Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: апрель 2010 г.

71 записей · 3 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2010-0094
    54В плане

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 al

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 80 %

    sun · jre1 апр. 2010 г.

  • CVE-2010-0838
    34Наблюдать

    Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote at

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    sun · jre1 апр. 2010 г.

  • CVE-2010-0840
    98Срочно

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 96 %

    oracle · jre1 апр. 2010 г.

  • CVE-2010-0842
    53В плане

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 77 %

    sun · jre1 апр. 2010 г.

  • CVE-2010-1225
    45В плане

    The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtu

    КритическаяCVSS 9,3Proof of conceptEPSS 27 %

    microsoft · virtual pc1 апр. 2010 г.

  • CVE-2010-1240
    59В плане

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in t

    КритическаяCVSS 9,3Готовый эксплойтEPSS 73 %

    adobe · acrobat reader5 апр. 2010 г.

  • CVE-2009-2936
    49В плане

    The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 63 %

    varnish.projects.linpro · varnish5 апр. 2010 г.

  • CVE-2010-1223
    45В плане

    Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the w

    КритическаяCVSS 10,0Эксплойта нетEPSS 16 %

    ca · xosoft content distribution7 апр. 2010 г.

  • CVE-2010-1299
    23Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is disabled and register_

    СредняяCVSS 5,1Proof of conceptEPSS 10 %

    dynpg · dynpg7 апр. 2010 г.

  • CVE-2010-1304
    24Наблюдать

    Directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! allows remote attacker

    СредняяCVSS 5,0Proof of conceptEPSS 14 %

    joomla · joomla\!8 апр. 2010 г.

  • CVE-2010-1305
    26Наблюдать

    Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly other versions before

    СредняяCVSS 5,0Proof of conceptEPSS 20 %

    joomlamo · com jinventory8 апр. 2010 г.

  • CVE-2010-1306
    35Наблюдать

    Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbi

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    joomla · joomla\!8 апр. 2010 г.

  • CVE-2010-1307
    23Наблюдать

    Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers to read arbitrary f

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    joomla · joomla\!8 апр. 2010 г.

  • CVE-2010-1308
    24Наблюдать

    Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read arbitrary files via a

    СредняяCVSS 5,0Proof of conceptEPSS 13 %

    joomla · joomla\!8 апр. 2010 г.

  • CVE-2010-1312
    24Наблюдать

    Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote attackers to read a

    СредняяCVSS 5,0Proof of conceptEPSS 13 %

    ijoomla · com news portal8 апр. 2010 г.

  • CVE-2010-1314
    25Наблюдать

    Directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arb

    СредняяCVSS 5,0Proof of conceptEPSS 15 %

    joomla · joomla\!8 апр. 2010 г.

  • CVE-2010-1340
    24Наблюдать

    Directory traversal vulnerability in jresearch.php in the J!Research (com_jresearch) component for Joomla! allows remote attackers to read a

    СредняяCVSS 5,0Proof of conceptEPSS 13 %

    joomla · joomla\!9 апр. 2010 г.

  • CVE-2010-1345
    25Наблюдать

    Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attackers to read arb

    СредняяCVSS 5,0Proof of conceptEPSS 16 %

    cookex · com ckforms9 апр. 2010 г.

  • CVE-2009-3732
    45В плане

    Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary

    КритическаяCVSS 10,0Proof of conceptEPSS 16 %

    vmware · ace12 апр. 2010 г.

  • CVE-2010-1152
    23Наблюдать

    memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a long line that trigg

    СредняяCVSS 5,0Proof of conceptEPSS 10 %

    memcachedb · memcached12 апр. 2010 г.

  • CVE-2010-1349
    46В плане

    Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which trig

    КритическаяCVSS 10,0Proof of conceptEPSS 19 %

    opera · opera browser12 апр. 2010 г.

  • CVE-2010-1352
    24Наблюдать

    Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote attackers to read ar

    СредняяCVSS 5,0Proof of conceptEPSS 13 %

    jooforge · com jukebox12 апр. 2010 г.

  • CVE-2010-1353
    26Наблюдать

    Directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to read arbitrary files v

    СредняяCVSS 5,0Proof of conceptEPSS 18 %

    joomla · joomla\!12 апр. 2010 г.

  • CVE-2010-1354
    25Наблюдать

    Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers to read arbitrary fil

    СредняяCVSS 5,0Proof of conceptEPSS 15 %

    joomla · joomla\!12 апр. 2010 г.

  • CVE-2010-0866
    40В плане

    Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated users to affect confi

    СредняяCVSS 6,5Готовый эксплойтEPSS 11 %

    oracle · database server13 апр. 2010 г.

