Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: ноябрь 2008 г.

27 записей · 1 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2008-4910
    43В плане

    The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    sun · java web start3 нояб. 2008 г.

  • CVE-2008-2992
    91Срочно

    Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file t

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 98 %

    adobe · acrobat4 нояб. 2008 г.

  • CVE-2008-4922
    47В плане

    Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrar

    КритическаяCVSS 9,3Готовый эксплойтEPSS 32 %

    djvu · activex control for microsoft office 20004 нояб. 2008 г.

  • CVE-2008-4814
    41В плане

    Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to

    КритическаяCVSS 9,3Эксплойта нетEPSS 11 %

    adobe · acrobat5 нояб. 2008 г.

  • CVE-2008-5002
    49В плане

    Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Comp

    КритическаяCVSS 9,3Готовый эксплойтEPSS 40 %

    chilkat software · chilkat crypt activex control10 нояб. 2008 г.

  • CVE-2008-4387
    42В плане

    Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary cod

    КритическаяCVSS 9,3Эксплойта нетEPSS 15 %

    sap · sapgui10 нояб. 2008 г.

  • CVE-2008-5032
    40В плане

    Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code v

    КритическаяCVSS 9,3Proof of conceptEPSS 10 %

    videolan · vlc media player10 нояб. 2008 г.

  • CVE-2008-5036
    49В плане

    Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code vi

    КритическаяCVSS 9,3Готовый эксплойтEPSS 41 %

    videolan · vlc media player10 нояб. 2008 г.

  • CVE-2008-4029
    25Наблюдать

    Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet Explorer, allows remote attackers to obtain sensi

    СредняяCVSS 4,3Proof of conceptEPSS 26 %

    microsoft · internet explorer12 нояб. 2008 г.

  • CVE-2008-4033
    25Наблюдать

    Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, a

    СредняяCVSS 4,3Proof of conceptEPSS 27 %

    microsoft · xml core services12 нояб. 2008 г.

  • CVE-2008-4037
    55В плане

    Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB

    КритическаяCVSS 9,3Готовый эксплойтEPSS 59 %

    microsoft · windows12 нояб. 2008 г.

  • CVE-2008-5053
    59В плане

    PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla! allows rem

    КритическаяCVSS 10,0Proof of conceptEPSS 64 %

    joomla · com rssreader13 нояб. 2008 г.

  • CVE-2008-5106
    44В плане

    Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly execute

    КритическаяCVSS 10,0Готовый эксплойтEPSS 12 %

    karjasoft · sami ftp server17 нояб. 2008 г.

  • CVE-2008-4824
    41В плане

    Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    adobe · flash player17 нояб. 2008 г.

  • CVE-2008-5112
    25Наблюдать

    The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt

    СредняяCVSS 5,0Proof of conceptEPSS 17 %

    microsoft · windows17 нояб. 2008 г.

  • CVE-2008-5159
    58В плане

    Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote at

    КритическаяCVSS 10,0Готовый эксплойтEPSS 59 %

    clientsoftware · wincome mpd total18 нояб. 2008 г.

  • CVE-2008-5161
    60На этой неделе

    Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through

    НизкаяCVSS 3,7Готовый эксплойтEPSS 18 %

    ssh · tectia client19 нояб. 2008 г.

  • CVE-2008-5177
    45В плане

    Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to (1) execute arbitrary code on a Li

    КритическаяCVSS 10,0Proof of conceptEPSS 16 %

    insight-tech · yosemite backup20 нояб. 2008 г.

  • CVE-2008-5178
    46В плане

    Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI.

    КритическаяCVSS 9,3Proof of conceptEPSS 31 %

    opera · opera20 нояб. 2008 г.

  • CVE-2008-5179
    25Наблюдать

    Unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger allows remote att

    СредняяCVSS 5,0Эксплойта нетEPSS 16 %

    microsoft · office communications server20 нояб. 2008 г.

  • CVE-2008-5180
    41В плане

    Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consump

    СредняяCVSS 5,3Proof of conceptEPSS 67 %

    microsoft · office communicator20 нояб. 2008 г.

  • CVE-2008-5181
    24Наблюдать

    Microsoft Communicator allows remote attackers to cause a denial of service (application or device outage) via instant messages containing l

    СредняяCVSS 5,0Эксплойта нетEPSS 12 %

    microsoft · office communicator20 нояб. 2008 г.

  • CVE-2008-5191
    40В плане

    Multiple SQL injection vulnerabilities in SePortal 2.4 allow remote attackers to execute arbitrary SQL commands via the (1) poll_id paramete

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 17 %

    seportal · seportal21 нояб. 2008 г.

  • CVE-2008-5220
    44В плане

    Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers to execute arbitrary c

    КритическаяCVSS 10,0Proof of conceptEPSS 14 %

    wportfolio · wportfolio25 нояб. 2008 г.

  • CVE-2008-2431
    52В плане

    Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calling the Novell iPrint

    КритическаяCVSS 9,3Эксплойта нетEPSS 51 %

    novell · iprint25 нояб. 2008 г.

  • CVE-2008-5232
    47В плане

    Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media

    КритическаяCVSS 9,3Proof of conceptEPSS 32 %

    microsoft · windows 200025 нояб. 2008 г.

  • CVE-2008-5282
    45В плане

    Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a

    КритическаяCVSS 10,0Proof of conceptEPSS 17 %

    w3c · amaya web browser28 нояб. 2008 г.