Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: август 2010 г.

62 записей · 3 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2010-2965
    53В плане

    The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with f

    КритическаяCVSS 9,8Эксплойта нетEPSS 47 %

    rockwellautomation · 1756-enbt\/a firmware5 авг. 2010 г.

  • CVE-2010-1871
    90Срочно

    JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 83 %

    redhat · jboss enterprise application platform5 авг. 2010 г.

  • CVE-2010-2709
    50В плане

    Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute a

    КритическаяCVSS 9,3Готовый эксплойтEPSS 42 %

    hp · openview network node manager5 авг. 2010 г.

  • CVE-2010-2862
    42В плане

    Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a

    КритическаяCVSS 9,3Proof of conceptEPSS 16 %

    adobe · acrobat reader5 авг. 2010 г.

  • CVE-2010-0019
    41В плане

    Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows r

    КритическаяCVSS 9,3Эксплойта нетEPSS 14 %

    microsoft · silverlight11 авг. 2010 г.

  • CVE-2010-1258
    22Наблюдать

    Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute scri

    СредняяCVSS 4,3Эксплойта нетEPSS 16 %

    microsoft · internet explorer11 авг. 2010 г.

  • CVE-2010-1882
    44В плане

    Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Se

    КритическаяCVSS 9,3Эксплойта нетEPSS 23 %

    microsoft · windows 2003 server11 авг. 2010 г.

  • CVE-2010-1892
    50В плане

    The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malfo

    ВысокаяCVSS 7,8Эксплойта нетEPSS 61 %

    microsoft · windows 711 авг. 2010 г.

  • CVE-2010-1898
    45В плане

    The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 b

    КритическаяCVSS 9,3Эксплойта нетEPSS 25 %

    microsoft · .net framework11 авг. 2010 г.

  • CVE-2010-1900
    49В плане

    Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offi

    КритическаяCVSS 9,3Proof of conceptEPSS 39 %

    microsoft · word11 авг. 2010 г.

  • CVE-2010-1901
    43В плане

    Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offi

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · word11 авг. 2010 г.

  • CVE-2010-1902
    44В плане

    Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Conv

    КритическаяCVSS 9,3Эксплойта нетEPSS 23 %

    microsoft · word11 авг. 2010 г.

  • CVE-2010-1903
    43В плане

    Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · word11 авг. 2010 г.

  • CVE-2010-2550
    63На этой неделе

    The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R

    КритическаяCVSS 10,0Готовый эксплойтEPSS 75 %

    microsoft · windows 2003 server11 авг. 2010 г.

  • CVE-2010-2551
    51В плане

    The SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate an in

    ВысокаяCVSS 7,8Эксплойта нетEPSS 66 %

    microsoft · windows 711 авг. 2010 г.

  • CVE-2010-2552
    41В плане

    Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows

    ВысокаяCVSS 7,8Эксплойта нетEPSS 32 %

    microsoft · windows 711 авг. 2010 г.

  • CVE-2010-2553
    46В плане

    The Cinepak codec in Microsoft Windows XP SP2 and SP3, Windows Vista SP1 and SP2, and Windows 7 does not properly decompress media files, wh

    КритическаяCVSS 9,3Proof of conceptEPSS 30 %

    microsoft · windows 711 авг. 2010 г.

  • CVE-2010-2556
    45В плане

    Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Эксплойта нетEPSS 27 %

    microsoft · internet explorer11 авг. 2010 г.

  • CVE-2010-2557
    45В плане

    Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    КритическаяCVSS 9,3Эксплойта нетEPSS 27 %

    microsoft · internet explorer11 авг. 2010 г.

  • CVE-2010-2558
    43В плане

    Race condition in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (me

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · internet explorer11 авг. 2010 г.

  • CVE-2010-2559
    45В плане

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    КритическаяCVSS 9,3Эксплойта нетEPSS 27 %

    microsoft · internet explorer11 авг. 2010 г.