  • CVE-2010-0870
    40В плане

    Unspecified vulnerability in the Change Data Capture component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to

    НизкаяCVSS 3,6Готовый эксплойтEPSS 12 %

    oracle · database server13 апр. 2010 г.

  • CVE-2010-0024
    23Наблюдать

    The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 20

    СредняяCVSS 5,0Эксплойта нетEPSS 10 %

    microsoft · windows 200014 апр. 2010 г.

  • CVE-2010-0025
    26Наблюдать

    The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 20

    СредняяCVSS 5,0Эксплойта нетEPSS 21 %

    microsoft · windows 200014 апр. 2010 г.

  • CVE-2010-0254
    35Наблюдать

    Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote at

    ВысокаяCVSS 7,6Эксплойта нетEPSS 17 %

    microsoft · visio14 апр. 2010 г.

  • CVE-2010-0256
    35Наблюдать

    Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files,

    ВысокаяCVSS 7,6Эксплойта нетEPSS 17 %

    microsoft · visio14 апр. 2010 г.

  • CVE-2010-0268
    43В плане

    Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP S

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · windows media player14 апр. 2010 г.

  • CVE-2010-0269
    49В плане

    The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Ser

    КритическаяCVSS 10,0Proof of conceptEPSS 28 %

    microsoft · windows 714 апр. 2010 г.

  • CVE-2010-0270
    54В плане

    The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allow

    КритическаяCVSS 10,0Proof of conceptEPSS 48 %

    microsoft · windows 714 апр. 2010 г.

  • CVE-2010-0476
    50В плане

    The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB server

    КритическаяCVSS 10,0Proof of conceptEPSS 34 %

    microsoft · windows 714 апр. 2010 г.

  • CVE-2010-0477
    55В плане

    The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which al

    КритическаяCVSS 10,0Proof of conceptEPSS 50 %

    microsoft · windows 714 апр. 2010 г.

  • CVE-2010-0478
    55В плане

    Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows

    КритическаяCVSS 9,3Готовый эксплойтEPSS 60 %

    microsoft · windows 200014 апр. 2010 г.

  • CVE-2010-0479
    44В плане

    Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via

    КритическаяCVSS 9,3Эксплойта нетEPSS 23 %

    microsoft · publisher14 апр. 2010 г.

  • CVE-2010-0480
    57В плане

    Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista

    КритическаяCVSS 9,3Готовый эксплойтEPSS 67 %

    microsoft · windows 200014 апр. 2010 г.

  • CVE-2010-0486
    44В плане

    The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3,

    КритическаяCVSS 9,3Эксплойта нетEPSS 22 %

    microsoft · windows 714 апр. 2010 г.

  • CVE-2010-0487
    44В плане

    The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft W

    КритическаяCVSS 9,3Эксплойта нетEPSS 24 %

    microsoft · windows 714 апр. 2010 г.

  • CVE-2010-0812
    30Наблюдать

    Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass i

    СредняяCVSS 6,4Эксплойта нетEPSS 17 %

    microsoft · windows xp14 апр. 2010 г.

  • CVE-2010-0432
    24Наблюдать

    Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Openta

    СредняяCVSS 4,3Proof of conceptEPSS 22 %

    apache · ofbiz15 апр. 2010 г.

  • CVE-2010-1423
    54В плане

    Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and ot

    КритическаяCVSS 9,3Готовый эксплойтEPSS 55 %

    oracle · jdk15 апр. 2010 г.

  • CVE-2010-1465
    46В плане

    Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitrary code via a long

    КритическаяCVSS 9,3Готовый эксплойтEPSS 31 %

    trellian · ftp16 апр. 2010 г.

  • CVE-2010-1470
    34Наблюдать

    Directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Joomla! allows remote attackers to read arbitrary files and po

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    joomla · joomla19 апр. 2010 г.

  • CVE-2010-1471
    35Наблюдать

    Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attackers to read arbitrary

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    joomla · joomla\!19 апр. 2010 г.

  • CVE-2010-1472
    34Наблюдать

    Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attackers to read arbitra

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    joomla · joomla\!19 апр. 2010 г.

  • CVE-2009-4769
    48В плане

    Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remote attackers to exec

    КритическаяCVSS 9,3Готовый эксплойтEPSS 37 %

    jasper · httpdx20 апр. 2010 г.

  • CVE-2010-1318
    57В плане

    Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile

    КритическаяCVSS 10,0Готовый эксплойтEPSS 58 %

    realnetworks · helix mobile server20 апр. 2010 г.

