İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2007: sömürülen ve yeni ciddi CVE kayıtları

48 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-6203
    41Planlayın

    Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "4

    OrtaCVSS 4,3Kavram kanıtıEPSS %80

    apache · http server3 Ara 2007

  • CVE-2007-6236
    26İzleyin

    Microsoft Windows Media Player (WMP) allows remote attackers to cause a denial of service (application crash) via a certain AIFF file that t

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    microsoft · windows media player4 Ara 2007

  • CVE-2007-6239
    28İzleyin

    The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial o

    OrtaCVSS 5,0İstismar yokEPSS %26

    squid · squid web proxy cache4 Ara 2007

  • CVE-2007-5355
    28İzleyin

    The Web Proxy Auto-Discovery (WPAD) feature in Microsoft Internet Explorer 6 and 7, when a primary DNS suffix with three or more components

    OrtaCVSS 5,8İstismar yokEPSS %17

    microsoft · windows 20005 Ara 2007

  • CVE-2007-4575
    41Planlayın

    HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code

    KritikCVSS 9,3İstismar yokEPSS %14

    openoffice · openoffice5 Ara 2007

  • CVE-2007-6262
    30İzleyin

    A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arg

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    videolan · vlc media player5 Ara 2007

  • CVE-2007-5969
    32İzleyin

    MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4

    YüksekCVSS 7,1İstismar yokEPSS %14

    mysql · mysql server10 Ara 2007

  • CVE-2007-6312
    22İzleyin

    Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 a

    OrtaCVSS 4,3İstismar yokEPSS %15

    websense · enterpise11 Ara 2007

  • CVE-2007-0064
    48Planlayın

    Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Wi

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · windows 200011 Ara 2007

  • CVE-2007-3039
    57Planlayın

    Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional

    KritikCVSS 9,0SilahlaştırılmışEPSS %69

    microsoft · windows 200011 Ara 2007

  • CVE-2007-3895
    48Planlayın

    Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafte

    KritikCVSS 9,3İstismar yokEPSS %36

    microsoft · windows 200011 Ara 2007

  • CVE-2007-3901
    48Planlayın

    Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.

    YüksekCVSS 8,5SilahlaştırılmışEPSS %45

    microsoft · windows 200011 Ara 2007

  • CVE-2007-3902
    48Planlayın

    Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attac

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · ie11 Ara 2007

  • CVE-2007-3903
    36İzleyin

    Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated

    OrtaCVSS 6,8İstismar yokEPSS %31

    microsoft · ie11 Ara 2007

  • CVE-2007-5344
    35İzleyin

    Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that cre

    OrtaCVSS 6,8İstismar yokEPSS %27

    microsoft · ie11 Ara 2007

  • CVE-2007-5347
    35İzleyin

    Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects,"

    OrtaCVSS 6,8İstismar yokEPSS %28

    microsoft · ie11 Ara 2007

  • CVE-2007-5351
    52Planlayın

    Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows remote attackers to fo

    KritikCVSS 10,0İstismar yokEPSS %41

    microsoft · windows vista11 Ara 2007

  • CVE-2007-5000
    31İzleyin

    Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61

    OrtaCVSS 4,3İstismar yokEPSS %46

    apache · http server13 Ara 2007

  • CVE-2007-6325
    30İzleyin

    PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attackers to execute arbitr

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    fastpublish · fastpublish cms13 Ara 2007

  • CVE-2007-6327
    33İzleyin

    Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attackers to execute arbi

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    avs media · avsmjpegfile.dll13 Ara 2007

