İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2007: sömürülen ve yeni ciddi CVE kayıtları

54 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-3997
    34İzleyin

    The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe_mode and open_b

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    php · php4 Eyl 2007

  • CVE-2007-4476
    34İzleyin

    Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    gnu · tar4 Eyl 2007

  • CVE-2007-3999
    43Planlayın

    Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in M

    KritikCVSS 10,0İstismar yokEPSS %10

    mit · kerberos 55 Eyl 2007

  • CVE-2007-4712
    47Planlayın

    PHP remote file inclusion vulnerability in index.php in eNetman 1 allows remote attackers to execute arbitrary PHP code via a URL in the pag

    YüksekCVSS 7,5Kavram kanıtıEPSS %57

    enetman · enetman5 Eyl 2007

  • CVE-2007-4722
    30İzleyin

    Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Mov

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    move networks inc · move media player5 Eyl 2007

  • CVE-2007-4738
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    speedtech · stphplibrary6 Eyl 2007

  • CVE-2007-4744
    45Planlayın

    PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when register_globals is enabled, allows remote at

    OrtaCVSS 6,8Kavram kanıtıEPSS %60

    anyinventory · anyinventory6 Eyl 2007

  • CVE-2007-4757
    49Planlayın

    PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP code via a URL in the f

    YüksekCVSS 7,5Kavram kanıtıEPSS %64

    phpmytourney · phpmytourney8 Eyl 2007

  • CVE-2007-4776
    52Planlayın

    Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code

    KritikCVSS 9,3SilahlaştırılmışEPSS %48

    microsoft · visual basic10 Eyl 2007

  • CVE-2007-4790
    46Planlayın

    Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the Microsoft Visual Fox

    YüksekCVSS 7,5Kavram kanıtıEPSS %54

    microsoft · internet explorer10 Eyl 2007

  • CVE-2007-4809
    47Planlayın

    Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %56

    online fantasy football league · offl11 Eyl 2007

  • CVE-2007-4814
    44Planlayın

    Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQ

    YüksekCVSS 7,5Kavram kanıtıEPSS %45

    microsoft · sql server11 Eyl 2007

  • CVE-2007-4815
    39İzleyin

    Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrar

    OrtaCVSS 6,8Kavram kanıtıEPSS %39

    markus iser · ed engine11 Eyl 2007

  • CVE-2007-4818
    47Planlayın

    Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc_

    YüksekCVSS 7,5Kavram kanıtıEPSS %55

    txx cms · txx cms11 Eyl 2007

  • CVE-2007-3040
    53Planlayın

    Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary c

    KritikCVSS 9,3Kavram kanıtıEPSS %54

    microsoft · windows 200011 Eyl 2007

  • CVE-2007-4727
    31İzleyin

    Buffer overflow in the fcgi_env_add function in mod_proxy_backend_fastcgi.c in the mod_fastcgi extension in lighttpd before 1.4.18 allows re

    OrtaCVSS 6,8İstismar yokEPSS %12

    lighttpd · lighttpd12 Eyl 2007

  • CVE-2007-4834
    48Planlayın

    Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the M

    YüksekCVSS 7,5Kavram kanıtıEPSS %58

    phprealty · phprealty12 Eyl 2007

  • CVE-2007-4465
    32İzleyin

    Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated p

    OrtaCVSS 6,1İstismar yokEPSS %26

    apache · http server13 Eyl 2007

  • CVE-2007-4890
    28İzleyin

    Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft

    OrtaCVSS 5,8Kavram kanıtıEPSS %16

    microsoft · visual studio13 Eyl 2007

  • CVE-2007-4891
    36İzleyin

    A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) Sync

    OrtaCVSS 6,8Kavram kanıtıEPSS %31

    microsoft · visual studio13 Eyl 2007

  • CVE-2007-4897
    23İzleyin

    pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a lo

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    ekiga · ekiga14 Eyl 2007

  • CVE-2007-4906
    39İzleyin

    PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is enabled, allows remot

    OrtaCVSS 6,8Kavram kanıtıEPSS %38

    nuclearbb · nuclearbb17 Eyl 2007

  • CVE-2007-4915
    60Bu hafta

    The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from ente

    KritikCVSS 10,0SilahlaştırılmışEPSS %68

    boa · boa webserver17 Eyl 2007

  • CVE-2007-4916
    46Planlayın

    Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    hp · photo and imaging gallery17 Eyl 2007

  • CVE-2007-4921
    46Planlayın

    PHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitra

    YüksekCVSS 7,5Kavram kanıtıEPSS %52

    ajax · file browser17 Eyl 2007

  • CVE-2007-4923
    39İzleyin

    PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component for Joomla! allows re

    OrtaCVSS 6,8Kavram kanıtıEPSS %41

    joomla · joomla radio17 Eyl 2007

  • CVE-2007-4934
    25İzleyin

    Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPF

    OrtaCVSS 4,6Kavram kanıtıEPSS %21

    phpffl · phpffl18 Eyl 2007

  • CVE-2007-4938
    35İzleyin

    Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (app

    YüksekCVSS 7,6Kavram kanıtıEPSS %16

    ibm · aix18 Eyl 2007

  • CVE-2007-4939
    41Planlayın

    Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm)

