İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2008: sömürülen ve yeni ciddi CVE kayıtları

56 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-6613
    24İzleyin

    Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    gnu · libcdio3 Oca 2008

  • CVE-2007-6638
    44Planlayın

    March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to o

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    march networks · 3204 dvr3 Oca 2008

  • CVE-2008-0090
    27İzleyin

    A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 cra

    OrtaCVSS 5,0Kavram kanıtıEPSS %22

    divx · divx player3 Oca 2008

  • CVE-2008-0095
    28İzleyin

    The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance

    OrtaCVSS 5,0Kavram kanıtıEPSS %25

    asterisk · asterisk appliance developer kit7 Oca 2008

  • CVE-2007-6388
    40Planlayın

    Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 throu

    OrtaCVSS 4,3İstismar yokEPSS %75

    apache · http server8 Oca 2008

  • CVE-2008-0139
    34İzleyin

    Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to execute arbitrary PHP co

    OrtaCVSS 6,8Kavram kanıtıEPSS %22

    loudblog · loudblog8 Oca 2008

  • CVE-2008-0144
    43Planlayın

    PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute arbitrary PHP code via

    YüksekCVSS 7,5Kavram kanıtıEPSS %44

    phprisk · netrisk8 Oca 2008

  • CVE-2007-0066
    37İzleyin

    The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attac

    YüksekCVSS 7,1İstismar yokEPSS %31

    microsoft · home server8 Oca 2008

  • CVE-2007-0069
    52Planlayın

    Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of ser

    KritikCVSS 9,3İstismar yokEPSS %49

    microsoft · windows 2003 server8 Oca 2008

  • CVE-2007-5360
    35İzleyin

    Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in VMWa

    YüksekCVSS 7,5İstismar yokEPSS %15

    openpegasus · management server8 Oca 2008

  • CVE-2008-0153
    24İzleyin

    telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service (process crash and resource exhaustion) vi

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    pragma systems · pragma telnetserver8 Oca 2008

  • CVE-2007-6250
    45Planlayın

    Stack-based buffer overflow in AOL AOLMediaPlaybackControl (AOLMediaPlaybackControl.exe), as used by AmpX ActiveX control (AmpX.dll), might

    KritikCVSS 9,3İstismar yokEPSS %25

    aol · aolmediaplaybackcontrol9 Oca 2008

  • CVE-2008-0220
    35İzleyin

    Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gatewa

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    gateway · cweblaunchctl activex control10 Oca 2008

  • CVE-2008-0225
    29İzleyin

    Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to e

    OrtaCVSS 6,4Kavram kanıtıEPSS %14

    xine · xine-lib10 Oca 2008

  • CVE-2008-0226
    57Planlayın

    Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitr

    YüksekCVSS 7,5SilahlaştırılmışEPSS %91

    yassl · yassl10 Oca 2008

  • CVE-2008-0234
    41Planlayın

    Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    apple · quicktime10 Oca 2008

  • CVE-2008-0235
    49Planlayın

    The Microsoft VFP_OLE_Server ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method.

    KritikCVSS 10,0İstismar yokEPSS %29

    microsoft · vfp ole server activex control10 Oca 2008

  • CVE-2008-0236
    28İzleyin

    An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking the

    OrtaCVSS 5,8Kavram kanıtıEPSS %17

    microsoft · visual foxpro10 Oca 2008

  • CVE-2008-0237
    33İzleyin

    The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the in

    OrtaCVSS 6,8Kavram kanıtıEPSS %20

    microsoft · rich textbox control10 Oca 2008

  • CVE-2008-0005
    21İzleyin

    mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows

    OrtaCVSS 4,3İstismar yokEPSS %14

    apache · http server11 Oca 2008

  • CVE-2008-0244
    64Bu hafta

    SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in exec

    KritikCVSS 10,0SilahlaştırılmışEPSS %80

    sap · maxdb11 Oca 2008

  • CVE-2008-0248
    40Planlayın

    Buffer overflow in an ActiveX control in ccpm_0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary c

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    streamaudio · chaincast proxymanager activex control11 Oca 2008

  • CVE-2008-0250
    42Planlayın

    Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN)

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    microsoft · visual interdev11 Oca 2008

  • CVE-2008-0122
    44Planlayın

    Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEAS

    KritikCVSS 10,0İstismar yokEPSS %12

    isc · bind15 Oca 2008

  • CVE-2008-0295
    37İzleyin

    Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlie

    YüksekCVSS 8,5Kavram kanıtıEPSS %11

    videolan · vlc media player16 Oca 2008

  • CVE-2008-0296
    44Planlayın

    Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RT

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    videolan · vlc media player16 Oca 2008

  • CVE-2008-0081
    56Planlayın

    Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote att

    KritikCVSS 9,8Kavram kanıtıEPSS %57

    microsoft · excel16 Oca 2008

  • CVE-2007-6681
    35İzleyin

    Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    videolan · vlc16 Oca 2008