  • CVE-2007-6329
    30İzleyin

    Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it ea

    OrtaCVSS 6,4İstismar yokEPSS %15

    microsoft · office13 Ara 2007

  • CVE-2007-6331
    46Planlayın

    Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfo

    KritikCVSS 9,3Kavram kanıtıEPSS %30

    hp · info center13 Ara 2007

  • CVE-2007-6015
    45Planlayın

    Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled

    KritikCVSS 9,3Kavram kanıtıEPSS %27

    samba · samba13 Ara 2007

  • CVE-2007-6204
    61Bu hafta

    Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute ar

    KritikCVSS 10,0SilahlaştırılmışEPSS %69

    hp · openview network node manager13 Ara 2007

  • CVE-2007-6195
    44Planlayın

    Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · hp-ux14 Ara 2007

  • CVE-2007-6357
    28İzleyin

    Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Micros

    OrtaCVSS 5,8İstismar yokEPSS %15

    microsoft · access14 Ara 2007

  • CVE-2007-6377
    50Planlayın

    Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitra

    YüksekCVSS 7,5SilahlaştırılmışEPSS %66

    badblue · badblue14 Ara 2007

  • CVE-2007-6387
    48Planlayın

    Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics Ans

    KritikCVSS 9,3Kavram kanıtıEPSS %38

    intuit · bookkeeping14 Ara 2007

  • CVE-2007-6401
    46Planlayın

    Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allow

    KritikCVSS 9,3Kavram kanıtıEPSS %29

    3ivx · mpeg-4 codec17 Ara 2007

  • CVE-2007-5849
    41Planlayın

    Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers t

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    apple · mac os x19 Ara 2007

  • CVE-2007-5863
    44Planlayın

    Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle (MITM) attack between

    KritikCVSS 9,3SilahlaştırılmışEPSS %22

    apple · mac os x19 Ara 2007

  • CVE-2007-6454
    45Planlayın

    Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remot

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    peercast · peercast19 Ara 2007

  • CVE-2007-6242
    36İzleyin

    Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vect

    OrtaCVSS 6,8İstismar yokEPSS %30

    adobe · flash player19 Ara 2007

  • CVE-2007-6244
    21İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 allow remote attackers t

    OrtaCVSS 4,3Kavram kanıtıEPSS %12

    adobe · flash player19 Ara 2007

  • CVE-2007-6246
    21İzleyin

    Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running on Linux, uses insecure permissions for memo

    OrtaCVSS 4,4İstismar yokEPSS %11

    linux · linux kernel19 Ara 2007

  • CVE-2007-6335
    36İzleyin

    Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, whic

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    clam anti-virus · clamav19 Ara 2007

  • CVE-2007-6483
    23İzleyin

    Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    safenet · sentinel keys server20 Ara 2007

  • CVE-2007-6485
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute arbitrary PHP code vi

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    centreon · centreon20 Ara 2007

  • CVE-2007-6494
    44Planlayın

    Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    hosting controller · hosting controller20 Ara 2007

  • CVE-2007-6506
    42Planlayın

    The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    hp · software update20 Ara 2007

  • CVE-2007-6507
    51Planlayın

    SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from

    KritikCVSS 10,0SilahlaştırılmışEPSS %36

    trend micro · serverprotect20 Ara 2007

  • CVE-2007-4567
    35İzleyin

    The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended

    YüksekCVSS 7,8Kavram kanıtıEPSS %14

    linux · linux kernel20 Ara 2007

  • CVE-2007-6509
    48Planlayın

    Unspecified vulnerability in Appian Enterprise Business Process Management (BPM) Suite 5.6 SP1 allows remote attackers to cause a denial of

    YüksekCVSS 7,8SilahlaştırılmışEPSS %55

    appian · business process management suite21 Ara 2007

  • CVE-2007-6514
    28İzleyin

    Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unp

    OrtaCVSS 4,3Kavram kanıtıEPSS %38

    linux · linux kernel21 Ara 2007

  • CVE-2007-4474
    50Planlayın

    Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll

    KritikCVSS 9,3SilahlaştırılmışEPSS %44

    ibm · domino web access27 Ara 2007

  • CVE-2007-6530
    48Planlayın

    Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by H

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    persits · xupload27 Ara 2007

  • CVE-2007-6533
    34İzleyin

    Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    inmatrix · zoom player27 Ara 2007

  • CVE-2007-6534
    30İzleyin

    Multiple unspecified vulnerabilities in Microsoft Office Publisher allow user-assisted remote attackers to cause a denial of service (applic

    OrtaCVSS 6,8İstismar yokEPSS %11

    microsoft · publisher27 Ara 2007