İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2007: sömürülen ve yeni ciddi CVE kayıtları

64 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-5144
    22İzleyin

    Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to caus

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · windows live messenger1 Eki 2007

  • CVE-2007-5145
    21İzleyin

    Multiple buffer overflows in system DLL files in Microsoft Windows XP, as used by Microsoft Windows Explorer (explorer.exe) 6.00.2900.2180,

    OrtaCVSS 4,3İstismar yokEPSS %12

    microsoft · windows xp1 Eki 2007

  • CVE-2007-5158
    22İzleyin

    The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystro

    OrtaCVSS 4,3Kavram kanıtıEPSS %15

    microsoft · internet explorer1 Eki 2007

  • CVE-2007-5003
    60Bu hafta

    Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 al

    KritikCVSS 10,0SilahlaştırılmışEPSS %67

    ca · protection suites1 Eki 2007

  • CVE-2007-5006
    46Planlayın

    Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify

    KritikCVSS 10,0İstismar yokEPSS %21

    ca · protection suites1 Eki 2007

  • CVE-2007-5082
    59Planlayın

    Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote at

    KritikCVSS 10,0SilahlaştırılmışEPSS %63

    broadcom · brightstor hierarchical storage manager1 Eki 2007

  • CVE-2007-5083
    46Planlayın

    Multiple integer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to

    KritikCVSS 10,0İstismar yokEPSS %18

    broadcom · brightstor hierarchical storage manager1 Eki 2007

  • CVE-2007-5184
    34İzleyin

    Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via fo

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    smbftpd · smbftpd3 Eki 2007

  • CVE-2007-5185
    40Planlayın

    Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code

    OrtaCVSS 6,8Kavram kanıtıEPSS %42

    phpwcms-xt · phpwcms-xt3 Eki 2007

  • CVE-2007-5186
    41Planlayın

    PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled, allows remote attack

    OrtaCVSS 6,8Kavram kanıtıEPSS %46

    segue cms · segue cms3 Eki 2007

  • CVE-2007-5217
    40Planlayın

    Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) Kazaa 3.2.7 and (2) G

    OrtaCVSS 6,8SilahlaştırılmışEPSS %29

    altnet · altnet download manager4 Eki 2007

  • CVE-2007-5219
    30İzleyin

    Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in C

    OrtaCVSS 6,4Kavram kanıtıEPSS %15

    cyberlink · powerdvd4 Eki 2007

  • CVE-2007-4990
    33İzleyin

    The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) Quer

    YüksekCVSS 7,5İstismar yokEPSS %10

    x.org · x font server5 Eki 2007

  • CVE-2007-5234
    43Planlayın

    PHP remote file inclusion vulnerability in upload/common/footer.php in Ossigeno CMS 2.2 alpha3 allows remote attackers to execute arbitrary

    YüksekCVSS 7,5Kavram kanıtıEPSS %42

    ossigeno · ossigeno5 Eki 2007

  • CVE-2007-5243
    49Planlayın

    Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote a

    KritikCVSS 9,3SilahlaştırılmışEPSS %40

    borland software · interbase6 Eki 2007

  • CVE-2007-5244
    48Planlayın

    Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allow

    KritikCVSS 9,3SilahlaştırılmışEPSS %37

    borland software · interbase6 Eki 2007

  • CVE-2007-5257
    45Planlayın

    Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Component 5.3.220.1 and ear

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    edraw · office viewer component6 Eki 2007

  • CVE-2007-4924
    23İzleyin

    The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to caus

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    ekiga · ekiga8 Eki 2007

  • CVE-2007-5271
    36İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to execute arbitrary PHP

    OrtaCVSS 6,8Kavram kanıtıEPSS %28

    trionic · cite cms8 Eki 2007

  • CVE-2007-5301
    30İzleyin

    Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in AlsaPlayer before 0.99.8

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    alsaplayer · alsaplayer9 Eki 2007

