Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: октябрь 2010 г.

60 записей · 1 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2010-1623
    26Наблюдать

    Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) be

    СредняяCVSS 5,0Эксплойта нетEPSS 20 %

    apache · apr-util4 окт. 2010 г.

  • CVE-2010-2889
    45В плане

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to exec

    КритическаяCVSS 9,3Эксплойта нетEPSS 27 %

    adobe · acrobat6 окт. 2010 г.

  • CVE-2010-3631
    41В плане

    Array index error in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execute arbitrary code via

    КритическаяCVSS 9,3Proof of conceptEPSS 11 %

    adobe · acrobat6 окт. 2010 г.

  • CVE-2010-3886
    22Наблюдать

    The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID val

    СредняяCVSS 4,3Proof of conceptEPSS 16 %

    microsoft · internet explorer8 окт. 2010 г.

  • CVE-2010-2951
    29Наблюдать

    dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allo

    СредняяCVSS 5,0Эксплойта нетEPSS 31 %

    squid-cache · squid12 окт. 2010 г.

  • CVE-2010-1883
    38Наблюдать

    Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1

    ВысокаяCVSS 7,8Эксплойта нетEPSS 23 %

    microsoft · windows 2003 server13 окт. 2010 г.

  • CVE-2010-2745
    44В плане

    Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-ass

    КритическаяCVSS 9,3Proof of conceptEPSS 23 %

    microsoft · windows media player13 окт. 2010 г.

  • CVE-2010-2746
    41В плане

    Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Wi

    ВысокаяCVSS 7,6Proof of conceptEPSS 35 %

    microsoft · windows 2003 server13 окт. 2010 г.

  • CVE-2010-2747
    43В плане

    Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which all

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · office13 окт. 2010 г.

  • CVE-2010-2748
    43В плане

    Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allow

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · office13 окт. 2010 г.

  • CVE-2010-2750
    43В плане

    Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word do

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · office13 окт. 2010 г.

  • CVE-2010-3214
    44В плане

    Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Con

    КритическаяCVSS 9,3Эксплойта нетEPSS 24 %

    microsoft · office13 окт. 2010 г.

  • CVE-2010-3215
    43В плане

    Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which al

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · office13 окт. 2010 г.

  • CVE-2010-3216
    43В плане

    Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing book

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · office13 окт. 2010 г.

  • CVE-2010-3217
    49В плане

    Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List

    КритическаяCVSS 9,3Эксплойта нетEPSS 40 %

    microsoft · word13 окт. 2010 г.

  • CVE-2010-3218
    44В плане

    Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word docu

    КритическаяCVSS 9,3Эксплойта нетEPSS 23 %

    microsoft · word13 окт. 2010 г.

  • CVE-2010-3219
    43В плане

    Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that trig

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · word13 окт. 2010 г.

  • CVE-2010-3220
    43В плане

    Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · office13 окт. 2010 г.

  • CVE-2010-3221
    43В плане

    Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Wor

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · office13 окт. 2010 г.

  • CVE-2010-3223
    34Наблюдать

    The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permis

    ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %

    microsoft · windows server 200813 окт. 2010 г.

  • CVE-2010-3225
    35Наблюдать

    Use-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows Vista SP1 and SP2 and Windows 7 allows remote

    ВысокаяCVSS 7,6Эксплойта нетEPSS 16 %

    microsoft · windows vista13 окт. 2010 г.

  • CVE-2010-3228
    43В плане

    The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · .net framework13 окт. 2010 г.

  • CVE-2010-3229
    43В плане

    The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Window

    ВысокаяCVSS 7,1Эксплойта нетEPSS 50 %

    microsoft · windows 713 окт. 2010 г.

  • CVE-2010-3230
    43В плане

    Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record inf

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3231
    43В плане

    Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record informati

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3232
    43В плане

    Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Co

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3233
    43В плане

    Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3234
    43В плане

    Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a craft

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3235
    43В плане

    Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a craft

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3236
    43В плане

    Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate rec

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3237
    43В плане

    Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbit

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3238
    43В плане

    Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remo

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3239
    43В плане

    Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafte

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3240
    43В плане

    Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3241
    43В плане

    Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-form

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3242
    43В плане

    Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record informati

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel13 окт. 2010 г.

  • CVE-2010-3243
    22Наблюдать

    Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microso

    СредняяCVSS 4,3Эксплойта нетEPSS 15 %

    microsoft · sharepoint server13 окт. 2010 г.

  • CVE-2010-3325
    24Наблюдать

    Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Sheets (CSS) documents, w

    СредняяCVSS 4,3Proof of conceptEPSS 22 %

    microsoft · internet explorer13 окт. 2010 г.

