Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: январь 2011 г.

68 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2010-4669
    40В плане

    The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows S

    ВысокаяCVSS 7,8Proof of conceptEPSS 29 %

    microsoft · windows 2003 server7 янв. 2011 г.

  • CVE-2010-2642
    34Наблюдать

    Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possi

    ВысокаяCVSS 7,6Эксплойта нетEPSS 14 %

    t1lib · t1lib7 янв. 2011 г.

  • CVE-2010-3847
    30Наблюдать

    elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value

    СредняяCVSS 6,9Готовый эксплойтEPSS 9 %

    gnu · glibc7 янв. 2011 г.

  • CVE-2010-3856
    31Наблюдать

    ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT envi

    ВысокаяCVSS 7,2Готовый эксплойтEPSS 11 %

    gnu · glibc7 янв. 2011 г.

  • CVE-2010-4538
    46В плане

    Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a

    КритическаяCVSS 9,3Proof of conceptEPSS 28 %

    wireshark · wireshark7 янв. 2011 г.

  • CVE-2010-4543
    35Наблюдать

    Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote a

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    gimp · gimp7 янв. 2011 г.

  • CVE-2011-0346
    41В плане

    Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attacke

    ВысокаяCVSS 8,1Эксплойта нетEPSS 31 %

    microsoft · internet explorer7 янв. 2011 г.

  • CVE-2011-0347
    44В плане

    Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecified other impact via

    КритическаяCVSS 9,3Эксплойта нетEPSS 22 %

    microsoft · internet explorer7 янв. 2011 г.

  • CVE-2010-4645
    25Наблюдать

    strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent at

    СредняяCVSS 5,0Proof of conceptEPSS 15 %

    php · php10 янв. 2011 г.

  • CVE-2011-0404
    49В плане

    Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 64 %

    netsupport · netsupport manager agent10 янв. 2011 г.

  • CVE-2011-0406
    46В плане

    Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long reques

    КритическаяCVSS 10,0Proof of conceptEPSS 21 %

    wellintech · kingview10 янв. 2011 г.

  • CVE-2010-3678
    20Наблюдать

    Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with

    СредняяCVSS 4,0Proof of conceptEPSS 12 %

    mysql · mysql11 янв. 2011 г.

  • CVE-2010-3679
    20Наблюдать

    Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to

    СредняяCVSS 4,0Proof of conceptEPSS 12 %

    mysql · mysql11 янв. 2011 г.

  • CVE-2010-3680
    20Наблюдать

    Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary ta

    СредняяCVSS 4,0Proof of conceptEPSS 12 %

    mysql · mysql11 янв. 2011 г.

  • CVE-2010-3681
    20Наблюдать

    Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by

    СредняяCVSS 4,0Proof of conceptEPSS 12 %

    mysql · mysql11 янв. 2011 г.

  • CVE-2010-3682
    19Наблюдать

    Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by

    СредняяCVSS 4,0Proof of conceptEPSS 11 %

    mysql · mysql11 янв. 2011 г.

  • CVE-2010-3683
    20Наблюдать

    Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows re

    СредняяCVSS 4,0Proof of conceptEPSS 12 %

    mysql · mysql11 янв. 2011 г.

  • CVE-2011-0026
    47В плане

    Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2,

    КритическаяCVSS 9,3Эксплойта нетEPSS 34 %

    microsoft · data access components11 янв. 2011 г.

  • CVE-2011-0027
    53В плане

    Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory al

    КритическаяCVSS 9,3Proof of conceptEPSS 54 %

    microsoft · data access components11 янв. 2011 г.

  • CVE-2010-4051
    32Наблюдать

    The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent att

    СредняяCVSS 5,0Proof of conceptEPSS 39 %

    gnu · glibc13 янв. 2011 г.

  • CVE-2010-4052
    35Наблюдать

    Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2

    СредняяCVSS 5,0Proof of conceptEPSS 51 %

    gnu · glibc13 янв. 2011 г.

  • CVE-2011-0261
    45В плане

    Unspecified vulnerability in jovgraph.exe in jovgraph in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to

    КритическаяCVSS 10,0Эксплойта нетEPSS 15 %

    hp · openview network node manager13 янв. 2011 г.

  • CVE-2011-0262
    45В плане

    Buffer overflow in the stringToSeconds function in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53

    КритическаяCVSS 10,0Эксплойта нетEPSS 17 %

    hp · openview network node manager13 янв. 2011 г.