  • CVE-2007-6682
    35İzleyin

    Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute a

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    videolan · vlc16 Oca 2008

  • CVE-2008-0027
    57Planlayın

    Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (C

    KritikCVSS 10,0İstismar yokEPSS %57

    cisco · unified callmanager16 Oca 2008

  • CVE-2008-0333
    23İzleyin

    Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET allows remote attackers

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    afterlogic · mailbee webmail pro17 Oca 2008

  • CVE-2008-0339
    44Planlayın

    Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and remot

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    oracle · database server17 Oca 2008

  • CVE-2008-0352
    34İzleyin

    The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6 packet, possibly in

    YüksekCVSS 7,8Kavram kanıtıEPSS %10

    linux · linux kernel17 Oca 2008

  • CVE-2008-0356
    62Bu hafta

    Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 a

    KritikCVSS 10,0İstismar yokEPSS %72

    citrix · access essentials18 Oca 2008

  • CVE-2008-0065
    58Planlayın

    Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arbitrary code via a lon

    KritikCVSS 10,0SilahlaştırılmışEPSS %61

    winamp · nullsoft winamp22 Oca 2008

  • CVE-2008-0376
    36İzleyin

    PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code v

    OrtaCVSS 6,8Kavram kanıtıEPSS %31

    softpedia · small axe weblog22 Oca 2008

  • CVE-2008-0380
    44Planlayın

    Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29) allows remote attackers to ex

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    digital data communications · rtspvapgdecoder.dll22 Oca 2008

  • CVE-2008-0382
    43Planlayın

    Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %41

    mybulletinboard · mybulletinboard22 Oca 2008

  • CVE-2008-0128
    26İzleyin

    The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the

    OrtaCVSS 5,0Kavram kanıtıEPSS %19

    apache · tomcat22 Oca 2008

  • CVE-2008-0392
    46Planlayın

    Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary cod

    KritikCVSS 9,3Kavram kanıtıEPSS %30

    microsoft · visual basic22 Oca 2008

  • CVE-2008-0394
    34İzleyin

    Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    citadel · smtp23 Oca 2008

  • CVE-2008-0423
    38İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Lama Software allow remote attackers to execute arbitrary PHP code via a URL in the MY

    OrtaCVSS 6,8Kavram kanıtıEPSS %37

    lama · lama software23 Oca 2008

  • CVE-2008-0434
    40Planlayın

    Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    gecad technologies · axigen mail server23 Oca 2008

  • CVE-2008-0437
    57Planlayın

    Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installat

    KritikCVSS 10,0Kavram kanıtıEPSS %58

    hp · virtual rooms23 Oca 2008

  • CVE-2008-0443
    44Planlayın

    Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUploader Module allows

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    lycos · fileuploader.dll24 Oca 2008

  • CVE-2008-0454
    45Planlayın

    Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · windows24 Oca 2008

  • CVE-2008-0455
    36İzleyin

    Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.

    OrtaCVSS 4,3Kavram kanıtıEPSS %64

    apache · http server24 Oca 2008

  • CVE-2008-0456
    16İzleyin

    CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earli

    DüşükCVSS 2,6İstismar yokEPSS %19

    apache · http server24 Oca 2008

  • CVE-2008-0460
    21İzleyin

    Cross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10 through 1.10.2, 1.9 through 1.9.4, and 1.8

    OrtaCVSS 4,3İstismar yokEPSS %14

    mediawiki · mediawiki25 Oca 2008

  • CVE-2008-0175
    35İzleyin

    Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute a

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    ge fanuc · proficy real-time information portal28 Oca 2008

  • CVE-2008-0387
    45Planlayın

    Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote at

    YüksekCVSS 7,8Kavram kanıtıEPSS %45

    firebirdsql · firebird28 Oca 2008

  • CVE-2008-0470
    46Planlayın

    A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method.

    KritikCVSS 9,3Kavram kanıtıEPSS %30

    comodo · comodo antivirus29 Oca 2008

  • CVE-2008-0477
    44Planlayın

    Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgrade Manager allows re

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    move networks inc · move media player29 Oca 2008

  • CVE-2008-0492
    40Planlayın

    Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpload 3.0 allows remote

    OrtaCVSS 6,8SilahlaştırılmışEPSS %29

    persits · xupload30 Oca 2008

  • CVE-2008-0503
    34İzleyin

    Eval injection vulnerability in admin/op/disp.php in Netwerk Smart Publisher 1.0.1 allows remote attackers to execute arbitrary PHP code via

    OrtaCVSS 6,8Kavram kanıtıEPSS %23

    netwerk · smart publisher31 Oca 2008

  • CVE-2008-0506
    45Planlayın

    include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configure

    OrtaCVSS 6,8SilahlaştırılmışEPSS %58

    coppermine · coppermine photo gallery31 Oca 2008