İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2007: sömürülen ve yeni ciddi CVE kayıtları

26 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-5775
    48Planlayın

    Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024.

    KritikCVSS 9,8Kavram kanıtıEPSS %29

    bitdefender · antivirus1 Kas 2007

  • CVE-2007-5779
    51Planlayın

    Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player (GOM Player) 2.1.6

    YüksekCVSS 7,5SilahlaştırılmışEPSS %71

    gom player · gom player1 Kas 2007

  • CVE-2007-5781
    39İzleyin

    PHP remote file inclusion vulnerability in inc/sige_init.php in Sige 0.1 allows remote attackers to execute arbitrary PHP code via a URL in

    OrtaCVSS 6,8Kavram kanıtıEPSS %38

    sige · sige1 Kas 2007

  • CVE-2007-5660
    48Planlayın

    Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXnet Connect and Insta

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    macrovision · flexnet connect2 Kas 2007

  • CVE-2007-5800
    38İzleyin

    Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to

    OrtaCVSS 6,8Kavram kanıtıEPSS %36

    wordpress · wordpress2 Kas 2007

  • CVE-2007-5603
    48Planlayın

    Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, al

    KritikCVSS 9,3SilahlaştırılmışEPSS %37

    sonicwall · ssl vpn5 Kas 2007

  • CVE-2007-5841
    36İzleyin

    PHP remote file inclusion vulnerability in admin/index.php in nuBoard 0.5 allows remote attackers to execute arbitrary PHP code via a URL in

    OrtaCVSS 6,8Kavram kanıtıEPSS %31

    nuboard · nuboard6 Kas 2007

  • CVE-2007-5842
    41Planlayın

    Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers to execute arbitrary PHP code via a URL in

    OrtaCVSS 6,8Kavram kanıtıEPSS %46

    vortex portal · vortex portal6 Kas 2007

  • CVE-2007-5843
    38İzleyin

    PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute arbitrary PHP code vi

    OrtaCVSS 6,8Kavram kanıtıEPSS %37

    scwiki · scwiki6 Kas 2007

  • CVE-2007-5846
    40Planlayın

    The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via

    YüksekCVSS 7,8İstismar yokEPSS %28

    net-snmp · net-snmp6 Kas 2007

  • CVE-2007-3751
    45Planlayın

    Unspecified vulnerability in QuickTime for Java in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via untruste

    KritikCVSS 9,3İstismar yokEPSS %25

    apple · quicktime7 Kas 2007

  • CVE-2007-4675
    47Planlayın

    Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to

    KritikCVSS 9,3İstismar yokEPSS %32

    apple · quicktime7 Kas 2007

  • CVE-2007-4676
    51Planlayın

    Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsi

    KritikCVSS 9,3İstismar yokEPSS %46

    apple · quicktime7 Kas 2007

  • CVE-2007-4677
    51Planlayın

    Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid color table size w

    KritikCVSS 9,3İstismar yokEPSS %46

    apple · quicktime7 Kas 2007

  • CVE-2007-5892
    45Planlayın

    Stack-based buffer overflow in the pdg2.dll ActiveX control in SSReader 4.0 and earlier allow remote attackers to execute arbitrary code via

    KritikCVSS 10,0İstismar yokEPSS %17

    ssreader · ultra star reader7 Kas 2007

  • CVE-2007-5909
    43Planlayın

    Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by Activ

    KritikCVSS 9,3İstismar yokEPSS %20

    autonomy · keyview export sdk9 Kas 2007

  • CVE-2007-5925
    19İzleyin

    The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated

    OrtaCVSS 4,0Kavram kanıtıEPSS %11

    mysql · mysql9 Kas 2007

  • CVE-2007-3898
    41Planlayın

    The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS s

    OrtaCVSS 6,4Kavram kanıtıEPSS %52

    microsoft · windows 200013 Kas 2007

  • CVE-2007-5755
    41Planlayın

    Multiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL Radio allow remote attackers to execute ar

    KritikCVSS 9,3SilahlaştırılmışEPSS %12

    aol · radio13 Kas 2007

  • CVE-2007-5941
    50Planlayın

    Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a denial of service and p

    KritikCVSS 10,0Kavram kanıtıEPSS %32

    adobe · shockwave player13 Kas 2007

  • CVE-2007-5905
    31İzleyin

    Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a

    OrtaCVSS 6,8İstismar yokEPSS %13

    adobe · coldfusion15 Kas 2007

  • CVE-2007-5398
    40Planlayın

    Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operati

    KritikCVSS 9,3İstismar yokEPSS %11

    samba · samba16 Kas 2007

  • CVE-2007-6026
    45Planlayın

    Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003

    KritikCVSS 9,3Kavram kanıtıEPSS %28

    microsoft · jet19 Kas 2007

  • CVE-2007-6038
    35İzleyin

    PHP remote file inclusion vulnerability in xajax_functions.php in the JUser (com_juser) 1.0.14 component for Joomla! allows remote attackers

    OrtaCVSS 6,8Kavram kanıtıEPSS %27

    joomlaequipment · juser20 Kas 2007

  • CVE-2007-6165
    50Planlayın

    Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDouble attachment contai

    KritikCVSS 9,3SilahlaştırılmışEPSS %44

    apple · mac os x28 Kas 2007

  • CVE-2007-6166
    50Planlayın

    Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote

    KritikCVSS 9,3SilahlaştırılmışEPSS %41

    apple · quicktime28 Kas 2007