  • CVE-2011-0263
    45В плане

    Multiple stack-based buffer overflows in ovas.exe in the OVAS service in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remot

    КритическаяCVSS 10,0Эксплойта нетEPSS 17 %

    hp · openview network node manager13 янв. 2011 г.

  • CVE-2011-0264
    45В плане

    Stack-based buffer overflow in ovutil.dll in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbi

    КритическаяCVSS 10,0Эксплойта нетEPSS 17 %

    hp · openview network node manager13 янв. 2011 г.

  • CVE-2011-0265
    45В плане

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary

    КритическаяCVSS 10,0Эксплойта нетEPSS 16 %

    hp · openview network node manager13 янв. 2011 г.

  • CVE-2011-0266
    61На этой неделе

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary

    КритическаяCVSS 10,0Готовый эксплойтEPSS 70 %

    hp · openview network node manager13 янв. 2011 г.

  • CVE-2011-0267
    61На этой неделе

    Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute a

    КритическаяCVSS 10,0Готовый эксплойтEPSS 71 %

    hp · openview network node manager13 янв. 2011 г.

  • CVE-2011-0268
    45В плане

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary

    КритическаяCVSS 10,0Эксплойта нетEPSS 15 %

    hp · openview network node manager13 янв. 2011 г.

  • CVE-2011-0269
    45В плане

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary

    КритическаяCVSS 10,0Эксплойта нетEPSS 16 %

    hp · openview network node manager13 янв. 2011 г.

  • CVE-2011-0270
    45В плане

    Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execut

    КритическаяCVSS 10,0Эксплойта нетEPSS 16 %

    hp · openview network node manager13 янв. 2011 г.

  • CVE-2009-5018
    30Наблюдать

    Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via

    СредняяCVSS 6,8Proof of conceptEPSS 10 %

    catb · gif2png14 янв. 2011 г.

  • CVE-2010-4335
    47В плане

    The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to mo

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 55 %

    cakephp · cakephp14 янв. 2011 г.

  • CVE-2010-4566
    45В плане

    The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NT

    КритическаяCVSS 9,3Готовый эксплойтEPSS 27 %

    citrix · access gateway14 янв. 2011 г.

  • CVE-2011-0272
    44В плане

    Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code via network traffic to TCP port 5001 or 50

    КритическаяCVSS 10,0Эксплойта нетEPSS 13 %

    hp · loadrunner18 янв. 2011 г.

  • CVE-2011-0489
    34Наблюдать

    The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to mod

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    objectivity · objectivity\/db18 янв. 2011 г.

  • CVE-2010-2632
    42В плане

    Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability.

    ВысокаяCVSS 7,8Proof of conceptEPSS 35 %

    sun · sunos19 янв. 2011 г.

  • CVE-2010-3591
    41В плане

    Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers

    КритическаяCVSS 9,3Proof of conceptEPSS 11 %

    oracle · fusion middleware19 янв. 2011 г.

  • CVE-2010-3595
    35Наблюдать

    Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers

    ВысокаяCVSS 7,8Proof of conceptEPSS 11 %

    oracle · fusion middleware19 янв. 2011 г.

  • CVE-2010-3599
    42В плане

    Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers

    КритическаяCVSS 9,4Proof of conceptEPSS 16 %

    oracle · fusion middleware19 янв. 2011 г.

  • CVE-2010-3600
    53В плане

    Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Gri

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 76 %

    oracle · database server19 янв. 2011 г.

  • CVE-2010-4417
    53В плане

    Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 76 %

    oracle · beehive19 янв. 2011 г.

  • CVE-2010-4435
    44В плане

    Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, rel

    КритическаяCVSS 10,0Proof of conceptEPSS 14 %

    sun · sunos19 янв. 2011 г.

  • CVE-2010-4267
    33Наблюдать

    Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    hp · linux imaging and printing project20 янв. 2011 г.

  • CVE-2010-4701
    44В плане

    Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 i

    ВысокаяCVSS 7,6Proof of conceptEPSS 47 %

    microsoft · windows 2003 server20 янв. 2011 г.

  • CVE-2011-0499
    46В плане

    Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows u

    КритическаяCVSS 9,3Готовый эксплойтEPSS 31 %

    verytools · videospirit lite20 янв. 2011 г.

