İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2008: sömürülen ve yeni ciddi CVE kayıtları

59 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-6697
    33İzleyin

    Buffer overflow in the LWZReadByte function in IMG_gif.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (app

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    sdl · sdl image1 Şub 2008

  • CVE-2008-0550
    56Planlayın

    Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary co

    KritikCVSS 10,0SilahlaştırılmışEPSS %53

    radio toolbox · steamcast1 Şub 2008

  • CVE-2008-0551
    46Planlayın

    The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 a

    KritikCVSS 9,3Kavram kanıtıEPSS %29

    sejoong namo · activesquare1 Şub 2008

  • CVE-2008-0566
    34İzleyin

    PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute

    OrtaCVSS 6,8Kavram kanıtıEPSS %23

    deltascripts · php links4 Şub 2008

  • CVE-2008-0567
    40Planlayın

    Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for Joomla! allow remote

    YüksekCVSS 7,5Kavram kanıtıEPSS %34

    chronoengine · chronoforms4 Şub 2008

  • CVE-2008-0572
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP code via a URL in th

    OrtaCVSS 6,8Kavram kanıtıEPSS %21

    mindmeld · mindmeld4 Şub 2008

  • CVE-2008-0590
    43Planlayın

    Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service (crash) and possib

    KritikCVSS 9,0Kavram kanıtıEPSS %22

    progress · ws ftp server5 Şub 2008

  • CVE-2008-0610
    49Planlayın

    Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for Ul

    KritikCVSS 9,3SilahlaştırılmışEPSS %38

    ultravnc · ultravnc6 Şub 2008

  • CVE-2008-0619
    40Planlayın

    Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arbitrary code or cause

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    nero · mediaplayer6 Şub 2008

  • CVE-2008-0621
    52Planlayın

    Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary c

    YüksekCVSS 7,5SilahlaştırılmışEPSS %73

    sap · sapgui6 Şub 2008

  • CVE-2008-0635
    34İzleyin

    Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via un

    YüksekCVSS 7,5İstismar yokEPSS %12

    openads · openads6 Şub 2008

  • CVE-2008-0457
    44Planlayın

    Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec B

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    symantec · backupexec system recovery7 Şub 2008

  • CVE-2008-0645
    40Planlayın

    Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL

    YüksekCVSS 7,5Kavram kanıtıEPSS %34

    portail web php · portail web php7 Şub 2008

  • CVE-2008-0655
    76Bu hafta

    Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %37

    adobe · acrobat7 Şub 2008

  • CVE-2008-0177
    36İzleyin

    The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of th

    YüksekCVSS 7,8Kavram kanıtıEPSS %15

    kame · ipcomp7 Şub 2008

  • CVE-2008-0659
    57Planlayın

    Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUpl

    KritikCVSS 10,0Kavram kanıtıEPSS %56

    aurigma · image uploader activex control7 Şub 2008

  • CVE-2008-0660
    48Planlayın

    Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and

    KritikCVSS 9,3Kavram kanıtıEPSS %37

    aurigma · image uploader activex control7 Şub 2008

  • CVE-2007-5333
    39İzleyin

    Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters

    OrtaCVSS 5,0Kavram kanıtıEPSS %62

    apache · tomcat11 Şub 2008

  • CVE-2008-0671
    45Planlayın

    Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitr

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    tintin · tintin\+\+11 Şub 2008

  • CVE-2007-5659
    87Hemen

    Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %87

    adobe · acrobat12 Şub 2008

  • CVE-2007-5663
    41Planlayın

    Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure J

    KritikCVSS 9,3İstismar yokEPSS %13

    adobe · acrobat12 Şub 2008

  • CVE-2008-0726
    41Planlayın

    Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to th

    KritikCVSS 9,3İstismar yokEPSS %14

    adobe · acrobat12 Şub 2008

  • CVE-2008-0075
    57Planlayın

    Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code

    KritikCVSS 10,0İstismar yokEPSS %57

    microsoft · internet information server12 Şub 2008

  • CVE-2008-0084
    53Planlayın

    Unspecified vulnerability in the TCP/IP support in Microsoft Windows Vista allows remote DHCP servers to cause a denial of service (hang and

    YüksekCVSS 7,8İstismar yokEPSS %73

    microsoft · windows vista12 Şub 2008

  • CVE-2008-0088
    36İzleyin

    Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM

    OrtaCVSS 6,8İstismar yokEPSS %28

    microsoft · windows 200012 Şub 2008

  • CVE-2007-0065
    53Planlayın

    Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2,

    KritikCVSS 10,0İstismar yokEPSS %43

    microsoft · windows 200012 Şub 2008

  • CVE-2007-0216
    48Planlayın

    wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to ex

    KritikCVSS 9,3Kavram kanıtıEPSS %38

    microsoft · office12 Şub 2008

  • CVE-2008-0076
    46Planlayın

    Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via cr

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · ie12 Şub 2008

  • CVE-2008-0077
    46Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by ass

