Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: сентябрь 2011 г.

35 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2011-1944
    41В плане

    Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent

    КритическаяCVSS 9,3Proof of conceptEPSS 13 %

    xmlsoft · libxml22 сент. 2011 г.

  • CVE-2011-2763
    41В плане

    The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a mo

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 36 %

    lifesize · lifesize room appliance2 сент. 2011 г.

  • CVE-2011-3205
    35Наблюдать

    Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, an

    СредняяCVSS 6,8Эксплойта нетEPSS 27 %

    squid-cache · squid6 сент. 2011 г.

  • CVE-2011-3200
    40В плане

    Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 thro

    СредняяCVSS 5,0Готовый эксплойтEPSS 20 %

    rsyslog · rsyslog6 сент. 2011 г.

  • CVE-2011-3389
    40В плане

    The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Op

    СредняяCVSS 4,3Готовый эксплойтEPSS 73 %

    google · chrome6 сент. 2011 г.

  • CVE-2009-5092
    21Наблюдать

    Cross-site scripting (XSS) vulnerability in the management interface in Microsoft FAST ESP 5.1.5 and earlier allows remote attackers to inje

    СредняяCVSS 4,3Эксплойта нетEPSS 12 %

    microsoft · fast esp12 сент. 2011 г.

  • CVE-2011-2595
    58В плане

    Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id param

    КритическаяCVSS 10,0Готовый эксплойтEPSS 59 %

    acdsee · fotoslate14 сент. 2011 г.

  • CVE-2011-0653
    22Наблюдать

    Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows rem

    СредняяCVSS 4,3Эксплойта нетEPSS 16 %

    microsoft · sharepoint foundation15 сент. 2011 г.

  • CVE-2011-1890
    23Наблюдать

    Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows r

    СредняяCVSS 4,3Эксплойта нетEPSS 19 %

    microsoft · sharepoint foundation15 сент. 2011 г.

  • CVE-2011-1891
    22Наблюдать

    Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allo

    СредняяCVSS 4,3Эксплойта нетEPSS 16 %

    microsoft · sharepoint foundation15 сент. 2011 г.

  • CVE-2011-1892
    28Наблюдать

    Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, O

    СредняяCVSS 4,0Proof of conceptEPSS 41 %

    microsoft · forms server15 сент. 2011 г.

  • CVE-2011-1893
    22Наблюдать

    Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and ShareP

    СредняяCVSS 4,3Эксплойта нетEPSS 16 %

    microsoft · sharepoint foundation15 сент. 2011 г.

  • CVE-2011-1980
    40В плане

    Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL i

    КритическаяCVSS 9,3Эксплойта нетEPSS 10 %

    microsoft · office15 сент. 2011 г.

  • CVE-2011-1982
    45В плане

    Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, wh

    КритическаяCVSS 9,3Эксплойта нетEPSS 27 %

    microsoft · office15 сент. 2011 г.

  • CVE-2011-1986
    43В плане

    Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "E

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · excel15 сент. 2011 г.

  • CVE-2011-1987
    43В плане

    Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · excel15 сент. 2011 г.

  • CVE-2011-1988
    43В плане

    Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · excel15 сент. 2011 г.

  • CVE-2011-1989
    45В плане

    Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 20

    КритическаяCVSS 9,3Эксплойта нетEPSS 27 %

    microsoft · excel15 сент. 2011 г.

  • CVE-2011-1990
    43В плане

    Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Fo

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · excel15 сент. 2011 г.

  • CVE-2011-1991
    41В плане

    Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Serv

    КритическаяCVSS 9,3Эксплойта нетEPSS 12 %

    microsoft · windows 2003 server15 сент. 2011 г.

  • CVE-2011-3322
    59В плане

    Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to

    КритическаяCVSS 10,0Готовый эксплойтEPSS 64 %

    scadatec · procyon scada15 сент. 2011 г.

  • CVE-2011-3486
    40В плане

    Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which

    СредняяCVSS 5,0Готовый эксплойтEPSS 49 %

    beckhoff · twincat16 сент. 2011 г.

  • CVE-2011-3490
    51В плане

    Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of s

    КритическаяCVSS 10,0Proof of conceptEPSS 36 %

    measuresoft · scadapro16 сент. 2011 г.

  • CVE-2011-3491
    45В плане

    Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) a

    КритическаяCVSS 10,0Proof of conceptEPSS 16 %

    progea · movicon powerhmi16 сент. 2011 г.

  • CVE-2011-3492
    61На этой неделе

    Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash)

    КритическаяCVSS 10,0Готовый эксплойтEPSS 70 %

    azeotech · daqfactory16 сент. 2011 г.

  • CVE-2011-3494
    57В плане

    WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code

    КритическаяCVSS 10,0Готовый эксплойтEPSS 55 %

    interactivedata · esignal16 сент. 2011 г.

  • CVE-2011-3495
    43В плане

    Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    measuresoft · scadapro16 сент. 2011 г.

  • CVE-2011-3496
    44В плане

    service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the

    КритическаяCVSS 10,0Proof of conceptEPSS 14 %

    measuresoft · scadapro16 сент. 2011 г.

  • CVE-2011-3497
    57В плане

    service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possib

    КритическаяCVSS 10,0Готовый эксплойтEPSS 57 %

    measuresoft · scadapro16 сент. 2011 г.

  • CVE-2011-3499
    45В плане

    Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possi

    КритическаяCVSS 10,0Proof of conceptEPSS 15 %

    progea · movicon powerhmi16 сент. 2011 г.

  • CVE-2011-2738
    43В плане

    Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and Cisco

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    cisco · unified service monitor19 сент. 2011 г.

  • CVE-2011-3575
    39Наблюдать

    Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users

    КритическаяCVSS 9,0Proof of conceptEPSS 10 %

    ibm · lotus domino19 сент. 2011 г.

  • CVE-2011-3348
    24Наблюдать

    The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote

    СредняяCVSS 4,3Эксплойта нетEPSS 22 %

    apache · http server20 сент. 2011 г.

  • CVE-2011-3360
    47В плане

    Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Troja

    КритическаяCVSS 9,3Готовый эксплойтEPSS 34 %

    wireshark · wireshark20 сент. 2011 г.

  • CVE-2011-2543
    39Наблюдать

    Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users

    КритическаяCVSS 9,0Proof of conceptEPSS 11 %

    cisco · telepresence codec c4023 сент. 2011 г.