Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: сентябрь 2013 г.

57 записей · 2 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2013-5642
    23Наблюдать

    The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11.x before 11.5.1; Cer

    СредняяCVSS 5,0Эксплойта нетEPSS 11 %

    digium · asterisk9 сент. 2013 г.

  • CVE-2013-4983
    67На этой неделе

    The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to

    КритическаяCVSS 10,0Готовый эксплойтEPSS 90 %

    sophos · web appliance firmware10 сент. 2013 г.

  • CVE-2013-4984
    40В плане

    The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local user

    ВысокаяCVSS 7,2Готовый эксплойтEPSS 8 %

    sophos · web appliance10 сент. 2013 г.

  • CVE-2013-0081
    43В плане

    Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned wo

    СредняяCVSS 5,0Эксплойта нетEPSS 76 %

    microsoft · sharepoint foundation11 сент. 2013 г.

  • CVE-2013-0810
    60На этой неделе

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute

    ВысокаяCVSS 8,1Готовый эксплойтEPSS 59 %

    microsoft · windows server 200311 сент. 2013 г.

  • CVE-2013-1315
    46В плане

    Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, an

    КритическаяCVSS 9,3Эксплойта нетEPSS 28 %

    microsoft · excel11 сент. 2013 г.

  • CVE-2013-1330
    49В плане

    The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Ap

    КритическаяCVSS 10,0Эксплойта нетEPSS 30 %

    microsoft · sharepoint foundation11 сент. 2013 г.

  • CVE-2013-3137
    26Наблюдать

    Microsoft FrontPage 2003 SP3 does not properly parse DTDs, which allows remote attackers to obtain sensitive information via crafted XML dat

    СредняяCVSS 4,3Эксплойта нетEPSS 29 %

    microsoft · frontpage11 сент. 2013 г.

  • CVE-2013-3155
    43В плане

    Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denia

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · access11 сент. 2013 г.

  • CVE-2013-3156
    43В плане

    Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denia

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · access11 сент. 2013 г.

  • CVE-2013-3157
    43В плане

    Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denia

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · access11 сент. 2013 г.

  • CVE-2013-3158
    43В плане

    Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · excel11 сент. 2013 г.

  • CVE-2013-3159
    22Наблюдать

    Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers t

    СредняяCVSS 4,3Эксплойта нетEPSS 15 %

    microsoft · excel11 сент. 2013 г.

  • CVE-2013-3160
    27Наблюдать

    Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, and Word Viewer allow remote attackers to read arbitrary files via an XM

    СредняяCVSS 5,0Эксплойта нетEPSS 22 %

    microsoft · office11 сент. 2013 г.

  • CVE-2013-3179
    24Наблюдать

    Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remote attackers to inje

    СредняяCVSS 4,3Proof of conceptEPSS 22 %

    microsoft · sharepoint foundation11 сент. 2013 г.

  • CVE-2013-3180
    37Наблюдать

    Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrar

    СредняяCVSS 4,3Эксплойта нетEPSS 65 %

    microsoft · sharepoint foundation11 сент. 2013 г.

  • CVE-2013-3201
    43В плане

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · internet explorer11 сент. 2013 г.

  • CVE-2013-3202
    43В плане

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · internet explorer11 сент. 2013 г.

  • CVE-2013-3203
    44В плане

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Эксплойта нетEPSS 23 %

    microsoft · internet explorer11 сент. 2013 г.

  • CVE-2013-3204
    43В плане

    Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · internet explorer11 сент. 2013 г.

  • CVE-2013-3205
    57В плане

    Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v

    КритическаяCVSS 9,3Готовый эксплойтEPSS 66 %

    microsoft · internet explorer11 сент. 2013 г.

  • CVE-2013-3206
    43В плане

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · internet explorer11 сент. 2013 г.

  • CVE-2013-3207
    43В плане

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · internet explorer11 сент. 2013 г.

  • CVE-2013-3208
    43В плане

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · internet explorer11 сент. 2013 г.

  • CVE-2013-3209
    43В плане

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · internet explorer11 сент. 2013 г.

  • CVE-2013-3845
    43В плане

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · internet explorer11 сент. 2013 г.

  • CVE-2013-3847
    43В плане

    Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · sharepoint foundation11 сент. 2013 г.

  • CVE-2013-3848
    43В плане

    Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · office web apps11 сент. 2013 г.

  • CVE-2013-3849
    43В плане

    Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · office compatibility pack11 сент. 2013 г.

