İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2007: sömürülen ve yeni ciddi CVE kayıtları

55 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-3522
    47Planlayın

    Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the Spe

    OrtaCVSS 6,8Kavram kanıtıEPSS %66

    sphpell · sphpell3 Tem 2007

  • CVE-2007-3524
    46Planlayın

    Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP

    OrtaCVSS 6,8Kavram kanıtıEPSS %64

    ripe website manager · ripe website manager3 Tem 2007

  • CVE-2007-3536
    34İzleyin

    Multiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers to execute arbitrary

    YüksekCVSS 7,6Kavram kanıtıEPSS %13

    amx · netlinx vnc activex control3 Tem 2007

  • CVE-2007-3550
    39İzleyin

    Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain metacharacters such as wi

    YüksekCVSS 7,8İstismar yokEPSS %27

    microsoft · ie3 Tem 2007

  • CVE-2007-3554
    35İzleyin

    Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant Support - Driver Check before 1.5.0.3 allows

    YüksekCVSS 7,6Kavram kanıtıEPSS %17

    hp · instant support4 Tem 2007

  • CVE-2007-3576
    21İzleyin

    Microsoft Internet Explorer 6 executes web script from URIs of arbitrary scheme names ending with the "script" character sequence, using the

    OrtaCVSS 4,3İstismar yokEPSS %12

    microsoft · internet explorer5 Tem 2007

  • CVE-2007-3605
    51Planlayın

    Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remot

    YüksekCVSS 7,6SilahlaştırılmışEPSS %69

    sap · enjoysap6 Tem 2007

  • CVE-2007-3614
    51Planlayın

    Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers

    YüksekCVSS 7,5SilahlaştırılmışEPSS %70

    sap · sap db6 Tem 2007

  • CVE-2007-3624
    51Planlayın

    Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long str

    KritikCVSS 10,0Kavram kanıtıEPSS %36

    sap · sap message server9 Tem 2007

  • CVE-2007-3632
    45Planlayın

    Multiple PHP remote file inclusion vulnerabilities in LimeSurvey (aka PHPSurveyor) 1.49RC2 allow remote attackers to execute arbitrary PHP c

    OrtaCVSS 6,8Kavram kanıtıEPSS %61

    limesurvey · limesurvey9 Tem 2007

  • CVE-2007-3655
    31İzleyin

    Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remot

    OrtaCVSS 6,8Kavram kanıtıEPSS %12

    sun · jre10 Tem 2007

  • CVE-2007-3670
    26İzleyin

    Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered,

    OrtaCVSS 4,3Kavram kanıtıEPSS %29

    microsoft · internet explorer10 Tem 2007

  • CVE-2007-0040
    52Planlayın

    The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2,

    KritikCVSS 10,0İstismar yokEPSS %39

    microsoft · windows 200010 Tem 2007

  • CVE-2007-0041
    46Planlayın

    The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · windows 200010 Tem 2007

  • CVE-2007-0042
    54Planlayın

    Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote

    YüksekCVSS 7,8Kavram kanıtıEPSS %76

    microsoft · windows 200010 Tem 2007

  • CVE-2007-0043
    46Planlayın

    The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows us

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · windows 200010 Tem 2007

  • CVE-2007-1754
    47Planlayın

    PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · publisher10 Tem 2007

  • CVE-2007-1756
    47Planlayın

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which allow

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · excel10 Tem 2007

  • CVE-2007-3028
    32İzleyin

    The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible attribu

    OrtaCVSS 5,0İstismar yokEPSS %39

    microsoft · windows 200010 Tem 2007

  • CVE-2007-3029
    46Planlayın

    Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a mal

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · excel10 Tem 2007

  • CVE-2007-3030
    38İzleyin

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malforme

    YüksekCVSS 7,6İstismar yokEPSS %25

    microsoft · excel10 Tem 2007

  • CVE-2007-3038
    42Planlayın

    The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote

    YüksekCVSS 7,8İstismar yokEPSS %35

    microsoft · windows vista10 Tem 2007

  • CVE-2007-3456
    51Planlayın

    Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value

    KritikCVSS 9,3Kavram kanıtıEPSS %47

    adobe · flash player11 Tem 2007

  • CVE-2007-3697
    34İzleyin

    PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    tufat · flashbb11 Tem 2007

  • CVE-2007-2394
    41Planlayın

    Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    apple · mac os x15 Tem 2007

