İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2007: sömürülen ve yeni ciddi CVE kayıtları

55 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-2927
    28İzleyin

    Unspecified vulnerability in Atheros 802.11 a/b/g wireless adapter drivers before 5.3.0.35, and 6.x before 6.0.3.67, on Windows allows remot

    OrtaCVSS 5,0İstismar yokEPSS %25

    atheros · wireless adapter drivers7 Ağu 2007

  • CVE-2007-4187
    33İzleyin

    Multiple eval injection vulnerabilities in the com_search component in Joomla! 1.5 beta before RC1 (aka Mapya) allow remote attackers to exe

    YüksekCVSS 7,5İstismar yokEPSS %11

    joomla · joomla7 Ağu 2007

  • CVE-2007-4227
    21İzleyin

    Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certain JPG file, as demo

    OrtaCVSS 4,3İstismar yokEPSS %13

    microsoft · internet explorer8 Ağu 2007

  • CVE-2007-4232
    42Planlayın

    PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote attackers to execute ar

    OrtaCVSS 6,8Kavram kanıtıEPSS %51

    andreas robertz · phpnews8 Ağu 2007

  • CVE-2007-4241
    43Planlayın

    Buffer overflow in ldcconn in Hewlett-Packard (HP) Controller for Cisco Local Director on HP-UX 11.11i allows remote attackers to execute ar

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · hp-ux8 Ağu 2007

  • CVE-2007-4247
    21İzleyin

    Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service (NULL dereference and persistent applicatio

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · windows vista8 Ağu 2007

  • CVE-2007-4254
    30İzleyin

    Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    microsoft · visual database tools database designer8 Ağu 2007

  • CVE-2007-3872
    40Planlayın

    Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and poss

    OrtaCVSS 6,8SilahlaştırılmışEPSS %30

    hp · openview operations9 Ağu 2007

  • CVE-2007-4279
    53Planlayın

    PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code

    YüksekCVSS 7,5Kavram kanıtıEPSS %75

    frontaccounting · frontaccounting9 Ağu 2007

  • CVE-2007-4286
    43Planlayın

    Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a d

    KritikCVSS 9,3Kavram kanıtıEPSS %19

    cisco · ios9 Ağu 2007

  • CVE-2007-4288
    21İzleyin

    Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (application crash) via

    OrtaCVSS 4,3Kavram kanıtıEPSS %14

    microsoft · windows media player9 Ağu 2007

  • CVE-2007-4313
    48Planlayın

    PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers

    OrtaCVSS 6,8Kavram kanıtıEPSS %68

    php blue dragon · php blue dragon cms13 Ağu 2007

  • CVE-2007-4320
    52Planlayın

    PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to execute arbitrary PH

    YüksekCVSS 7,5Kavram kanıtıEPSS %72

    ncaster · ncaster13 Ağu 2007

  • CVE-2007-4336
    32İzleyin

    Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6

    OrtaCVSS 4,3Kavram kanıtıEPSS %50

    microsoft · directx media14 Ağu 2007

  • CVE-2007-0943
    35İzleyin

    Unspecified vulnerability in Internet Explorer 5.01 and 6 SP1 allows remote attackers to execute arbitrary code via crafted Cascading Style

    OrtaCVSS 6,8İstismar yokEPSS %27

    microsoft · ie14 Ağu 2007

  • CVE-2007-2216
    49Planlayın

    The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation,

    KritikCVSS 9,3Kavram kanıtıEPSS %41

    microsoft · internet explorer14 Ağu 2007

  • CVE-2007-2223
    52Planlayın

    Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1)

    KritikCVSS 9,3Kavram kanıtıEPSS %48

    microsoft · xml core services14 Ağu 2007

  • CVE-2007-2224
    47Planlayın

    Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac,

    KritikCVSS 9,3İstismar yokEPSS %34

    microsoft · windows 200014 Ağu 2007

  • CVE-2007-3034
    53Planlayın

    Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1

    KritikCVSS 9,3Kavram kanıtıEPSS %51

    microsoft · windows 200014 Ağu 2007

  • CVE-2007-3035
    38İzleyin

    Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin

    YüksekCVSS 7,6İstismar yokEPSS %25

    microsoft · windows media player14 Ağu 2007

  • CVE-2007-3037
    23İzleyin

    Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafte

    OrtaCVSS 4,0İstismar yokEPSS %21

    microsoft · windows media player14 Ağu 2007

  • CVE-2007-3041
    46Planlayın

    Unspecified vulnerability in the pdwizard.ocx ActiveX object for Internet Explorer 5.01, 6 SP1, and 7 allows remote attackers to execute arb

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · internet explorer14 Ağu 2007

