Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: март 2010 г.

55 записей · 1 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2010-0483
    56В плане

    vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer i

    ВысокаяCVSS 7,6Готовый эксплойтEPSS 86 %

    microsoft · windows 20003 мар. 2010 г.

  • CVE-2010-0917
    37Наблюдать

    Stack-based buffer overflow in VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used,

    ВысокаяCVSS 7,6Эксплойта нетEPSS 24 %

    microsoft · windows 20003 мар. 2010 г.

  • CVE-2009-4656
    46В плане

    Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attack

    КритическаяCVSS 9,3Готовый эксплойтEPSS 31 %

    e-soft.co · dj studio pro3 мар. 2010 г.

  • CVE-2009-4660
    59В плане

    Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary co

    КритическаяCVSS 10,0Готовый эксплойтEPSS 62 %

    bigantsoft · bigant messenger3 мар. 2010 г.

  • CVE-2009-4663
    40В плане

    Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitrary code via a long a

    КритическаяCVSS 9,3Proof of conceptEPSS 10 %

    quiksoft · easymail objects3 мар. 2010 г.

  • CVE-2009-2753
    43В плане

    Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka po

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    ibm · informix dynamic server5 мар. 2010 г.

  • CVE-2009-2754
    52В плане

    Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka por

    КритическаяCVSS 10,0Proof of conceptEPSS 40 %

    ibm · informix dynamic server5 мар. 2010 г.

  • CVE-2010-0408
    26Наблюдать

    The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle

    СредняяCVSS 5,0Эксплойта нетEPSS 21 %

    apache · http server5 мар. 2010 г.

  • CVE-2010-0425
    68На этой неделе

    modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, w

    КритическаяCVSS 10,0Готовый эксплойтEPSS 94 %

    apache · http server5 мар. 2010 г.

  • CVE-2010-0434
    23Наблюдать

    The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not

    СредняяCVSS 4,3Эксплойта нетEPSS 18 %

    apache · http server5 мар. 2010 г.

  • CVE-2010-0943
    25Наблюдать

    Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to read arbitrary files

    СредняяCVSS 5,0Proof of conceptEPSS 15 %

    joomla · joomla\!8 мар. 2010 г.

  • CVE-2010-0944
    24Наблюдать

    Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to read arbitrary files

    СредняяCVSS 5,0Proof of conceptEPSS 14 %

    joomla · joomla\!8 мар. 2010 г.

  • CVE-2010-0103
    45В плане

    UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the

    КритическаяCVSS 9,3Готовый эксплойтEPSS 27 %

    energizer · duo usb10 мар. 2010 г.

  • CVE-2010-0926
    40В плане

    The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allow

    НизкаяCVSS 3,5Готовый эксплойтEPSS 30 %

    samba · samba10 мар. 2010 г.

  • CVE-2010-0257
    43В плане

    Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · excel10 мар. 2010 г.

  • CVE-2010-0258
    49В плане

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic

    ВысокаяCVSS 7,8Эксплойта нетEPSS 60 %

    microsoft · excel10 мар. 2010 г.

  • CVE-2010-0260
    44В плане

    Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Wo

    КритическаяCVSS 9,3Эксплойта нетEPSS 23 %

    microsoft · excel10 мар. 2010 г.

  • CVE-2010-0261
    44В плане

    Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 Fil

    КритическаяCVSS 9,3Эксплойта нетEPSS 23 %

    microsoft · excel10 мар. 2010 г.

  • CVE-2010-0262
    43В плане

    Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers t

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel10 мар. 2010 г.

  • CVE-2010-0263
    45В плане

    Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Offic

    КритическаяCVSS 9,3Эксплойта нетEPSS 25 %

    microsoft · excel10 мар. 2010 г.

  • CVE-2010-0264
    43В плане

    Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel fi

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel10 мар. 2010 г.

  • CVE-2010-0265
    45В плане

    Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrar

    КритическаяCVSS 9,3Proof of conceptEPSS 26 %

    microsoft · windows movie maker10 мар. 2010 г.

  • CVE-2010-0806
    90Срочно

    Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote at

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 82 %

    microsoft · internet explorer10 мар. 2010 г.

  • CVE-2010-0049
    40В плане

    Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s

    КритическаяCVSS 9,3Proof of conceptEPSS 10 %

    apple · safari15 мар. 2010 г.

  • CVE-2010-0050
    38Наблюдать

    Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s

    ВысокаяCVSS 8,8Proof of conceptEPSS 11 %

    apple · safari15 мар. 2010 г.

  • CVE-2010-0972
    34Наблюдать

    Directory traversal vulnerability in the GCalendar (com_gcalendar) component 2.1.5 for Joomla! allows remote attackers to include and execut

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    joomla · joomla\!16 мар. 2010 г.

  • CVE-2010-0397
    23Наблюдать

    The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request f

    СредняяCVSS 5,0Proof of conceptEPSS 11 %

    php · php16 мар. 2010 г.

  • CVE-2010-0985
    34Наблюдать

    Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote attackers to include and

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    joomla · joomla\!16 мар. 2010 г.

  • CVE-2010-0688
    48В плане

    Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a crafted (1) .orb or

    КритическаяCVSS 9,3Готовый эксплойтEPSS 37 %

    orbitals · orbital viewer19 мар. 2010 г.

