Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: июнь 2014 г.

95 записей · 1 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2014-0237
    26Наблюдать

    The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers

    СредняяCVSS 5,0Эксплойта нетEPSS 19 %

    php · php1 июн. 2014 г.

  • CVE-2014-0238
    26Наблюдать

    The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers

    СредняяCVSS 5,0Эксплойта нетEPSS 20 %

    php · php1 июн. 2014 г.

  • CVE-2014-3936
    63На этой неделе

    Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev.

    КритическаяCVSS 10,0Готовый эксплойтEPSS 76 %

    dlink · dir505 shareport mobile companion firmware2 июн. 2014 г.

  • CVE-2013-1412
    42В плане

    DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 40 %

    dleviet · datalife engine2 июн. 2014 г.

  • CVE-2014-3466
    30Наблюдать

    Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3

    СредняяCVSS 6,8Proof of conceptEPSS 11 %

    gnu · gnutls3 июн. 2014 г.

  • CVE-2014-3913
    58В плане

    Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request

    КритическаяCVSS 10,0Готовый эксплойтEPSS 60 %

    ericom · accessnow server4 июн. 2014 г.

  • CVE-2014-3976
    23Наблюдать

    Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers t

    СредняяCVSS 5,0Proof of conceptEPSS 11 %

    a10networks · advanced core operating system5 июн. 2014 г.

  • CVE-2014-0195
    57В плане

    The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properl

    СредняяCVSS 6,8Готовый эксплойтEPSS 99 %

    openssl · openssl5 июн. 2014 г.

  • CVE-2014-0221
    43В плане

    The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote a

    СредняяCVSS 4,3Proof of conceptEPSS 87 %

    openssl · openssl5 июн. 2014 г.

  • CVE-2014-0224
    60На этой неделе

    OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, whi

    ВысокаяCVSS 7,4Готовый эксплойтEPSS 95 %

    openssl · openssl5 июн. 2014 г.

  • CVE-2014-3470
    43В плане

    The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an ano

    СредняяCVSS 4,3Эксплойта нетEPSS 85 %

    openssl · openssl5 июн. 2014 г.

  • CVE-2014-3153
    72На этой неделе

    The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresse

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 37 %

    linux · linux kernel7 июн. 2014 г.

  • CVE-2014-0282
    52В плане

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 50 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1769
    43В плане

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1772
    44В плане

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Proof of conceptEPSS 21 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1773
    56В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 63 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1774
    43В плане

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1775
    44В плане

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 22 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1777
    23Наблюдать

    Microsoft Internet Explorer 10 and 11 allows remote attackers to read local files on the client via a crafted web site, aka "Internet Explor

    СредняяCVSS 4,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1778
    32Наблюдать

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified v

    СредняяCVSS 6,8Proof of conceptEPSS 15 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1779
    44В плане

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 24 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1780
    43В плане

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1781
    43В плане

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1782
    43В плане

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1783
    43В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1784
    43В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1785
    46В плане

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 30 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1786
    43В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1788
    43В плане

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1789
    46В плане

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 28 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1790
    43В плане

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1791
    44В плане

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 24 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1792
    43В плане

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1794
    43В плане

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1795
    44В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 24 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1796
    43В плане

    Microsoft Internet Explorer 6 and 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1797
    44В плане

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Proof of conceptEPSS 24 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1799
    47В плане

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 32 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1800
    44В плане

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 24 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1802
    43В плане

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1803
    44В плане

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 22 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1804
    43В плане

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1805
    44В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 21 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-1811
    25Наблюдать

    The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Se

    СредняяCVSS 5,0Эксплойта нетEPSS 18 %

    microsoft · windows 711 июн. 2014 г.

  • CVE-2014-1816
    21Наблюдать

    Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information transmitted by Internet Explorer during a dow

    СредняяCVSS 4,3Эксплойта нетEPSS 14 %

    microsoft · xml core services11 июн. 2014 г.

  • CVE-2014-1817
    43В плане

    usp10.dll in Uniscribe (aka the Unicode Script Processor) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · windows 711 июн. 2014 г.

  • CVE-2014-1818
    43В плане

    GDI+ in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Win

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · windows 711 июн. 2014 г.

  • CVE-2014-1823
    32Наблюдать

    Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inje

    СредняяCVSS 4,3Эксплойта нетEPSS 51 %

    microsoft · lync server11 июн. 2014 г.

  • CVE-2014-2753
    43В плане

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2754
    44В плане

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    КритическаяCVSS 9,3Proof of conceptEPSS 21 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2755
    43В плане

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2756
    43В плане

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2757
    44В плане

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 22 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2758
    43В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2759
    43В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2760
    43В плане

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2761
    43В плане

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2763
    43В плане

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2764
    43В плане

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2765
    43В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2766
    43В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2767
    43В плане

    Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2768
    43В плане

    Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2769
    43В плане

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2770
    43В плане

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2771
    43В плане

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2772
    43В плане

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2773
    43В плане

    Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v

    КритическаяCVSS 9,3Proof of conceptEPSS 20 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2775
    43В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 19 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2776
    43В плане

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 21 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2777
    37Наблюдать

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified v

    ВысокаяCVSS 7,5Proof of conceptEPSS 22 %

    microsoft · internet explorer11 июн. 2014 г.