  • CVE-2010-3326
    44В плане

    Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    КритическаяCVSS 9,3Эксплойта нетEPSS 24 %

    microsoft · internet explorer13 окт. 2010 г.

  • CVE-2010-3327
    21Наблюдать

    The implementation of HTML content creation in Microsoft Internet Explorer 6 through 8 does not remove the Anchor element during pasting and

    СредняяCVSS 4,3Эксплойта нетEPSS 14 %

    microsoft · internet explorer13 окт. 2010 г.

  • CVE-2010-3328
    45В плане

    Use-after-free vulnerability in the CAttrArray::PrivateFind function in mshtml.dll in Microsoft Internet Explorer 6 through 8 allows remote

    ВысокаяCVSS 8,8Эксплойта нетEPSS 31 %

    microsoft · internet explorer13 окт. 2010 г.

  • CVE-2010-3329
    46В плане

    mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office documen

    КритическаяCVSS 9,3Proof of conceptEPSS 28 %

    microsoft · internet explorer13 окт. 2010 г.

  • CVE-2010-3330
    33Наблюдать

    Microsoft Internet Explorer 6 through 8 does not properly restrict script access to content from a different (1) domain or (2) zone, which a

    СредняяCVSS 6,5Эксплойта нетEPSS 22 %

    microsoft · internet explorer13 окт. 2010 г.

  • CVE-2010-3331
    44В плане

    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory in certain circumstances involving use of Microsoft Word

    КритическаяCVSS 9,3Эксплойта нетEPSS 24 %

    microsoft · internet explorer13 окт. 2010 г.

  • CVE-2010-2415
    40В плане

    Unspecified vulnerability in the Change Data Capture component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows r

    СредняяCVSS 4,9Готовый эксплойтEPSS 9 %

    oracle · database server13 окт. 2010 г.

  • CVE-2010-3585
    52В плане

    Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrit

    КритическаяCVSS 9,0Готовый эксплойтEPSS 52 %

    oracle · vm14 окт. 2010 г.

  • CVE-2010-0219
    67На этой неделе

    Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default pass

    КритическаяCVSS 10,0Готовый эксплойтEPSS 90 %

    apache · axis218 окт. 2010 г.

  • CVE-2010-3747
    47В плане

    An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not p

    КритическаяCVSS 9,3Готовый эксплойтEPSS 34 %

    realnetworks · realplayer18 окт. 2010 г.

  • CVE-2010-3749
    45В плане

    The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to

    КритическаяCVSS 9,3Proof of conceptEPSS 25 %

    realnetworks · realplayer18 окт. 2010 г.

  • CVE-2010-3552
    64На этой неделе

    Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to a

    КритическаяCVSS 10,0Готовый эксплойтEPSS 80 %

    sun · jre19 окт. 2010 г.

  • CVE-2010-3563
    65На этой неделе

    Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect

    КритическаяCVSS 10,0Готовый эксплойтEPSS 84 %

    sun · jre19 окт. 2010 г.

  • CVE-2010-3573
    23Наблюдать

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote at

    СредняяCVSS 5,1Proof of conceptEPSS 10 %

    sun · jre19 окт. 2010 г.

  • CVE-2010-3179
    40В плане

    Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before

    КритическаяCVSS 9,3Proof of conceptEPSS 10 %

    mozilla · firefox21 окт. 2010 г.

  • CVE-2010-3714
    40В плане

    The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x bef

    ВысокаяCVSS 7,1Готовый эксплойтEPSS 24 %

    typo3 · typo325 окт. 2010 г.

  • CVE-2010-3653
    59В плане

    The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a de

    КритическаяCVSS 9,3Готовый эксплойтEPSS 74 %

    adobe · shockwave player26 окт. 2010 г.

  • CVE-2010-4094
    40В плане

    The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it

    СредняяCVSS 5,0Готовый эксплойтEPSS 64 %

    ibm · rational quality manager26 окт. 2010 г.

  • CVE-2010-3227
    43В плане

    Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · windows 726 окт. 2010 г.

  • CVE-2010-2891
    34Наблюдать

    Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    tu-braunschweig · libsmi27 окт. 2010 г.

  • CVE-2010-3765
    94Срочно

    Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x bef

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 83 %

    mozilla · firefox27 окт. 2010 г.

  • CVE-2010-3654
    58В плане

    Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authp

    КритическаяCVSS 9,3Готовый эксплойтEPSS 69 %

    adobe · flash player29 окт. 2010 г.