  • CVE-2010-1029
    24Наблюдать

    Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and

    СредняяCVSS 5,0Proof of conceptEPSS 11 %

    apple · safari19 мар. 2010 г.

  • CVE-2010-1042
    20Наблюдать

    Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of servic

    СредняяCVSS 4,3Proof of conceptEPSS 10 %

    microsoft · windows media player22 мар. 2010 г.

  • CVE-2010-1056
    30Наблюдать

    Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remote attackers to inclu

    СредняяCVSS 6,8Proof of conceptEPSS 11 %

    joomla · joomla\!23 мар. 2010 г.

  • CVE-2010-1081
    24Наблюдать

    Directory traversal vulnerability in the Community Polls (com_communitypolls) component 1.5.2, and possibly earlier, for Core Joomla! allows

    СредняяCVSS 5,0Proof of conceptEPSS 14 %

    joomla · joomla\!23 мар. 2010 г.

  • CVE-2010-0437
    35Наблюдать

    The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances i

    ВысокаяCVSS 7,8Proof of conceptEPSS 12 %

    linux · linux kernel24 мар. 2010 г.

  • CVE-2010-1098
    32Наблюдать

    The ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer and other applications, allows remote attacke

    ВысокаяCVSS 7,1Эксплойта нетEPSS 14 %

    microsoft · windows vista24 мар. 2010 г.

  • CVE-2010-0167
    40В плане

    The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonk

    КритическаяCVSS 9,3Proof of conceptEPSS 10 %

    mozilla · firefox25 мар. 2010 г.

  • CVE-2010-0168
    34Наблюдать

    The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6

    ВысокаяCVSS 7,6Proof of conceptEPSS 12 %

    mozilla · firefox25 мар. 2010 г.

  • CVE-2010-1117
    34Наблюдать

    Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .

    ВысокаяCVSS 7,6Эксплойта нетEPSS 14 %

    microsoft · internet explorer25 мар. 2010 г.

  • CVE-2010-1118
    47В плане

    Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vector

    КритическаяCVSS 10,0Эксплойта нетEPSS 22 %

    microsoft · internet explorer25 мар. 2010 г.

  • CVE-2010-1119
    46В плане

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 1

    КритическаяCVSS 10,0Proof of conceptEPSS 19 %

    apple · safari25 мар. 2010 г.

  • CVE-2010-0740
    26Наблюдать

    The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) v

    СредняяCVSS 5,0Proof of conceptEPSS 20 %

    openssl · openssl26 мар. 2010 г.

  • CVE-2010-1127
    26Наблюдать

    Microsoft Internet Explorer 6 and 7 does not initialize certain data structures during execution of the createElement method, which allows r

    СредняяCVSS 5,0Эксплойта нетEPSS 18 %

    microsoft · internet explorer26 мар. 2010 г.

  • CVE-2010-1175
    41В плане

    Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XM

    КритическаяCVSS 9,3Proof of conceptEPSS 14 %

    microsoft · internet explorer29 мар. 2010 г.

  • CVE-2010-1185
    45В плане

    Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to execute arbitrary code

    КритическаяCVSS 10,0Proof of conceptEPSS 15 %

    sap · maxdb29 мар. 2010 г.

  • CVE-2010-0520
    33Наблюдать

    Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitra

    СредняяCVSS 6,8Proof of conceptEPSS 18 %

    apple · mac os x30 мар. 2010 г.

  • CVE-2010-0529
    41В плане

    Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or

    КритическаяCVSS 9,3Эксплойта нетEPSS 12 %

    apple · quicktime31 мар. 2010 г.

  • CVE-2010-0267
    47В плане

    Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary c

    КритическаяCVSS 9,3Эксплойта нетEPSS 34 %

    microsoft · internet explorer31 мар. 2010 г.

  • CVE-2010-0488
    35Наблюдать

    Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers

    СредняяCVSS 6,5Эксплойта нетEPSS 29 %

    microsoft · internet explorer31 мар. 2010 г.

  • CVE-2010-0489
    44В плане

    Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML

    КритическаяCVSS 9,3Эксплойта нетEPSS 23 %

    microsoft · internet explorer31 мар. 2010 г.

  • CVE-2010-0490
    46В плане

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrar

    КритическаяCVSS 9,3Эксплойта нетEPSS 29 %

    microsoft · internet explorer31 мар. 2010 г.

  • CVE-2010-0491
    46В плане

    Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by chan

    КритическаяCVSS 9,3Эксплойта нетEPSS 29 %

    microsoft · internet explorer31 мар. 2010 г.

  • CVE-2010-0492
    40В плане

    Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors re

    ВысокаяCVSS 8,1Эксплойта нетEPSS 27 %

    microsoft · internet explorer31 мар. 2010 г.

  • CVE-2010-0494
    24Наблюдать

    Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin

    СредняяCVSS 4,3Эксплойта нетEPSS 22 %

    microsoft · internet explorer31 мар. 2010 г.

  • CVE-2010-0805
    61На этой неделе

    The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote

    КритическаяCVSS 9,3Готовый эксплойтEPSS 80 %

    microsoft · internet explorer31 мар. 2010 г.

  • CVE-2010-0807
    46В плане

    Microsoft Internet Explorer 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    КритическаяCVSS 9,3Эксплойта нетEPSS 29 %

    microsoft · internet explorer31 мар. 2010 г.