  • CVE-2010-2560
    44В плане

    Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Эксплойта нетEPSS 24 %

    microsoft · internet explorer11 авг. 2010 г.

  • CVE-2010-2561
    44В плане

    Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Proof of conceptEPSS 24 %

    microsoft · xml core services11 авг. 2010 г.

  • CVE-2010-2562
    42В плане

    Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse

    КритическаяCVSS 9,3Эксплойта нетEPSS 17 %

    microsoft · excel11 авг. 2010 г.

  • CVE-2010-2564
    44В плане

    Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial

    КритическаяCVSS 9,3Эксплойта нетEPSS 22 %

    microsoft · windows movie maker11 авг. 2010 г.

  • CVE-2010-2566
    42В плане

    The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, does not properly valid

    КритическаяCVSS 9,3Эксплойта нетEPSS 15 %

    microsoft · windows 2003 server11 авг. 2010 г.

  • CVE-2010-2861
    99Срочно

    Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to re

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 99 %

    adobe · coldfusion11 авг. 2010 г.

  • CVE-2010-1797
    46В плане

    Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload

    КритическаяCVSS 9,3Proof of conceptEPSS 30 %

    apple · iphone os16 авг. 2010 г.

  • CVE-2010-1799
    47В плане

    Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute

    КритическаяCVSS 9,3Готовый эксплойтEPSS 33 %

    apple · quicktime16 авг. 2010 г.

  • CVE-2010-1870
    48В плане

    The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and po

    СредняяCVSS 5,0Готовый эксплойтEPSS 92 %

    apache · struts17 авг. 2010 г.

  • CVE-2010-2710
    43В плане

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via u

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    hp · openview network node manager20 авг. 2010 г.

  • CVE-2010-1527
    48В плане

    Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url p

    КритическаяCVSS 9,3Готовый эксплойтEPSS 35 %

    novell · iprint23 авг. 2010 г.

  • CVE-2010-3106
    48В плане

    The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, whi

    КритическаяCVSS 9,3Готовый эксплойтEPSS 37 %

    novell · iprint23 авг. 2010 г.

  • CVE-2010-3055
    34Наблюдать

    The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its out

    ВысокаяCVSS 7,5Эксплойта нетEPSS 14 %

    phpmyadmin · phpmyadmin24 авг. 2010 г.

  • CVE-2009-4988
    60На этой неделе

    Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arb

    КритическаяCVSS 10,0Готовый эксплойтEPSS 65 %

    sap · business one 2005-a25 авг. 2010 г.

  • CVE-2010-3124
    41В плане

    Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers,

    КритическаяCVSS 9,3Proof of conceptEPSS 12 %

    videolan · vlc media player26 авг. 2010 г.

  • CVE-2010-3127
    41В плане

    Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitra

    КритическаяCVSS 9,3Proof of conceptEPSS 13 %

    adobe · photoshop26 авг. 2010 г.

  • CVE-2010-3131
    44В плане

    Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3

    КритическаяCVSS 9,3Proof of conceptEPSS 22 %

    mozilla · firefox26 авг. 2010 г.

  • CVE-2010-3132
    41В плане

    Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, a

    КритическаяCVSS 9,3Proof of conceptEPSS 14 %

    adobe · dreamweaver26 авг. 2010 г.

  • CVE-2010-2866
    41В плане

    Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of servi

    КритическаяCVSS 9,3Proof of conceptEPSS 13 %

    adobe · shockwave player26 авг. 2010 г.

  • CVE-2010-3138
    45В плане

    Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via

    КритическаяCVSS 9,3Proof of conceptEPSS 27 %

    microsoft · windows media player27 авг. 2010 г.

  • CVE-2010-3139
    44В плане

    Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attac

    КритическаяCVSS 9,3Proof of conceptEPSS 23 %

    microsoft · windows27 авг. 2010 г.

