Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: март 2009 г.

42 записей · 2 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2008-6347
    39Наблюдать

    PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b component for Joomla

    ВысокаяCVSS 7,5Proof of conceptEPSS 31 %

    joomla · joomla2 мар. 2009 г.

  • CVE-2009-0751
    23Наблюдать

    Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of he

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    yaws · yaws2 мар. 2009 г.

  • CVE-2008-6393
    45В плане

    PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file

    КритическаяCVSS 10,0Proof of conceptEPSS 18 %

    jabber · jabber client3 мар. 2009 г.

  • CVE-2009-0755
    23Наблюдать

    The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    poppler · poppler3 мар. 2009 г.

  • CVE-2009-0756
    23Наблюдать

    The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    poppler · poppler3 мар. 2009 г.

  • CVE-2009-0367
    40В плане

    The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by usin

    КритическаяCVSS 9,3Proof of conceptEPSS 10 %

    wesnoth · wesnoth4 мар. 2009 г.

  • CVE-2009-0815
    33Наблюдать

    The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alp

    СредняяCVSS 5,0Готовый эксплойтEPSS 42 %

    typo3 · typo34 мар. 2009 г.

  • CVE-2009-0819
    19Наблюдать

    sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash)

    СредняяCVSS 4,0Proof of conceptEPSS 10 %

    mysql · mysql4 мар. 2009 г.

  • CVE-2009-0849
    35Наблюдать

    Stack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote attackers to (1) execute arbitrary code on Linu

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    novastor · novanet9 мар. 2009 г.

  • CVE-2009-0850
    26Наблюдать

    Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web

    СредняяCVSS 4,3Эксплойта нетEPSS 29 %

    bitdefender · internet security9 мар. 2009 г.

  • CVE-2009-0081
    47В плане

    The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vis

    КритическаяCVSS 9,3Эксплойта нетEPSS 32 %

    microsoft · windows 200010 мар. 2009 г.

  • CVE-2009-0085
    33Наблюдать

    The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gol

    ВысокаяCVSS 7,1Эксплойта нетEPSS 15 %

    microsoft · windows 200010 мар. 2009 г.

  • CVE-2009-0836
    53В плане

    Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing

    КритическаяCVSS 10,0Готовый эксплойтEPSS 42 %

    foxitsoftware · reader10 мар. 2009 г.

  • CVE-2009-0837
    63На этой неделе

    Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary cod

    КритическаяCVSS 10,0Готовый эксплойтEPSS 75 %

    foxit · reader3.010 мар. 2009 г.

  • CVE-2008-4563
    49В плане

    Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager

    КритическаяCVSS 10,0Эксплойта нетEPSS 28 %

    ibm · tivoli storage manager11 мар. 2009 г.

  • CVE-2009-0093
    19Наблюдать

    Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restr

    НизкаяCVSS 3,5Эксплойта нетEPSS 17 %

    microsoft · windows 200011 мар. 2009 г.

  • CVE-2009-0094
    29Наблюдать

    The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap"

    СредняяCVSS 5,5Эксплойта нетEPSS 23 %

    microsoft · windows 200011 мар. 2009 г.

  • CVE-2009-0233
    31Наблюдать

    The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008,

    СредняяCVSS 5,8Эксплойта нетEPSS 27 %

    microsoft · windows 200011 мар. 2009 г.

  • CVE-2009-0234
    35Наблюдать

    The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008

    СредняяCVSS 6,4Эксплойта нетEPSS 34 %

    microsoft · windows 200011 мар. 2009 г.

  • CVE-2009-0880
    36Наблюдать

    Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to loa

    СредняяCVSS 6,8Готовый эксплойтEPSS 31 %

    ibm · director12 мар. 2009 г.

  • CVE-2009-0922
    19Наблюдать

    PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumptio

    СредняяCVSS 4,0Proof of conceptEPSS 10 %

    postgresql · postgresql17 мар. 2009 г.