  • CVE-2011-0500
    46В плане

    Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assiste

    КритическаяCVSS 9,3Готовый эксплойтEPSS 30 %

    verytools · videospirit lite20 янв. 2011 г.

  • CVE-2011-0501
    42В плане

    Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted re

    КритическаяCVSS 9,3Proof of conceptEPSS 16 %

    musanim · music animation machine midi player20 янв. 2011 г.

  • CVE-2011-0514
    35Наблюдать

    The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash) via a packet with a

    СредняяCVSS 5,0Готовый эксплойтEPSS 48 %

    hp · data protector manager20 янв. 2011 г.

  • CVE-2011-0517
    49В плане

    Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to

    КритическаяCVSS 9,3Готовый эксплойтEPSS 40 %

    sielcosistemi · winlog pro20 янв. 2011 г.

  • CVE-2011-0518
    25Наблюдать

    Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allows remote attackers

    СредняяCVSS 5,1Готовый эксплойтEPSS 15 %

    lotuscms · fraise20 янв. 2011 г.

  • CVE-2010-2743
    32Наблюдать

    The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keybo

    ВысокаяCVSS 7,2Готовый эксплойтEPSS 14 %

    microsoft · windows 2003 server20 янв. 2011 г.

  • CVE-2011-0020
    36Наблюдать

    Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlie

    ВысокаяCVSS 7,6Proof of conceptEPSS 18 %

    pango · pango24 янв. 2011 г.

  • CVE-2011-0273
    41В плане

    Buffer overflow in crs.exe in HP OpenView Storage Data Protector Cell Manager 6.11 allows remote attackers to execute arbitrary code via uns

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    hp · openview storage data protector cell manager24 янв. 2011 г.

  • CVE-2010-4709
    35Наблюдать

    Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of ser

    ВысокаяCVSS 7,6Proof of conceptEPSS 16 %

    automatedsolutions · modbus\/tcp master opc server28 янв. 2011 г.

  • CVE-2010-4326
    43В плане

    Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execu

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    novell · groupwise28 янв. 2011 г.

  • CVE-2010-2777
    39Наблюдать

    Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF

    КритическаяCVSS 9,0Proof of conceptEPSS 10 %

    novell · groupwise28 янв. 2011 г.

  • CVE-2010-3450
    40В плане

    Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary fi

    КритическаяCVSS 9,3Эксплойта нетEPSS 10 %

    apache · openoffice28 янв. 2011 г.

  • CVE-2010-3451
    40В плане

    Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service

    КритическаяCVSS 9,3Эксплойта нетEPSS 10 %

    apache · openoffice28 янв. 2011 г.

  • CVE-2010-3452
    40В плане

    Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service

    КритическаяCVSS 9,3Эксплойта нетEPSS 10 %

    apache · openoffice28 янв. 2011 г.

  • CVE-2010-3454
    40В плане

    Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow re

    КритическаяCVSS 9,3Эксплойта нетEPSS 10 %

    apache · openoffice28 янв. 2011 г.

  • CVE-2010-4253
    40В плане

    Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (a

    КритическаяCVSS 9,3Эксплойта нетEPSS 10 %

    apache · openoffice28 янв. 2011 г.

  • CVE-2010-4643
    40В плане

    Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (a

    КритическаяCVSS 9,3Эксплойта нетEPSS 10 %

    apache · openoffice28 янв. 2011 г.

  • CVE-2010-4711
    44В плане

    Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote at

    КритическаяCVSS 10,0Proof of conceptEPSS 13 %

    novell · groupwise31 янв. 2011 г.

  • CVE-2010-4715
    28Наблюдать

    Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before

    СредняяCVSS 5,0Proof of conceptEPSS 28 %

    novell · groupwise31 янв. 2011 г.

  • CVE-2011-0096
    38Наблюдать

    The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold

    СредняяCVSS 6,1Proof of conceptEPSS 46 %

    microsoft · windows 2003 server31 янв. 2011 г.

  • CVE-2010-0111
    47В плане

    HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as

    КритическаяCVSS 9,3Готовый эксплойтEPSS 34 %

    symantec · antivirus31 янв. 2011 г.

  • CVE-2011-0413
    41В плане

    The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote

    ВысокаяCVSS 7,8Эксплойта нетEPSS 32 %

    isc · dhcp31 янв. 2011 г.