skype technologies kayıtları
skype technologies üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 8
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-20 Improper Input Validation4
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-189 Numeric Errors1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
45Planlayın | CVE-2008-0454İstismar yok | Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windowsmicrosoft · windows · CWE-79 | Kritik9,3 | — | %25,1 | 24 Oca 2008 |
42Planlayın | CVE-2005-3267İstismar yok | Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier alskype technologies · skype · CWE-189 | Kritik10,0 | — | %7,2 | 27 Eki 2005 |
39İzleyin | CVE-2005-3265İstismar yok | Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skskype technologies · skype · CWE-119 | Kritik9,3 | — | %5,8 | 27 Eki 2005 |
39İzleyin | CVE-2004-1114İstismar yok | Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary coskype technologies · skype · CWE-119 | Kritik9,3 | — | %5,7 | 10 Oca 2005 |
38İzleyin | CVE-2008-2545İstismar yok | Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows skype technologies · skype · CWE-20 | Kritik9,3 | — | %4,2 | 6 Haz 2008 |
38İzleyin | CVE-2008-1805İstismar yok | Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass skype technologies · skype · CWE-20 | Kritik9,3 | — | %3,8 | 6 Haz 2008 |
35İzleyin | CVE-2006-5084Kavram kanıtı | Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote attackers to cause a deskype technologies · skype · CWE-20 | Yüksek7,5 | — | %16,3 | 28 Eyl 2006 |
28İzleyin | CVE-2007-5989İstismar yok | Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "shortskype technologies · skype · CWE-119 | Orta6,8 | — | %4,4 | 13 Ara 2007 |
21İzleyin | CVE-2007-4429İstismar yok | Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sendingskype technologies · skype | Orta5,0 | — | %2,1 | 20 Ağu 2007 |
21İzleyin | CVE-2004-1777İstismar yok | A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crasskype technologies · skype · CWE-20 | Orta5,0 | — | %1,7 | 31 Ara 2004 |
18İzleyin | CVE-2008-0583İstismar yok | Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windowsskype technologies · skype · CWE-94 | Orta4,3 | — | %2,0 | 4 Şub 2008 |
18İzleyin | CVE-2005-1407İstismar yok | Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, then call arbitrary Skyskype technologies · skype | Orta4,6 | — | %0,3 | 3 May 2005 |
17İzleyin | CVE-2008-0582İstismar yok | Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.1 through 3.6.0.244 on Windows allows remote attackers toskype technologies · skype · CWE-94 | Orta4,3 | — | %1,2 | 4 Şub 2008 |
8İzleyin | CVE-2005-2300İstismar yok | Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype_profile.jpg temporary file.skype technologies · skype | Düşük2,1 | — | %0,4 | 19 Tem 2005 |
- CVE-2008-045445Planlayın
Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows
KritikCVSS 9,3İstismar yokEPSS %25microsoft · windows24 Oca 2008
- CVE-2005-326742Planlayın
Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier al
KritikCVSS 10,0İstismar yokEPSS %7skype technologies · skype27 Eki 2005
- CVE-2005-326539İzleyin
Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) sk
KritikCVSS 9,3İstismar yokEPSS %5skype technologies · skype27 Eki 2005
- CVE-2004-111439İzleyin
Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary co
KritikCVSS 9,3İstismar yokEPSS %5skype technologies · skype10 Oca 2005
- CVE-2008-254538İzleyin
Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows
KritikCVSS 9,3İstismar yokEPSS %4skype technologies · skype6 Haz 2008
- CVE-2008-180538İzleyin
Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass
KritikCVSS 9,3İstismar yokEPSS %3skype technologies · skype6 Haz 2008
- CVE-2006-508435İzleyin
Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote attackers to cause a de
YüksekCVSS 7,5Kavram kanıtıEPSS %16skype technologies · skype28 Eyl 2006
- CVE-2007-598928İzleyin
Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short
OrtaCVSS 6,8İstismar yokEPSS %4skype technologies · skype13 Ara 2007
- CVE-2007-442921İzleyin
Unspecified vulnerability in Skype allows remote attackers to cause a denial of service (server hang) via unknown vectors related to sending
OrtaCVSS 5,0İstismar yokEPSS %2skype technologies · skype20 Ağu 2007
- CVE-2004-177721İzleyin
A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application cras
OrtaCVSS 5,0İstismar yokEPSS %1skype technologies · skype31 Ara 2004
- CVE-2008-058318İzleyin
Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows
OrtaCVSS 4,3İstismar yokEPSS %2skype technologies · skype4 Şub 2008
- CVE-2005-140718İzleyin
Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, then call arbitrary Sky
OrtaCVSS 4,6İstismar yokEPSS %0skype technologies · skype3 May 2005
- CVE-2008-058217İzleyin
Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.1 through 3.6.0.244 on Windows allows remote attackers to
OrtaCVSS 4,3İstismar yokEPSS %1skype technologies · skype4 Şub 2008
- CVE-2005-23008İzleyin
Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype_profile.jpg temporary file.
DüşükCVSS 2,1İstismar yokEPSS %0skype technologies · skype19 Tem 2005