  • CVE-2010-3140
    42В плане

    Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly

    КритическаяCVSS 9,3Proof of conceptEPSS 15 %

    microsoft · windows xp27 авг. 2010 г.

  • CVE-2010-3141
    42В плане

    Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary cod

    КритическаяCVSS 9,3Proof of conceptEPSS 15 %

    microsoft · powerpoint27 авг. 2010 г.

  • CVE-2010-3142
    42В плане

    Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitr

    КритическаяCVSS 9,3Proof of conceptEPSS 16 %

    microsoft · powerpoint27 авг. 2010 г.

  • CVE-2010-3143
    43В плане

    Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary co

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · windows27 авг. 2010 г.

  • CVE-2010-3144
    41В плане

    Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows

    КритическаяCVSS 9,3Proof of conceptEPSS 13 %

    microsoft · windows server 200327 авг. 2010 г.

  • CVE-2010-3145
    40В плане

    Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Microsoft Windows Vista

    КритическаяCVSS 9,3Proof of conceptEPSS 10 %

    microsoft · windows vista27 авг. 2010 г.

  • CVE-2010-3146
    41В плане

    Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse (1) mso.

    КритическаяCVSS 9,3Proof of conceptEPSS 13 %

    microsoft · groove27 авг. 2010 г.

  • CVE-2010-3147
    43В плане

    Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 20

    КритическаяCVSS 9,3Proof of conceptEPSS 18 %

    microsoft · outlook express27 авг. 2010 г.

  • CVE-2010-3148
    41В плане

    Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file i

    КритическаяCVSS 9,3Proof of conceptEPSS 13 %

    microsoft · visio27 авг. 2010 г.

  • CVE-2010-3149
    41В плане

    Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0(376), 3.0.1.0 (3027), and probably other versions allows local users,

    КритическаяCVSS 9,3Proof of conceptEPSS 13 %

    adobe · device central cs527 авг. 2010 г.

  • CVE-2010-3150
    42В плане

    Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 (314 (MC: 160820)) allows local users, and possibly remote attackers, to

    КритическаяCVSS 9,3Proof of conceptEPSS 15 %

    adobe · premier pro cs427 авг. 2010 г.

  • CVE-2010-3151
    42В плане

    Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitra

    КритическаяCVSS 9,3Proof of conceptEPSS 15 %

    adobe · onlocation cs427 авг. 2010 г.

  • CVE-2010-3152
    42В плане

    Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users,

    КритическаяCVSS 9,3Proof of conceptEPSS 16 %

    adobe · illustrator27 авг. 2010 г.

  • CVE-2010-3153
    41В плане

    Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier,

    КритическаяCVSS 9,3Proof of conceptEPSS 13 %

    adobe · indesign cs427 авг. 2010 г.

  • CVE-2010-3154
    40В плане

    Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arb

    КритическаяCVSS 9,3Proof of conceptEPSS 11 %

    adobe · extension manager cs527 авг. 2010 г.

  • CVE-2010-3155
    41В плане

    Untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52 allows local users, and possibly remote attackers, to

    КритическаяCVSS 9,3Proof of conceptEPSS 12 %

    adobe · extendedscript toolkit cs527 авг. 2010 г.

  • CVE-2010-3187
    46В плане

    Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command.

    КритическаяCVSS 10,0Proof of conceptEPSS 20 %

    ibm · aix30 авг. 2010 г.

  • CVE-2010-3035
    62На этой неделе

    Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote atta

    ВысокаяCVSS 7,5KEVГотовый эксплойтEPSS 5 %

    cisco · ios xr30 авг. 2010 г.

  • CVE-2010-1818
    50В плане

    The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers

    КритическаяCVSS 9,3Готовый эксплойтEPSS 42 %

    apple · quicktime31 авг. 2010 г.

  • CVE-2010-3189
    49В плане

    The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote at

    КритическаяCVSS 9,3Готовый эксплойтEPSS 39 %

    trendmicro · internet security31 авг. 2010 г.