone · netvault12 Haz 2007

  • CVE-2007-3216
    58Planlayın

    Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 al

    KritikCVSS 10,0SilahlaştırılmışEPSS %59

    broadcom · brightstor arcserve backup laptops desktops14 Haz 2007

  • CVE-2007-3217
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to execute arbitrary PHP co

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    prototype of an php application · prototype of an php application14 Haz 2007

  • CVE-2007-2449
    40Planlayın

    Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.

    OrtaCVSS 4,3Kavram kanıtıEPSS %77

    apache · tomcat14 Haz 2007

  • CVE-2007-3220
    46Planlayın

    PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS allows remote attacke

    OrtaCVSS 6,8Kavram kanıtıEPSS %62

    xoops · cjay content module14 Haz 2007

  • CVE-2007-3221
    47Planlayın

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows remote attackers to

    OrtaCVSS 6,8Kavram kanıtıEPSS %67

    xoops · xt-conteudo module14 Haz 2007

  • CVE-2007-3228
    47Planlayın

    PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier

    OrtaCVSS 6,8Kavram kanıtıEPSS %67

    simian systems inc · sitellite cms14 Haz 2007

  • CVE-2007-3230
    47Planlayın

    PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute arbitrary PHP code v

    OrtaCVSS 6,8Kavram kanıtıEPSS %67

    simian systems inc · sitellite14 Haz 2007

  • CVE-2007-3236
    53Planlayın

    PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to execute arbitrary PHP

    YüksekCVSS 7,5Kavram kanıtıEPSS %76

    xoops · horoscope module14 Haz 2007

  • CVE-2007-3237
    47Planlayın

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS allows remote attackers

    OrtaCVSS 6,8Kavram kanıtıEPSS %67

    xoops · tinycontent module14 Haz 2007

  • CVE-2007-3101
    30İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attacke

    OrtaCVSS 4,3Kavram kanıtıEPSS %44

    apache · myfaces tomahawk18 Haz 2007

  • CVE-2007-3280
    44Planlayın

    The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the

    KritikCVSS 9,0SilahlaştırılmışEPSS %25

    postgresql · postgresql19 Haz 2007

  • CVE-2007-3282
    44Planlayın

    Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial of service (crash) and

    YüksekCVSS 7,8Kavram kanıtıEPSS %42

    microsoft · office19 Haz 2007

  • CVE-2007-3289
    34İzleyin

    PHP remote file inclusion vulnerability in spaw/spaw_control.class.php in the WiwiMod 0.4 module for XOOPS allows remote attackers to execut

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    xoops · wiwimod module20 Haz 2007

  • CVE-2007-3306
    49Planlayın

    PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute arbitrary PHP code v

    YüksekCVSS 7,5Kavram kanıtıEPSS %64

    ultrize · minibill20 Haz 2007

  • CVE-2007-3314
    40Planlayın

    Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 wi

    OrtaCVSS 6,8SilahlaştırılmışEPSS %43

    altap · portable executable viewer21 Haz 2007

  • CVE-2007-3316
    42Planlayın

    Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of ser

    KritikCVSS 9,3İstismar yokEPSS %17

    videolan · vlc media player21 Haz 2007

  • CVE-2007-3325
    49Planlayın

    PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows remote attackers to exec

    YüksekCVSS 7,5Kavram kanıtıEPSS %64

    lms · lan management system21 Haz 2007

  • CVE-2007-3334
    43Planlayın

    Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingr

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    ca · etrust secure content manager21 Haz 2007

  • CVE-2007-3341
    43Planlayın

    Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a valid memory address" v

    KritikCVSS 10,0İstismar yokEPSS %10

    microsoft · all windows21 Haz 2007

  • CVE-2006-7206
    38İzleyin

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating a ADODB.Recordset o

    YüksekCVSS 7,8Kavram kanıtıEPSS %22

    microsoft · windows xp21 Haz 2007

  • CVE-2007-3358
    47Planlayın

    PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to execute arbitrary PHP c

    OrtaCVSS 6,8Kavram kanıtıEPSS %68

    iptel · serweb22 Haz 2007

  • CVE-2007-3370
    52Planlayın

    Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL

    YüksekCVSS 7,5Kavram kanıtıEPSS %74

    kim kyoung min · sun board22 Haz 2007

  • CVE-2007-3371
    51Planlayın

    PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to execute arbitrary P

    YüksekCVSS 7,5Kavram kanıtıEPSS %71

    powl · powl22 Haz 2007

  • CVE-2007-3389
    40Planlayın

    Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, pos

    OrtaCVSS 5,0SilahlaştırılmışEPSS %16

    wireshark · wireshark25 Haz 2007

  • CVE-2007-3401
    52Planlayın

    PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrary PHP code via a URL

    YüksekCVSS 7,5Kavram kanıtıEPSS %73

    b1g · b1gbb26 Haz 2007

  • CVE-2007-3406
    20İzleyin

    Multiple absolute path traversal vulnerabilities in Microsoft Internet Explorer 6 on Windows XP SP2 allow remote attackers to access arbitra

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    microsoft · windows xp26 Haz 2007

  • CVE-2007-2442
    43Planlayın

    The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute ar

    KritikCVSS 10,0İstismar yokEPSS %11

    mit · kerberos 526 Haz 2007

  • CVE-2007-3410
    48Planlayın

    Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and po

    KritikCVSS 9,3Kavram kanıtıEPSS %36

    realnetworks · helix player26 Haz 2007

  • CVE-2007-3431
    48Planlayın

    PHP remote file inclusion vulnerability in cal.func.php in Valerio Capello Dagger - The Cutting Edge r23jan2007 allows remote attackers to e

    OrtaCVSS 6,8Kavram kanıtıEPSS %70

    valerio capello · dagger - the cutting edge26 Haz 2007

  • CVE-2007-3435
    48Planlayın

    Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) BarCodeAx.dll 4.9 allow

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    rkd software · barcode activex26 Haz 2007

  • CVE-2007-3436
    24İzleyin

    Microsoft MSN Messenger 4.7 on Windows XP allows remote attackers to cause a denial of service (resource consumption) via a flood of SIP INV

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · windows xp26 Haz 2007

  • CVE-2007-3455
    41Planlayın

    cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the password requirem

    KritikCVSS 10,0İstismar yokEPSS %2

    trend micro · officescan26 Haz 2007

  • CVE-2006-5752
    25İzleyin

    Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enab

    OrtaCVSS 4,3İstismar yokEPSS %27

    apache · http server27 Haz 2007

  • CVE-2006-7210
    28İzleyin

    Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a PNG image with craf

    OrtaCVSS 5,0Kavram kanıtıEPSS %25

    microsoft · windows 200027 Haz 2007

  • CVE-2007-1863
    24İzleyin

    cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is

    OrtaCVSS 5,0İstismar yokEPSS %11

    apache · http server27 Haz 2007

  • CVE-2007-3473
    21İzleyin

    The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of se

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    libgd · gd graphics library28 Haz 2007

  • CVE-2007-3481
    25İzleyin

    Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to bypass the Same Origin Policy and access restri

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · internet explorer28 Haz 2007

  • CVE-2007-3488
    45Planlayın

    Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    sony · sony network camera snc-p529 Haz 2007

  • CVE-2007-3490
    41Planlayın

    Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly re

    YüksekCVSS 7,5Kavram kanıtıEPSS %36

    microsoft · excel29 Haz 2007

  • CVE-2007-3493
    39İzleyin

    A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably o

    YüksekCVSS 7,5Kavram kanıtıEPSS %31

    microsoft · windows xp29 Haz 2007