İçeriğe atla
Noroxi

Avaya kayıtları

avaya üreticisine ait 139 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %1,4
Pre-auth RCE
19
Düzeltme kaydı olan
%18
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

139 kayıt
  • CVE-2004-1050
    60Bu hafta

    Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes

    KritikCVSS 10,0Kavram kanıtıEPSS %67

    avaya · ip600 media servers31 Ara 2004

  • CVE-2004-0212
    59Planlayın

    Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote

    KritikCVSS 10,0Kavram kanıtıEPSS %63

    avaya · ip600 media servers6 Ağu 2004

  • CVE-2012-3811
    59Planlayın

    Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before

    KritikCVSS 10,0SilahlaştırılmışEPSS %62

    avaya · ip office customer call reporter3 Tem 2012

  • CVE-2004-0201
    54Planlayın

    Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 all

    KritikCVSS 10,0İstismar yokEPSS %45

    microsoft · windows 20006 Ağu 2004

  • CVE-2007-1765
    53Planlayın

    Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of

    KritikCVSS 9,3SilahlaştırılmışEPSS %54

    microsoft · windows 200029 Mar 2007

  • CVE-2004-0493
    50Planlayın

    The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and p

    OrtaCVSS 6,4Kavram kanıtıEPSS %84

    apache · http server6 Ağu 2004

  • CVE-2004-0842
    47Planlayın

    Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash

    YüksekCVSS 7,5Kavram kanıtıEPSS %56

    avaya · ip600 media servers23 Ara 2004

  • CVE-2007-2374
    42Planlayın

    Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · windows 200030 Nis 2007

  • CVE-2004-0595
    41Planlayın

    The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricti

    OrtaCVSS 6,8Kavram kanıtıEPSS %45

    php · php27 Tem 2004

  • CVE-2017-11309
    41Planlayın

    Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long respon

    KritikCVSS 9,6Kavram kanıtıEPSS %9

    avaya · ip office9 Kas 2017

  • CVE-2011-5096
    41Planlayın

    Stack-based buffer overflow in cstore.exe in the Media Application Server (MAS) in Avaya Aura Application Server 5300 (formerly Nortel Media

    KritikCVSS 10,0İstismar yokEPSS %3

    avaya · aura application server 53003 Tem 2012

  • CVE-2001-1260
    41Planlayın

    Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by

    KritikCVSS 10,0İstismar yokEPSS %1

    avaya · argent office7 Ağu 2001

  • CVE-2016-2783
    40Planlayın

    Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0.1.0 does not properl

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    avaya · vsp operating system software23 Oca 2017

  • CVE-2023-3722
    40Planlayın

    Avaya Aura Device Services Remote Code Execution

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    avaya · aura device services19 Tem 2023

  • CVE-2018-15616
    40Planlayın

    System Platform Web UI Deserialization

    KritikCVSS 9,8İstismar yokEPSS %3

    avaya · avaya aura system platform17 Eki 2018

  • CVE-2019-7003
    40Planlayın

    A SQL injection vulnerability in the reporting component of Avaya Control Manager could allow an unauthenticated attacker to execute arbitra

    KritikCVSS 10,0İstismar yokEPSS %1

    avaya · control manager11 Tem 2019

  • CVE-2024-4197
    39İzleyin

    Avaya IP Office One-X Portal File Upload Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    avaya · ip office25 Haz 2024

  • CVE-2024-4196
    39İzleyin

    Avaya IP Office Web Control RCE Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    avaya · ip office25 Haz 2024

  • CVE-2025-1041
    39İzleyin

    Avaya Call Management System RCE vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    avaya · call management system10 Haz 2025

  • CVE-2017-12969
    38İzleyin

    Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to c

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    avaya · ip office contact center9 Kas 2017

  • CVE-2010-2943
    37İzleyin

    The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows

    YüksekCVSS 8,1Kavram kanıtıEPSS %17

    linux · linux kernel30 Eyl 2010

  • CVE-2008-5709
    37İzleyin

    Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4.

    KritikCVSS 9,0İstismar yokEPSS %3

    avaya · communication manager24 Ara 2008

  • CVE-2008-6711
    37İzleyin

    Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.

    KritikCVSS 9,0İstismar yokEPSS %2

    avaya · communication manager10 Nis 2009

  • CVE-2008-6709
    37İzleyin

    Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communicati

    KritikCVSS 9,0İstismar yokEPSS %2

    avaya · sip enablement services10 Nis 2009

  • CVE-2008-6708
    37İzleyin

    Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communicati

    KritikCVSS 9,0İstismar yokEPSS %2

    avaya · communication manager10 Nis 2009