İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2008: sömürülen ve yeni ciddi CVE kayıtları

51 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2008-1116
    40Planlayın

    Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner allows remote attackers

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    rising antivirus international · rising web scan object3 Mar 2008

  • CVE-2008-1124
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to execute arbitrary P

    OrtaCVSS 6,8Kavram kanıtıEPSS %21

    podcast generator · podcast generator3 Mar 2008

  • CVE-2008-1126
    34İzleyin

    PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via

    OrtaCVSS 6,8Kavram kanıtıEPSS %23

    barryvan compo · barryvan compo manager3 Mar 2008

  • CVE-2008-1145
    28İzleyin

    Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems

    OrtaCVSS 5,0Kavram kanıtıEPSS %27

    ruby-lang · webrick4 Mar 2008

  • CVE-2008-1188
    41Planlayın

    Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and

    KritikCVSS 9,3İstismar yokEPSS %12

    sun · jdk6 Mar 2008

  • CVE-2008-1190
    42Planlayın

    Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and e

    KritikCVSS 9,3İstismar yokEPSS %16

    sun · jdk6 Mar 2008

  • CVE-2008-1193
    41Planlayın

    Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    sun · jdk6 Mar 2008

  • CVE-2008-1200
    41Planlayın

    Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possi

    KritikCVSS 9,3İstismar yokEPSS %11

    microsoft · access6 Mar 2008

  • CVE-2008-1270
    24İzleyin

    mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to rea

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    lighttpd · lighttpd10 Mar 2008

  • CVE-2007-1201
    46Planlayın

    Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute ar

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · biztalk server11 Mar 2008

  • CVE-2008-0110
    47Planlayın

    Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote a

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · office11 Mar 2008

  • CVE-2008-0111
    52Planlayın

    Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-ass

    KritikCVSS 9,3Kavram kanıtıEPSS %50

    microsoft · excel11 Mar 2008

  • CVE-2008-0112
    47Planlayın

    Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arb

    KritikCVSS 9,3Kavram kanıtıEPSS %32

    microsoft · excel11 Mar 2008

  • CVE-2008-0113
    50Planlayın

    Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code vi

    KritikCVSS 9,3Kavram kanıtıEPSS %42

    microsoft · excel viewer11 Mar 2008

  • CVE-2008-0114
    49Planlayın

    Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote att

    KritikCVSS 9,3Kavram kanıtıEPSS %38

    microsoft · excel11 Mar 2008

  • CVE-2008-0115
    49Planlayın

    Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-ass

    KritikCVSS 9,3Kavram kanıtıEPSS %39

    microsoft · excel11 Mar 2008

  • CVE-2008-0116
    51Planlayın

    Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote att

    KritikCVSS 9,3Kavram kanıtıEPSS %48

    microsoft · excel11 Mar 2008

  • CVE-2008-0117
    47Planlayın

    Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers

    KritikCVSS 9,3Kavram kanıtıEPSS %33

    microsoft · compatibility pack word excel powerpoint 200711 Mar 2008

  • CVE-2008-0118
    47Planlayın

    Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-a

    KritikCVSS 9,3Kavram kanıtıEPSS %34

    microsoft · office11 Mar 2008

  • CVE-2008-1203
    35İzleyin

    The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for

    YüksekCVSS 7,5İstismar yokEPSS %15

    adobe · coldfusion11 Mar 2008

  • CVE-2008-1307
    44Planlayın

    Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 200

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    kingsoft · antivirus online update module12 Mar 2008

  • CVE-2008-1309
    51Planlayın

    The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before

    KritikCVSS 9,3SilahlaştırılmışEPSS %45

    realnetworks · realplayer12 Mar 2008

  • CVE-2008-1311
    40Planlayın

    The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang)

    OrtaCVSS 5,0SilahlaştırılmışEPSS %49

    packettrap · pt360 tool suite pro12 Mar 2008

  • CVE-2008-1320
    45Planlayın

    Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    asg · asg-sentry13 Mar 2008