    YüksekCVSS 8,8İstismar yokEPSS %37

    microsoft · internet explorer12 Şub 2008

  • CVE-2008-0078
    46Planlayın

    Unspecified vulnerability in an ActiveX control (dxtmsft.dll) in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attack

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · activex12 Şub 2008

  • CVE-2008-0080
    52Planlayın

    Heap-based buffer overflow in the WebDAV Mini-Redirector in Microsoft Windows XP SP2, Server 2003 SP1 and SP2, and Vista allows remote attac

    KritikCVSS 10,0İstismar yokEPSS %40

    microsoft · windows 2003 server12 Şub 2008

  • CVE-2008-0102
    51Planlayın

    Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a cra

    KritikCVSS 10,0İstismar yokEPSS %36

    microsoft · publisher12 Şub 2008

  • CVE-2008-0104
    46Planlayın

    Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a cra

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · office12 Şub 2008

  • CVE-2008-0105
    50Planlayın

    Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute ar

    KritikCVSS 9,3Kavram kanıtıEPSS %43

    microsoft · office12 Şub 2008

  • CVE-2008-0108
    53Planlayın

    Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Su

    KritikCVSS 9,3Kavram kanıtıEPSS %52

    microsoft · office12 Şub 2008

  • CVE-2008-0109
    46Planlayın

    Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code vi

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · office12 Şub 2008

  • CVE-2008-0103
    46Planlayın

    Unspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to e

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · office12 Şub 2008

  • CVE-2008-0748
    45Planlayın

    Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    sony · axruploadserver activex control13 Şub 2008

  • CVE-2007-6149
    44Planlayın

    Multiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allow

    KritikCVSS 10,0İstismar yokEPSS %11

    adobe · connect enterprise server13 Şub 2008

  • CVE-2008-0639
    47Planlayın

    Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Wi

    KritikCVSS 10,0İstismar yokEPSS %23

    novell · client13 Şub 2008

  • CVE-2008-0782
    24İzleyin

    Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    moinmoin · moinmoin14 Şub 2008

  • CVE-2008-0803
    40Planlayın

    Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a

    YüksekCVSS 7,5Kavram kanıtıEPSS %32

    lookstrike · lan manager15 Şub 2008

  • CVE-2007-6258
    42Planlayın

    Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary

    YüksekCVSS 7,5Kavram kanıtıEPSS %41

    apache · mod jk18 Şub 2008

  • CVE-2008-0871
    40Planlayın

    Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a (

    OrtaCVSS 6,8SilahlaştırılmışEPSS %32

    now · sms mms gateway21 Şub 2008

  • CVE-2008-0912
    45Planlayın

    Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    sybase · mobilink22 Şub 2008

  • CVE-2008-0935
    60Bu hafta

    Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.34 allows remote att

    KritikCVSS 10,0SilahlaştırılmışEPSS %65

    novell · iprint25 Şub 2008

  • CVE-2008-0944
    23İzleyin

    Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application c

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    ipswitch · instant messaging25 Şub 2008

  • CVE-2008-0984
    42Planlayın

    The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrit

    KritikCVSS 9,3Kavram kanıtıEPSS %15

    miro · miro player26 Şub 2008

  • CVE-2008-1043
    45Planlayın

    PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 BETA allows remote att

    YüksekCVSS 7,5Kavram kanıtıEPSS %48

    linux web shop · php user base27 Şub 2008

  • CVE-2008-1046
    33İzleyin

    PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code

    OrtaCVSS 6,8Kavram kanıtıEPSS %21

    quinsonnas · quinsonnas mail checker27 Şub 2008

  • CVE-2008-1051
    33İzleyin

    PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary

    OrtaCVSS 6,8Kavram kanıtıEPSS %21

    phpprofiles · phpprofiles 27 Şub 2008

  • CVE-2008-1059
    44Planlayın

    PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote a

    YüksekCVSS 7,5Kavram kanıtıEPSS %48

    wordpress · sniplets plugin28 Şub 2008

  • CVE-2008-1060
    43Planlayın

    Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute

    YüksekCVSS 7,5Kavram kanıtıEPSS %44

    wordpress · sniplets plugin28 Şub 2008

  • CVE-2008-0411
    31İzleyin

    Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitr

    OrtaCVSS 6,8Kavram kanıtıEPSS %14

    ghostscript · ghostscript28 Şub 2008

  • CVE-2008-1067
    34İzleyin

    Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the

    OrtaCVSS 6,8Kavram kanıtıEPSS %21

    phpqladmin · phpqladmin28 Şub 2008

  • CVE-2008-1069
    36İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a

    OrtaCVSS 6,8Kavram kanıtıEPSS %28

    quantum game library · quantum game library28 Şub 2008

  • CVE-2008-1074
    38İzleyin

    PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a U

    OrtaCVSS 6,8Kavram kanıtıEPSS %36

    group e · group e28 Şub 2008

  • CVE-2007-6016
    52Planlayın

    Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the

    KritikCVSS 9,3SilahlaştırılmışEPSS %50

    symantec · backup exec for windows server29 Şub 2008

  • CVE-2008-1110
    30İzleyin

    Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote atta

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    xine · xine-lib29 Şub 2008