  • CVE-2007-3890
    46Planlayın

    Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary cod

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · excel14 Ağu 2007

  • CVE-2007-0948
    41Planlayın

    Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · virtual pc14 Ağu 2007

  • CVE-2007-1749
    49Planlayın

    Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01

    KritikCVSS 9,3Kavram kanıtıEPSS %41

    microsoft · internet explorer14 Ağu 2007

  • CVE-2007-3032
    35İzleyin

    Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code

    OrtaCVSS 6,8İstismar yokEPSS %25

    microsoft · windows vista14 Ağu 2007

  • CVE-2007-3033
    26İzleyin

    Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-

    OrtaCVSS 4,3İstismar yokEPSS %28

    microsoft · windows vista14 Ağu 2007

  • CVE-2007-3382
    28İzleyin

    Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters

    OrtaCVSS 4,3Kavram kanıtıEPSS %37

    apache · tomcat14 Ağu 2007

  • CVE-2007-3385
    22İzleyin

    Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character

    OrtaCVSS 4,3İstismar yokEPSS %16

    apache · tomcat14 Ağu 2007

  • CVE-2007-3386
    35İzleyin

    Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote att

    OrtaCVSS 4,3Kavram kanıtıEPSS %58

    apache · tomcat14 Ağu 2007

  • CVE-2007-3891
    35İzleyin

    Unspecified vulnerability in Windows Vista Weather Gadgets in Windows Vista allows remote attackers to execute arbitrary code via crafted HT

    OrtaCVSS 6,8İstismar yokEPSS %25

    microsoft · windows vista14 Ağu 2007

  • CVE-2007-4370
    48Planlayın

    Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbitrary code via a long

    YüksekCVSS 7,5SilahlaştırılmışEPSS %59

    racer · racer15 Ağu 2007

  • CVE-2007-4387
    40Planlayın

    Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows

    OrtaCVSS 4,3SilahlaştırılmışEPSS %9

    2wire · 1701hg router17 Ağu 2007

  • CVE-2007-4430
    24İzleyin

    Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    cisco · cli20 Ağu 2007

  • CVE-2007-4440
    49Planlayın

    Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers

    YüksekCVSS 7,5SilahlaştırılmışEPSS %64

    pmail · mercury mail transport system20 Ağu 2007

  • CVE-2007-4459
    32İzleyin

    Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of

    YüksekCVSS 7,1Kavram kanıtıEPSS %13

    cisco · voip phone cp-794021 Ağu 2007

  • CVE-2007-4218
    44Planlayın

    Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 a

    KritikCVSS 10,0İstismar yokEPSS %13

    trend micro · serverprotect22 Ağu 2007

  • CVE-2007-4219
    43Planlayın

    Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the ServerProtect service (SpntSvc.exe), in Trend Micro ServerP

    KritikCVSS 10,0İstismar yokEPSS %10

    trend micro · serverprotect22 Ağu 2007

  • CVE-2007-4478
    20İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · internet explorer22 Ağu 2007

  • CVE-2007-4498
    35İzleyin

    The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call com

    YüksekCVSS 7,8Kavram kanıtıEPSS %13

    grandstream · sip phone23 Ağu 2007

  • CVE-2007-3847
    24İzleyin

    The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to

    OrtaCVSS 5,0İstismar yokEPSS %12

    apache · http server23 Ağu 2007

  • CVE-2007-4534
    33İzleyin

    Buffer overflow in the VThinker::BroadcastPrintf function in p_thinker.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arb

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    vavoom · vavoom24 Ağu 2007

  • CVE-2007-4556
    35İzleyin

    Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all inp

    OrtaCVSS 6,8Kavram kanıtıEPSS %25

    opensymphony · xwork27 Ağu 2007

  • CVE-2007-4559
    47Planlayın

    Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remot

    KritikCVSS 9,8Kavram kanıtıEPSS %27

    python · python27 Ağu 2007

  • CVE-2007-4560
    55Planlayın

    clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metachar

    YüksekCVSS 7,6SilahlaştırılmışEPSS %83

    clam anti-virus · clamav27 Ağu 2007

  • CVE-2007-4566
    45Planlayın

    Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attack

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    alpha centauri software · sidvault ldap server27 Ağu 2007

  • CVE-2007-4584
    44Planlayın

    Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, rel

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    bitchx · bitchx28 Ağu 2007

  • CVE-2007-4467
    43Planlayın

    Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms app

    KritikCVSS 9,3İstismar yokEPSS %21

    oracle · jinitiator30 Ağu 2007

  • CVE-2007-4607
    54Planlayın

    Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server

    KritikCVSS 9,3SilahlaştırılmışEPSS %56

    gate comm software · postcast server pro30 Ağu 2007

  • CVE-2007-2931
    54Planlayın

    Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to exe

    KritikCVSS 9,3Kavram kanıtıEPSS %55

    microsoft · msn messenger31 Ağu 2007

  • CVE-2007-2954
    47Planlayın

    Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote at

    KritikCVSS 10,0İstismar yokEPSS %23

    novell · client31 Ağu 2007

  • CVE-2007-4515
    47Planlayın

    Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1

    KritikCVSS 9,3SilahlaştırılmışEPSS %33

    yahoo · messenger31 Ağu 2007

  • CVE-2007-4636
    51Planlayın

    Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the root

    YüksekCVSS 7,5Kavram kanıtıEPSS %71

    phpbg · phpbg31 Ağu 2007

  • CVE-2007-4642
    45Planlayın

    Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary code via a long chat

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    doomsday · doomsday31 Ağu 2007

  • CVE-2007-4646
    45Planlayın

    Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) an

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    hexamail · hexamail server31 Ağu 2007