  • CVE-2008-0532
    57Planlayın

    Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server

    KritikCVSS 10,0Kavram kanıtıEPSS %57

    cisco · acs for windows14 Mar 2008

  • CVE-2008-0533
    26İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Sec

    OrtaCVSS 4,3Kavram kanıtıEPSS %28

    cisco · acs for windows14 Mar 2008

  • CVE-2008-1117
    61Bu hafta

    Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows

    KritikCVSS 10,0SilahlaştırılmışEPSS %69

    netopia · timbuktu pro14 Mar 2008

  • CVE-2008-1157
    46Planlayın

    Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen

    KritikCVSS 10,0İstismar yokEPSS %20

    cisco · ciscoworks internetwork performance monitor14 Mar 2008

  • CVE-2008-1358
    43Planlayın

    Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary co

    OrtaCVSS 6,5SilahlaştırılmışEPSS %57

    altn · mdaemon17 Mar 2008

  • CVE-2008-1365
    40Planlayın

    Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and e

    OrtaCVSS 6,4SilahlaştırılmışEPSS %51

    trend micro · officescan corporate edition17 Mar 2008

  • CVE-2008-1368
    20İzleyin

    CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6 allows remote attackers to execute arbitrary FTP commands via an ftp://

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · internet explorer17 Mar 2008

  • CVE-2008-0062
    42Planlayın

    KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial

    KritikCVSS 9,8İstismar yokEPSS %10

    mit · kerberos 519 Mar 2008

  • CVE-2008-1405
    38İzleyin

    PHP remote file inclusion vulnerability in code/display.php in fuzzylime (cms) 3.01 allows remote attackers to execute arbitrary PHP code vi

    OrtaCVSS 6,8Kavram kanıtıEPSS %37

    fuzzylime · fuzzylime20 Mar 2008

  • CVE-2008-1416
    38İzleyin

    Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in

    OrtaCVSS 6,8Kavram kanıtıEPSS %37

    phpauction · phpauction gpl20 Mar 2008

  • CVE-2008-1201
    33İzleyin

    Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows

    OrtaCVSS 6,8İstismar yokEPSS %19

    adobe · flash24 Mar 2008

  • CVE-2008-1289
    33İzleyin

    Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Editi

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    asterisk · asterisk appliance developer kit24 Mar 2008

  • CVE-2008-1461
    33İzleyin

    Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command

    YüksekCVSS 7,6Kavram kanıtıEPSS %11

    xnview · xnview24 Mar 2008

  • CVE-2008-0951
    46Planlayın

    Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and po

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · windows vista24 Mar 2008

  • CVE-2008-1472
    49Planlayın

    Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Ba

    KritikCVSS 9,3SilahlaştırılmışEPSS %40

    computer associates · brightstor arcserve backup laptops desktops24 Mar 2008

  • CVE-2008-1160
    43Planlayın

    ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows re

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    zyxel · zywall 1050 firmware24 Mar 2008

  • CVE-2008-1489
    31İzleyin

    Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) an

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    videolan · vlc24 Mar 2008

  • CVE-2008-1092
    45Planlayın

    Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a cr

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · windows 200025 Mar 2008

  • CVE-2008-1491
    61Bu hafta

    Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows re

    KritikCVSS 10,0SilahlaştırılmışEPSS %70

    asus · remote console25 Mar 2008

  • CVE-2008-1502
    20İzleyin

    The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and o

    OrtaCVSS 4,3İstismar yokEPSS %10

    egroupware · egroupware25 Mar 2008

  • CVE-2008-1505
    44Planlayın

    PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Joomla! allows remote a

    YüksekCVSS 7,5Kavram kanıtıEPSS %46

    joomla · joomla25 Mar 2008

  • CVE-2008-1391
    36İzleyin

    Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-depen

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    freebsd · freebsd27 Mar 2008

  • CVE-2008-0926
    47Planlayın

    The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authenticatio

    YüksekCVSS 7,5SilahlaştırılmışEPSS %58

    novell · edirectory28 Mar 2008

  • CVE-2008-1544
    36İzleyin

    The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 5.01, 6, and 7 does not block dangerous HTTP request

    YüksekCVSS 7,1İstismar yokEPSS %26

    microsoft · internet explorer28 Mar 2008

  • CVE-2008-1545
    21İzleyin

    The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 7 does not restrict the dangerous Transfer-Encoding

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · internet explorer28 Mar 2008

  • CVE-2008-1558
    45Planlayın

    Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    mplayer · mplayer31 Mar 2008

  • CVE-2008-1562
    40Planlayın

    The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application

    OrtaCVSS 5,0SilahlaştırılmışEPSS %50

    wireshark · wireshark31 Mar 2008