Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: октябрь 2011 г.

38 записей · 2 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2011-3271
    43В плане

    Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code or

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    cisco · ios3 окт. 2011 г.

  • CVE-2011-3976
    40В плане

    Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response t

    СредняяCVSS 6,8Готовый эксплойтEPSS 30 %

    ammsoft · scriptftp4 окт. 2011 г.

  • CVE-2011-3981
    33Наблюдать

    PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbi

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    wordpress · wordpress4 окт. 2011 г.

  • CVE-2011-2443
    41В плане

    Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service (memory corruption

    КритическаяCVSS 9,3Proof of conceptEPSS 13 %

    adobe · photoshop elements4 окт. 2011 г.

  • CVE-2011-3368
    47В плане

    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly intera

    СредняяCVSS 5,0Готовый эксплойтEPSS 90 %

    apache · http server5 окт. 2011 г.

  • CVE-2011-3305
    40В плане

    Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via

    ВысокаяCVSS 7,8Готовый эксплойтEPSS 21 %

    cisco · nac manager6 окт. 2011 г.

  • CVE-2010-4931
    45В плане

    Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .

    КритическаяCVSS 10,0Proof of conceptEPSS 15 %

    php-fusion · php-fusion9 окт. 2011 г.

  • CVE-2011-2189
    35Наблюдать

    net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network name

    ВысокаяCVSS 7,5Proof of conceptEPSS 17 %

    linux · linux kernel10 окт. 2011 г.

  • CVE-2011-3587
    60На этой неделе

    Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attacke

    КритическаяCVSS 9,3Готовый эксплойтEPSS 78 %

    plone · plone10 окт. 2011 г.

  • CVE-2011-1247
    40В плане

    Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003

    КритическаяCVSS 9,3Эксплойта нетEPSS 11 %

    microsoft · windows 2003 server11 окт. 2011 г.

  • CVE-2011-1253
    41В плане

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly restrict inheritance

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · .net framework11 окт. 2011 г.

  • CVE-2011-1895
    20Наблюдать

    CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attack

    СредняяCVSS 4,3Эксплойта нетEPSS 11 %

    microsoft · forefront unified access gateway11 окт. 2011 г.

  • CVE-2011-1969
    42В плане

    Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a s

    КритическаяCVSS 9,3Эксплойта нетEPSS 17 %

    microsoft · forefront unified access gateway11 окт. 2011 г.

  • CVE-2011-1993
    42В плане

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Эксплойта нетEPSS 17 %

    microsoft · internet explorer11 окт. 2011 г.

  • CVE-2011-1995
    46В плане

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Эксплойта нетEPSS 28 %

    microsoft · internet explorer11 окт. 2011 г.

  • CVE-2011-1996
    55В плане

    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Готовый эксплойтEPSS 58 %

    microsoft · internet explorer11 окт. 2011 г.

  • CVE-2011-1997
    41В плане

    Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    КритическаяCVSS 9,3Эксплойта нетEPSS 14 %

    microsoft · internet explorer11 окт. 2011 г.

  • CVE-2011-1998
    43В плане

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · internet explorer11 окт. 2011 г.

  • CVE-2011-1999
    45В плане

    Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vect

    КритическаяCVSS 9,3Proof of conceptEPSS 26 %

    microsoft · internet explorer11 окт. 2011 г.

  • CVE-2011-2000
    43В плане

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · internet explorer11 окт. 2011 г.

  • CVE-2011-2001
    50В плане

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Эксплойта нетEPSS 43 %

    microsoft · internet explorer11 окт. 2011 г.

  • CVE-2011-2003
    45В плане

    Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Wi

    КритическаяCVSS 9,3Proof of conceptEPSS 26 %

    microsoft · windows 2003 server11 окт. 2011 г.

  • CVE-2011-2005
    71На этой неделе

    afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 31 %

    microsoft · windows server 200311 окт. 2011 г.

  • CVE-2011-2007
    27Наблюдать

    Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server

    СредняяCVSS 5,0Proof of conceptEPSS 23 %

    microsoft · host integration server11 окт. 2011 г.

  • CVE-2011-2008
    26Наблюдать

    Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server

    СредняяCVSS 5,0Эксплойта нетEPSS 21 %

    microsoft · host integration server11 окт. 2011 г.

  • CVE-2011-2012
    25Наблюдать

    Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which al

    СредняяCVSS 5,0Эксплойта нетEPSS 16 %

    microsoft · forefront unified access gateway11 окт. 2011 г.

  • CVE-2011-3230
    42В плане

    Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary

    СредняяCVSS 6,8Готовый эксплойтEPSS 49 %

    apple · safari14 окт. 2011 г.

  • CVE-2011-3156
    44В плане

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    hp · data protector for personal computers19 окт. 2011 г.

  • CVE-2011-3157
    44В плане

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    hp · data protector for personal computers19 окт. 2011 г.

  • CVE-2011-3158
    44В плане

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    hp · data protector for personal computers19 окт. 2011 г.

  • CVE-2011-3159
    44В плане

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    hp · data protector for personal computers19 окт. 2011 г.

  • CVE-2011-3160
    44В плане

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    hp · data protector for personal computers19 окт. 2011 г.

  • CVE-2011-3161
    44В плане

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    hp · data protector for personal computers19 окт. 2011 г.

  • CVE-2011-3162
    44В плане

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    hp · data protector for personal computers19 окт. 2011 г.

  • CVE-2011-3544
    98Срочно

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remot

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 96 %

    oracle · jdk19 окт. 2011 г.

  • CVE-2011-3556
    53В плане

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 76 %

    oracle · jrockit19 окт. 2011 г.

  • CVE-2011-3310
    41В плане

    The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Secu

    КритическаяCVSS 9,0Эксплойта нетEPSS 15 %

    cisco · ciscoworks common services19 окт. 2011 г.

  • CVE-2011-3315
    39Наблюдать

    Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.

    ВысокаяCVSS 7,8Proof of conceptEPSS 25 %

    cisco · unified ip interactive voice response27 окт. 2011 г.