  • CVE-2007-5315
    39İzleyin

    PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remote attackers to execu

    OrtaCVSS 6,8Kavram kanıtıEPSS %38

    softpedia · livealbum9 Eki 2007

  • CVE-2007-2217
    49Planlayın

    Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute a

    KritikCVSS 9,3Kavram kanıtıEPSS %41

    microsoft · windows 20009 Eki 2007

  • CVE-2007-2228
    44Planlayın

    rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64

    YüksekCVSS 7,8İstismar yokEPSS %43

    microsoft · windows 20009 Eki 2007

  • CVE-2007-3892
    38İzleyin

    Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" components via unspecif

    YüksekCVSS 7,5İstismar yokEPSS %25

    microsoft · internet explorer9 Eki 2007

  • CVE-2007-3893
    34İzleyin

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via unspecified ve

    OrtaCVSS 6,8İstismar yokEPSS %24

    microsoft · internet explorer9 Eki 2007

  • CVE-2007-3897
    53Planlayın

    Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Proto

    KritikCVSS 9,3İstismar yokEPSS %54

    microsoft · outlook express9 Eki 2007

  • CVE-2007-3899
    46Planlayın

    Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execut

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · office9 Eki 2007

  • CVE-2007-4466
    40Planlayın

    Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attackers to execute arbi

    OrtaCVSS 6,8SilahlaştırılmışEPSS %30

    electronic arts · snoopyctrl9 Eki 2007

  • CVE-2007-5322
    36İzleyin

    Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote attackers to execute

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    microsoft · visual foxpro9 Eki 2007

  • CVE-2007-3896
    53Planlayın

    The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows rem

    KritikCVSS 9,3Kavram kanıtıEPSS %53

    microsoft · windows 2003 server10 Eki 2007

  • CVE-2007-5362
    38İzleyin

    Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 component for Mambo and J

    OrtaCVSS 6,8Kavram kanıtıEPSS %36

    mambo · mambo10 Eki 2007

  • CVE-2007-5363
    36İzleyin

    PHP remote file inclusion vulnerability in admin.panoramic.php in the Panoramic Picture Viewer (com_panoramic) mambot (plugin) 1.0 for Jooml

    OrtaCVSS 6,8Kavram kanıtıEPSS %31

    joomla · joomla10 Eki 2007

  • CVE-2007-5169
    40Planlayın

    Stack-based buffer overflow in MAIPM6.dll in Adobe PageMaker 7.0.1 and 7.0.2 on Windows allows user-assisted remote attackers to execute arb

    KritikCVSS 9,3İstismar yokEPSS %10

    adobe · pagemaker11 Eki 2007

  • CVE-2007-5365
    52Planlayın

    Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementati

    YüksekCVSS 7,2Kavram kanıtıEPSS %80

    openbsd · openbsd11 Eki 2007

  • CVE-2007-5381
    41Planlayın

    Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attack

    KritikCVSS 9,3Kavram kanıtıEPSS %14

    cisco · ios11 Eki 2007

  • CVE-2007-5387
    36İzleyin

    PHP remote file inclusion vulnerability in active/components/xmlrpc/client.php in Pindorama 0.1 allows remote attackers to execute arbitrary

    OrtaCVSS 6,8Kavram kanıtıEPSS %28

    pindorama · pindorama12 Eki 2007

  • CVE-2007-5388
    39İzleyin

    Multiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (

    OrtaCVSS 6,8Kavram kanıtıEPSS %38

    webdesktop · webdesktop12 Eki 2007

  • CVE-2007-5407
    39İzleyin

    Multiple PHP remote file inclusion vulnerabilities in the JContentSubscription (com_jcs) 1.5.8 component for Joomla! allow remote attackers

    OrtaCVSS 6,8Kavram kanıtıEPSS %40

    joomlaequipment · jcontentsubscription12 Eki 2007

  • CVE-2007-5412
    38İzleyin

    Multiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass (com_mp3_allopass) 1.0 component for Joomla! allow remote at

    OrtaCVSS 6,8Kavram kanıtıEPSS %37

    quoc-huy · mp3 allopass12 Eki 2007

  • CVE-2007-5423
    53Planlayın

    tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which

    YüksekCVSS 7,5SilahlaştırılmışEPSS %76

    tiki · tikiwiki cms\/groupware12 Eki 2007

  • CVE-2007-5208
    50Planlayın

    hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute

    YüksekCVSS 7,6SilahlaştırılmışEPSS %67

    hp · linux imaging and printing project12 Eki 2007

  • CVE-2007-5325
    44Planlayın

    Multiple buffer overflows in (1) the Message Engine and (2) AScore.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise

    KritikCVSS 10,0İstismar yokEPSS %11

    broadcom · brightstor arcserve backup12 Eki 2007

  • CVE-2007-5326
    44Planlayın

    Multiple buffer overflows in (1) RPC and (2) rpcx.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, all

    KritikCVSS 10,0İstismar yokEPSS %11

    ca · brightstor arcserve backup12 Eki 2007

  • CVE-2007-5327
    45Planlayın

    Stack-based buffer overflow in the RPC interface for the Message Engine (mediasvr.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5,

    KritikCVSS 10,0İstismar yokEPSS %16

    broadcom · brightstor arcserve backup12 Eki 2007

  • CVE-2007-5330
    44Planlayın

    The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to (1) exec

    KritikCVSS 10,0İstismar yokEPSS %13

    broadcom · brightstor arcserve backup12 Eki 2007

  • CVE-2007-4995
    40Planlayın

    Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified

    KritikCVSS 9,3İstismar yokEPSS %10

    openssl · openssl12 Eki 2007

  • CVE-2007-5451
    36İzleyin

    PHP remote file inclusion vulnerability in admin.color.php in the com_colorlab (aka com_color) 1.0 component for Joomla! allows remote attac

    OrtaCVSS 6,8Kavram kanıtıEPSS %31

    joomla · joomla14 Eki 2007

  • CVE-2007-5456
    36İzleyin

    Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download a

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · internet explorer14 Eki 2007

  • CVE-2007-5457
    38İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 com

    OrtaCVSS 6,8Kavram kanıtıEPSS %37

    joomla · joomla14 Eki 2007

  • CVE-2007-5461
    26İzleyin

    Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, un

    DüşükCVSS 3,5Kavram kanıtıEPSS %39

    apache · tomcat15 Eki 2007

  • CVE-2007-5466
    46Planlayın

    Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strin

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    extremail · extremail15 Eki 2007

  • CVE-2007-5467
    44Planlayın

    Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, v

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    extremail · extremail15 Eki 2007

  • CVE-2007-5511
    40Planlayın

    SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 allows attacke

    OrtaCVSS 6,5SilahlaştırılmışEPSS %31

    oracle · database server17 Eki 2007

  • CVE-2007-5574
    35İzleyin

    PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the pa

    OrtaCVSS 6,8Kavram kanıtıEPSS %27

    phpdj · phpdj18 Eki 2007

  • CVE-2007-5592
    36İzleyin

    Multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier allow remote attackers to execute arbitrary PHP code via

    OrtaCVSS 6,8Kavram kanıtıEPSS %28

    awzmb · awzmb19 Eki 2007

  • CVE-2007-5601
    50Planlayın

    Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions incl

    KritikCVSS 9,3SilahlaştırılmışEPSS %42

    realnetworks · realplayer20 Eki 2007

  • CVE-2007-5628
    35İzleyin

    PHP remote file inclusion vulnerability in src/scripture.php in The Online Web Library Site (TOWels) 0.1 allows remote attackers to execute

    OrtaCVSS 6,8Kavram kanıtıEPSS %27

    towels · towels23 Eki 2007

  • CVE-2007-5631
    39İzleyin

    Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when register_globals is enabled, allow remote attackers to

    OrtaCVSS 6,8Kavram kanıtıEPSS %39

    peopleaggregator · peopleaggregator23 Eki 2007

  • CVE-2007-5641
    39İzleyin

    Multiple PHP remote file inclusion vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to execute arbitrary

    OrtaCVSS 6,8Kavram kanıtıEPSS %40

    phppm · php project management23 Eki 2007

  • CVE-2007-5654
    32İzleyin

    LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed

    OrtaCVSS 5,0Kavram kanıtıEPSS %41

    litespeed technologies · litespeed web server23 Eki 2007

  • CVE-2007-5709
    40Planlayın

    Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code via a long file nam

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    sony · sonicstage connect player30 Eki 2007

  • CVE-2007-5722
    34İzleyin

    Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourgame GLWorld and possib

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    ourgame.com · globallink30 Eki 2007

  • CVE-2007-5728
    21İzleyin

    Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inject arbitrary web scr

    OrtaCVSS 4,3Kavram kanıtıEPSS %14

    phppgadmin · phppgadmin30 Eki 2007

  • CVE-2007-5740
    34İzleyin

    The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbit

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    vergenet · perdition mail retrieval proxy31 Eki 2007