  • CVE-2014-2778
    43В плане

    Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (mem

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · office compatibility pack11 июн. 2014 г.

  • CVE-2014-0535
    33Наблюдать

    Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    adobe · adobe air sdk11 июн. 2014 г.

  • CVE-2014-0536
    43В плане

    Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    adobe · flash player11 июн. 2014 г.

  • CVE-2010-5300
    31Наблюдать

    Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execu

    СредняяCVSS 6,8Proof of conceptEPSS 14 %

    jzip · jzip11 июн. 2014 г.

  • CVE-2011-3625
    44В плане

    Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers

    КритическаяCVSS 9,3Готовый эксплойтEPSS 24 %

    mplayer2 · mplayer211 июн. 2014 г.

  • CVE-2010-5301
    33Наблюдать

    Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD request.

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    senkas · kolibri13 июн. 2014 г.

  • CVE-2013-3663
    47В плане

    Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attacke

    КритическаяCVSS 9,3Эксплойта нетEPSS 31 %

    google · sketchup13 июн. 2014 г.

  • CVE-2013-3843
    40В плане

    Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) before 1.2.1 allows re

    СредняяCVSS 6,8Готовый эксплойтEPSS 20 %

    monkey-project · monkey13 июн. 2014 г.

  • CVE-2014-3804
    62На этой неделе

    The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_

    КритическаяCVSS 10,0Готовый эксплойтEPSS 72 %

    alienvault · open source security information management13 июн. 2014 г.

  • CVE-2014-3805
    44В плане

    The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) get_lic

    КритическаяCVSS 10,0Proof of conceptEPSS 13 %

    alienvault · open source security information management13 июн. 2014 г.

  • CVE-2014-4158
    34Наблюдать

    Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET request.

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    senkas · kolibri13 июн. 2014 г.

  • CVE-2011-2592
    41В плане

    Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Pl

    КритическаяCVSS 9,3Эксплойта нетEPSS 14 %

    citrix · access gateway plug-in18 июн. 2014 г.

  • CVE-2013-6221
    63На этой неделе

    Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server i

    КритическаяCVSS 10,0Готовый эксплойтEPSS 77 %

    hp · service virtualization18 июн. 2014 г.

  • CVE-2014-2779
    21Наблюдать

    mpengine.dll in Microsoft Malware Protection Engine before 1.1.10701.0 allows remote attackers to cause a denial of service (system hang) vi

    СредняяCVSS 4,3Эксплойта нетEPSS 13 %

    microsoft · malware protection engine18 июн. 2014 г.

  • CVE-2014-4049
    23Наблюдать

    Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a

    СредняяCVSS 5,1Эксплойта нетEPSS 10 %

    php · php18 июн. 2014 г.

  • CVE-2014-2609
    44В плане

    The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to e

    КритическаяCVSS 10,0Эксплойта нетEPSS 12 %

    hp · executive scorecard19 июн. 2014 г.

  • CVE-2014-2611
    40В плане

    Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to

    КритическаяCVSS 9,0Эксплойта нетEPSS 11 %

    hp · executive scorecard19 июн. 2014 г.

  • CVE-2014-2782
    44В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 22 %

    microsoft · internet explorer19 июн. 2014 г.

  • CVE-2014-2962
    45В плане

    Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows rem

    ВысокаяCVSS 7,8Proof of conceptEPSS 47 %

    belkin · n150 f9k1009 firmware19 июн. 2014 г.

  • CVE-2011-4367
    30Наблюдать

    Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2

    СредняяCVSS 5,0Proof of conceptEPSS 33 %

    apache · myfaces19 июн. 2014 г.

  • CVE-2014-4334
    35Наблюдать

    Stack-based buffer overflow in Ubisoft Rayman Legends before 1.3.140380 allows remote attackers to execute arbitrary code via a long string

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    ubi · rayman legends19 июн. 2014 г.

  • CVE-2012-2052
    44В плане

    Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows re

    КритическаяCVSS 9,3Proof of conceptEPSS 23 %

    adobe · photoshop cs519 июн. 2014 г.

  • CVE-2012-5106
    44В плане

    Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via a long string in a P

    КритическаяCVSS 10,0Proof of conceptEPSS 14 %

    freefloat · freefloat ftp server20 июн. 2014 г.

  • CVE-2014-0244
    19Наблюдать

    The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause

    НизкаяCVSS 3,3Эксплойта нетEPSS 20 %

    samba · samba23 июн. 2014 г.