  • CVE-2007-2417
    45Planlayın

    Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager

    KritikCVSS 10,0İstismar yokEPSS %16

    rsa · securid15 Tem 2007

  • CVE-2007-3780
    24İzleyin

    MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in

    OrtaCVSS 5,0İstismar yokEPSS %14

    mysql · community server15 Tem 2007

  • CVE-2007-3798
    60Bu hafta

    Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via craf

    KritikCVSS 9,8Kavram kanıtıEPSS %70

    tcpdump · tcpdump16 Tem 2007

  • CVE-2007-3806
    30İzleyin

    The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an in

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    php · php16 Tem 2007

  • CVE-2007-3813
    35İzleyin

    PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attackers to execute arbit

    OrtaCVSS 4,3Kavram kanıtıEPSS %59

    mkportal · noboard module16 Tem 2007

  • CVE-2007-3823
    39İzleyin

    The Logging Server (Logsrv.exe) in IPSwitch WS_FTP 7.5.29.0 allows remote attackers to cause a denial of service (daemon crash) by sending a

    YüksekCVSS 7,8İstismar yokEPSS %25

    ipswitch · ws ftp16 Tem 2007

  • CVE-2007-3826
    46Planlayın

    Microsoft Internet Explorer 7 on Windows XP SP2 allows remote attackers to prevent users from leaving a site, spoof the address bar, and con

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · windows xp17 Tem 2007

  • CVE-2007-3832
    41Planlayın

    Buffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execu

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    cerulean studios · trillian17 Tem 2007

  • CVE-2007-3763
    28İzleyin

    The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before be

    OrtaCVSS 5,0Kavram kanıtıEPSS %26

    asterisk · asterisk18 Tem 2007

  • CVE-2007-3764
    29İzleyin

    The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW befor

    OrtaCVSS 5,0Kavram kanıtıEPSS %31

    asterisk · asterisk18 Tem 2007

  • CVE-2007-3855
    31İzleyin

    Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated use

    OrtaCVSS 6,5Kavram kanıtıEPSS %15

    oracle · database server18 Tem 2007

  • CVE-2007-3825
    41Planlayın

    Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Not

    KritikCVSS 9,3İstismar yokEPSS %14

    ca · anti-virus for the enterprise18 Tem 2007

  • CVE-2007-3924
    41Planlayın

    Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer20 Tem 2007

  • CVE-2007-3925
    51Planlayın

    Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to

    OrtaCVSS 6,5SilahlaştırılmışEPSS %84

    ipswitch · imail server20 Tem 2007

  • CVE-2007-3927
    47Planlayın

    Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified

    KritikCVSS 10,0Kavram kanıtıEPSS %21

    ipswitch · imail server20 Tem 2007

  • CVE-2007-3930
    23İzleyin

    Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary Java

    OrtaCVSS 4,3İstismar yokEPSS %19

    microsoft · internet explorer20 Tem 2007

  • CVE-2007-2926
    21İzleyin

    ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sendi

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    isc · bind24 Tem 2007

  • CVE-2007-3958
    35İzleyin

    Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certain GIF file, as demo

    YüksekCVSS 7,1Kavram kanıtıEPSS %22

    microsoft · windows 200024 Tem 2007

  • CVE-2007-0060
    44Planlayın

    Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) softwa

    KritikCVSS 9,3İstismar yokEPSS %23

    ca · etrust admin25 Tem 2007

  • CVE-2007-3302
    40Planlayın

    The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Int

    KritikCVSS 9,3İstismar yokEPSS %10

    ca · etrust intrusion detection25 Tem 2007

  • CVE-2007-4005
    23İzleyin

    Stack-based buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 allows remote attackers to execute arbitrary code via a long string

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    mike dubman · windows rsh daemon25 Tem 2007

  • CVE-2007-4006
    40Planlayın

    Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000034.

    OrtaCVSS 6,8SilahlaştırılmışEPSS %34

    mike dubman · windows rsh daemon25 Tem 2007

  • CVE-2007-3566
    50Planlayın

    Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute a

    YüksekCVSS 7,5SilahlaştırılmışEPSS %66

    borland software · interbase26 Tem 2007

  • CVE-2007-4033
    36İzleyin

    Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute a

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    t1lib · t1lib27 Tem 2007

  • CVE-2007-4034
    41Planlayın

    Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (2007062

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    yahoo · widgets27 Tem 2007

  • CVE-2007-4040
    39İzleyin

    Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers

    YüksekCVSS 8,8İstismar yokEPSS %13

    microsoft · outlook27 Tem 2007

  • CVE-2007-4041
    33İzleyin

    Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via

    OrtaCVSS 6,8İstismar yokEPSS %19

    mozilla · firefox27 Tem 2007

  • CVE-2007-4042
    33İzleyin

    Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%0

    YüksekCVSS 7,5İstismar yokEPSS %10

    netscape · navigator27 Tem 2007

  • CVE-2007-4058
    24İzleyin

    Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    emc · vmware30 Tem 2007

  • CVE-2007-4061
    40Planlayın

    Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or ov

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    nessus · vulnerability scanner30 Tem 2007