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    mympc · cd-storm18 Eyl 2007

  • CVE-2007-4954
    36İzleyin

    PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla! allows remote atta

    OrtaCVSS 6,8Kavram kanıtıEPSS %28

    joomla · joom12pic component18 Eyl 2007

  • CVE-2007-4955
    36İzleyin

    PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 component for Joomla! allows

    OrtaCVSS 6,8Kavram kanıtıEPSS %29

    joomla · flash fun component18 Eyl 2007

  • CVE-2007-2834
    41Planlayın

    Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remo

    KritikCVSS 9,3İstismar yokEPSS %11

    sun · staroffice18 Eyl 2007

  • CVE-2007-3010
    98Hemen

    masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to exe

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    al-enterprise · omnipcx enterprise communication server18 Eyl 2007

  • CVE-2007-4965
    27İzleyin

    Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service

    OrtaCVSS 5,8Kavram kanıtıEPSS %13

    python · python18 Eyl 2007

  • CVE-2007-4982
    43Planlayın

    Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Technologies QRCode Activ

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    mw6 technologies · qrcode activex19 Eyl 2007

  • CVE-2007-4983
    54Planlayın

    Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows

    KritikCVSS 10,0Kavram kanıtıEPSS %47

    cowon america · jetaudio19 Eyl 2007

  • CVE-2007-5009
    41Planlayın

    PHP remote file inclusion vulnerability in language/lang_german/lang_main_album.php in phpBB Plus 1.53, and 1.53a before 20070922, allows re

    OrtaCVSS 6,8Kavram kanıtıEPSS %45

    phpbb2 · phpbb2 plus20 Eyl 2007

  • CVE-2007-5015
    39İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to execute arbitrary PHP

    OrtaCVSS 6,8Kavram kanıtıEPSS %38

    streamline · streamline20 Eyl 2007

  • CVE-2007-5019
    43Planlayın

    Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unkno

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    sun · java web start20 Eyl 2007

  • CVE-2007-5020
    43Planlayın

    Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF fil

    KritikCVSS 9,3İstismar yokEPSS %20

    adobe · acrobat21 Eyl 2007

  • CVE-2007-0063
    46Planlayın

    Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.

    KritikCVSS 10,0İstismar yokEPSS %20

    vmware · ace21 Eyl 2007

  • CVE-2007-4991
    25İzleyin

    The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially

    OrtaCVSS 5,0İstismar yokEPSS %16

    microsoft · isa server21 Eyl 2007

  • CVE-2007-5054
    43Planlayın

    Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via

    YüksekCVSS 7,5Kavram kanıtıEPSS %42

    izicontents · izicontents24 Eyl 2007

  • CVE-2007-5056
    35İzleyin

    Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAP

    OrtaCVSS 6,8Kavram kanıtıEPSS %27

    adodb lite · adodb lite24 Eyl 2007

  • CVE-2007-5065
    43Planlayın

    PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for Joomla! allows remote

    YüksekCVSS 7,5Kavram kanıtıEPSS %42

    joomla · joomla24 Eyl 2007

  • CVE-2007-5067
    52Planlayın

    Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since he

    YüksekCVSS 7,5SilahlaştırılmışEPSS %73

    imatix · xitami24 Eyl 2007

  • CVE-2007-5095
    35İzleyin

    Microsoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML documents contained inside some media file

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · windows xp26 Eyl 2007

  • CVE-2007-5098
    41Planlayın

    Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when register_globals is enabled, allow remote attackers t

    OrtaCVSS 6,8Kavram kanıtıEPSS %45

    dragonfrugal · dfd cart26 Eyl 2007

  • CVE-2007-5099
    46Planlayın

    PHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote attackers to execute arbitrary PHP code vi

    YüksekCVSS 7,5Kavram kanıtıEPSS %52

    david watters · helplink26 Eyl 2007

  • CVE-2007-5102
    39İzleyin

    PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remote attackers to

    OrtaCVSS 6,8Kavram kanıtıEPSS %38

    wordsmith · wordsmith26 Eyl 2007

  • CVE-2007-5107
    48Planlayın

    Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media ask.com Ask Toolbar

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    ask.com · ask toolbar26 Eyl 2007

  • CVE-2007-5133
    35İzleyin

    Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain

    YüksekCVSS 7,1Kavram kanıtıEPSS %22

    microsoft · windows 2003 server27 Eyl 2007

  • CVE-2007-5135
    32İzleyin

    Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers

    OrtaCVSS 6,8İstismar yokEPSS %16

    openssl · openssl27 Eyl 2007

  • CVE-2007-4880
    63Bu hafta

    Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2

    KritikCVSS 10,0SilahlaştırılmışEPSS %75

    ibm · tivoli storage manager client27 Eyl 2007