  • CVE-2013-3850
    43В плане

    Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute ar

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · office compatibility pack11 сент. 2013 г.

  • CVE-2013-3851
    43В плане

    Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · office compatibility pack11 сент. 2013 г.

  • CVE-2013-3852
    43В плане

    Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · office compatibility pack11 сент. 2013 г.

  • CVE-2013-3853
    43В плане

    Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · office11 сент. 2013 г.

  • CVE-2013-3854
    43В плане

    Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · office11 сент. 2013 г.

  • CVE-2013-3855
    43В плане

    Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cau

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · office compatibility pack11 сент. 2013 г.

  • CVE-2013-3856
    43В плане

    Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · word11 сент. 2013 г.

  • CVE-2013-3857
    43В плане

    Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 S

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · sharepoint server11 сент. 2013 г.

  • CVE-2013-3858
    43В плане

    Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · office compatibility pack11 сент. 2013 г.

  • CVE-2013-3863
    43В плане

    Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via a crafted OLE object in a file, ak

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · windows xp11 сент. 2013 г.

  • CVE-2013-3868
    31Наблюдать

    Microsoft Active Directory Lightweight Directory Service (AD LDS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, a

    СредняяCVSS 5,0Эксплойта нетEPSS 36 %

    microsoft · active directory lightweight directory service11 сент. 2013 г.

  • CVE-2013-3870
    43В плане

    Double free vulnerability in Microsoft Outlook 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to execute arbitrary code by including

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · outlook11 сент. 2013 г.

  • CVE-2013-3351
    45В плане

    Multiple stack-based buffer overflows in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attack

    КритическаяCVSS 10,0Эксплойта нетEPSS 16 %

    adobe · acrobat reader12 сент. 2013 г.

  • CVE-2013-3357
    44В плане

    Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbit

    КритическаяCVSS 10,0Эксплойта нетEPSS 12 %

    adobe · acrobat12 сент. 2013 г.

  • CVE-2013-3358
    44В плане

    Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbit

    КритическаяCVSS 10,0Эксплойта нетEPSS 12 %

    adobe · acrobat12 сент. 2013 г.

  • CVE-2013-4810
    93Срочно

    HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow rem

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 79 %

    hp · application lifecycle management16 сент. 2013 г.

  • CVE-2013-4811
    61На этой неделе

    UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Dri

    КритическаяCVSS 10,0Готовый эксплойтEPSS 71 %

    hp · identity driven manager16 сент. 2013 г.

  • CVE-2013-4812
    56В плане

    UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven

    КритическаяCVSS 10,0Готовый эксплойтEPSS 51 %

    hp · identity driven manager16 сент. 2013 г.

  • CVE-2013-4341
    40В плане

    Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2

    СредняяCVSS 4,3Готовый эксплойтEPSS 21 %

    moodle · moodle16 сент. 2013 г.

  • CVE-2013-4123
    44В плане

    client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafte

    СредняяCVSS 5,0Proof of conceptEPSS 80 %

    squid-cache · squid16 сент. 2013 г.

  • CVE-2013-3612
    43В плане

    Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    dahuasecurity · dvr0404hd-a17 сент. 2013 г.

  • CVE-2013-3893
    91Срочно

    Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote a

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 87 %

    microsoft · internet explorer18 сент. 2013 г.

  • CVE-2013-5696
    40В плане

    inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installation is completed, whi

    СредняяCVSS 6,8Готовый эксплойтEPSS 7 %

    glpi-project · glpi22 сент. 2013 г.

  • CVE-2013-5486
    63На этой неделе

    Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1)

    КритическаяCVSS 10,0Готовый эксплойтEPSS 75 %

    cisco · prime data center network manager23 сент. 2013 г.

  • CVE-2013-5093
    40В плане

    The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, whi

    СредняяCVSS 6,8Готовый эксплойтEPSS 38 %

    graphite project · graphite27 сент. 2013 г.

  • CVE-2013-2068
    55В плане

    Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to cr

    КритическаяCVSS 9,4Готовый эксплойтEPSS 58 %

    redhat · cloudforms management engine28 сент. 2013 г.

  • CVE-2013-5962
    24Наблюдать

    Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPres

    СредняяCVSS 5,1Proof of conceptEPSS 14 %

    envato · complete gallery manager plugin30 сент. 2013 г.

  • CVE-2013-1839
    36Наблюдать

    The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a den

    ВысокаяCVSS 7,8Эксплойта нетEPSS 18 %

    squid-cache · squid30 сент. 2013 г.