  • CVE-2010-1489
    21Наблюдать

    The XSS Filter in Microsoft Internet Explorer 8 does not properly perform neutering for the SCRIPT tag, which allows remote attackers to con

    СредняяCVSS 4,3Эксплойта нетEPSS 14 %

    microsoft · internet explorer20 апр. 2010 г.

  • CVE-2010-0886
    61На этой неделе

    Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 1

    КритическаяCVSS 10,0Готовый эксплойтEPSS 69 %

    sun · jre20 апр. 2010 г.

  • CVE-2010-1033
    41В плане

    Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote

    КритическаяCVSS 9,3Proof of conceptEPSS 12 %

    hp · operations manager21 апр. 2010 г.

  • CVE-2010-1320
    20Наблюдать

    Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x before 1.8.2 all

    СредняяCVSS 4,0Proof of conceptEPSS 11 %

    mit · kerberos 522 апр. 2010 г.

  • CVE-2010-1157
    26Наблюдать

    Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by

    НизкаяCVSS 2,6Proof of conceptEPSS 52 %

    apache · tomcat23 апр. 2010 г.

  • CVE-2010-1491
    24Наблюдать

    Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to read arbitrary files

    СредняяCVSS 5,0Proof of conceptEPSS 13 %

    joomla · joomla\!23 апр. 2010 г.

  • CVE-2010-1494
    25Наблюдать

    Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to read arbitrary files v

    СредняяCVSS 5,0Proof of conceptEPSS 16 %

    joomla · joomla\!23 апр. 2010 г.

  • CVE-2010-1495
    36Наблюдать

    Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to read arbitrary files vi

    ВысокаяCVSS 7,5Proof of conceptEPSS 18 %

    matamko · com matamko23 апр. 2010 г.

  • CVE-2010-1531
    35Наблюдать

    Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to read arbitrary files v

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    joomla · joomla\!26 апр. 2010 г.

  • CVE-2010-1532
    25Наблюдать

    Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remote attackers to read

    СредняяCVSS 5,0Proof of conceptEPSS 15 %

    givesight · com powermail26 апр. 2010 г.

  • CVE-2010-1533
    35Наблюдать

    Directory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files v

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    joomla · joomla\!26 апр. 2010 г.

  • CVE-2010-1534
    24Наблюдать

    Directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows remote attackers to read arbitrary files v

    СредняяCVSS 5,0Proof of conceptEPSS 13 %

    joomla · joomla\!26 апр. 2010 г.

  • CVE-2010-1535
    35Наблюдать

    Directory traversal vulnerability in the TRAVELbook (com_travelbook) component 1.0.1 for Joomla! allows remote attackers to read arbitrary f

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    joomla · joomla\!26 апр. 2010 г.

  • CVE-2010-1429
    40В плане

    Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attacke

    СредняяCVSS 5,0Готовый эксплойтEPSS 53 %

    redhat · jboss enterprise application platform28 апр. 2010 г.

  • CVE-2010-1586
    20Наблюдать

    Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbi

    СредняяCVSS 4,3Proof of conceptEPSS 10 %

    hp · system management homepage28 апр. 2010 г.

  • CVE-2010-1587
    43В плане

    The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a /

    СредняяCVSS 5,0Готовый эксплойтEPSS 78 %

    apache · activemq28 апр. 2010 г.

  • CVE-2010-0738
    73На этой неделе

    The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 a

    СредняяCVSS 5,3KEVГотовый эксплойтEPSS 74 %

    redhat · jboss enterprise application platform28 апр. 2010 г.

  • CVE-2010-1428
    78На этой неделе

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09

    ВысокаяCVSS 7,5KEVГотовый эксплойтEPSS 61 %

    redhat · jboss enterprise application platform28 апр. 2010 г.

  • CVE-2010-1597
    41В плане

    Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbitrary code via a ZIP

    КритическаяCVSS 9,3Proof of conceptEPSS 11 %

    zipgenius · zipgenius29 апр. 2010 г.

  • CVE-2010-1601
    25Наблюдать

    Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to read arbitrary files vi

    СредняяCVSS 5,0Proof of conceptEPSS 15 %

    joomla · joomla\!29 апр. 2010 г.

  • CVE-2010-1602
    35Наблюдать

    Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attackers to read arbitrar

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    joomla · joomla\!29 апр. 2010 г.

  • CVE-2010-0817
    26Наблюдать

    Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and Sha

    СредняяCVSS 4,3Proof of conceptEPSS 28 %

    microsoft · sharepoint server29 апр. 2010 г.