  • CVE-2009-0932
    39Наблюдать

    Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remot

    СредняяCVSS 6,4Proof of conceptEPSS 45 %

    debian · horde17 мар. 2009 г.

  • CVE-2008-6482
    34Наблюдать

    PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Joomla!, when register_gl

    СредняяCVSS 6,8Proof of conceptEPSS 22 %

    joomla · joomla18 мар. 2009 г.

  • CVE-2008-6483
    38Наблюдать

    PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_googlebase or Froogle)

    ВысокаяCVSS 7,5Proof of conceptEPSS 25 %

    virtuemart-solutions · com googlebase18 мар. 2009 г.

  • CVE-2009-0927
    94Срочно

    Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to e

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 96 %

    adobe · acrobat reader19 мар. 2009 г.

  • CVE-2009-1025
    42В плане

    PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute arbitrary PHP code v

    ВысокаяCVSS 7,5Proof of conceptEPSS 40 %

    beerwin · phplinkadmin19 мар. 2009 г.

  • CVE-2009-1028
    47В плане

    Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file.

    КритическаяCVSS 9,3Готовый эксплойтEPSS 33 %

    edisys · ezip wizard19 мар. 2009 г.

  • CVE-2009-1029
    47В плане

    Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, r

    КритическаяCVSS 9,3Готовый эксплойтEPSS 31 %

    poppeeper · pop peeper19 мар. 2009 г.

  • CVE-2009-1031
    34Наблюдать

    Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to

    ВысокаяCVSS 7,8Proof of conceptEPSS 11 %

    solarwinds · serv-u file server19 мар. 2009 г.

  • CVE-2008-6504
    31Наблюдать

    ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not

    СредняяCVSS 5,0Proof of conceptEPSS 36 %

    opensymphony · xwork23 мар. 2009 г.

  • CVE-2008-6505
    42В плане

    Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbi

    СредняяCVSS 5,0Proof of conceptEPSS 72 %

    apache · struts23 мар. 2009 г.

  • CVE-2009-1043
    49В плане

    Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vector

    КритическаяCVSS 10,0Эксплойта нетEPSS 30 %

    microsoft · internet explorer23 мар. 2009 г.

  • CVE-2008-6508
    55В плане

    Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to byp

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 83 %

    igniterealtime · openfire23 мар. 2009 г.

  • CVE-2009-0920
    52В плане

    Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers t

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 74 %

    hp · network node manager24 мар. 2009 г.

  • CVE-2009-0921
    44В плане

    Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote att

    КритическаяCVSS 10,0Эксплойта нетEPSS 13 %

    hp · network node manager24 мар. 2009 г.

  • CVE-2009-0928
    43В плане

    Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    adobe · acrobat24 мар. 2009 г.

  • CVE-2009-1061
    40В плане

    Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to execute a

    КритическаяCVSS 9,3Эксплойта нетEPSS 11 %

    adobe · acrobat reader24 мар. 2009 г.

  • CVE-2009-0215
    48В плане

    Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and L

    КритическаяCVSS 9,3Готовый эксплойтEPSS 36 %

    ibm · access support activex control25 мар. 2009 г.

  • CVE-2009-1088
    40В плане

    Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted

    КритическаяCVSS 9,0Proof of conceptEPSS 11 %

    hannonhill · cascade25 мар. 2009 г.

  • CVE-2009-1068
    41В плане

    Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remote attackers to cause

    КритическаяCVSS 9,3Proof of conceptEPSS 14 %

    bsplayer · bs.player26 мар. 2009 г.

  • CVE-2009-1151
    98Срочно

    Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inje

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 96 %

    phpmyadmin · phpmyadmin26 мар. 2009 г.

  • CVE-2009-1169
    40В плане

    The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to c

    КритическаяCVSS 9,3Proof of conceptEPSS 10 %

    mozilla · firefox26 мар. 2009 г.