İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2008: sömürülen ve yeni ciddi CVE kayıtları

46 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2008-1609
    40Planlayın

    Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary P

    OrtaCVSS 6,8Kavram kanıtıEPSS %44

    jaf cms · jaf cms1 Nis 2008

  • CVE-2008-1610
    46Planlayın

    Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service or execute arbitrary

    YüksekCVSS 7,5SilahlaştırılmışEPSS %53

    tallsoft quick · tftp server pro1 Nis 2008

  • CVE-2008-1611
    60Bu hafta

    Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code

    KritikCVSS 10,0SilahlaştırılmışEPSS %67

    tftp-server · winagents tftp server1 Nis 2008

  • CVE-2008-1682
    35İzleyin

    PHP remote file inclusion vulnerability in quiz/common/db_config.inc.php in the Online FlashQuiz (com_onlineflashquiz) 1.0.2 component for J

    OrtaCVSS 6,8Kavram kanıtıEPSS %26

    elearningforce · online flashquiz4 Nis 2008

  • CVE-2008-0311
    46Planlayın

    Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    borland · caliberrm6 Nis 2008

  • CVE-2008-1602
    60Bu hafta

    Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, w

    KritikCVSS 10,0SilahlaştırılmışEPSS %67

    orbit downloader · orbit downloader6 Nis 2008

  • CVE-2007-4620
    52Planlayın

    Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0

    KritikCVSS 9,0SilahlaştırılmışEPSS %52

    ca · brightstor arcserve backup7 Nis 2008

  • CVE-2008-1328
    44Planlayın

    Buffer overflow in the LGServer service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows

    KritikCVSS 9,3İstismar yokEPSS %23

    broadcom · desktop management suite7 Nis 2008

  • CVE-2008-1697
    62Bu hafta

    Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to

    KritikCVSS 10,0SilahlaştırılmışEPSS %74

    hp · openview network node manager8 Nis 2008

  • CVE-2008-0083
    46Planlayın

    The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2,

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · windows 20008 Nis 2008

  • CVE-2008-0087
    40Planlayın

    The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows

    YüksekCVSS 7,5İstismar yokEPSS %32

    microsoft · windows 20008 Nis 2008

  • CVE-2008-1083
    49Planlayın

    Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vi

    YüksekCVSS 8,1Kavram kanıtıEPSS %56

    microsoft · windows 20008 Nis 2008

  • CVE-2008-1085
    47Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · ie8 Nis 2008

  • CVE-2008-1086
    46Planlayın

    The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · windows 20008 Nis 2008

  • CVE-2008-1087
    54Planlayın

    Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote atta

    KritikCVSS 9,3Kavram kanıtıEPSS %56

    microsoft · windows-nt8 Nis 2008

  • CVE-2008-1088
    47Planlayın

    Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a craft

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · project8 Nis 2008

  • CVE-2008-1089
    47Planlayın

    Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · office8 Nis 2008

  • CVE-2008-1090
    47Planlayın

    Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · office8 Nis 2008

  • CVE-2008-1709
    41Planlayın

    Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN)

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    microsoft · visual interdev9 Nis 2008

  • CVE-2007-0071
    65Bu hafta

    Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code vi

    KritikCVSS 9,3İstismar yokEPSS %92

    adobe · flash player9 Nis 2008

  • CVE-2007-6019
    55Planlayın

    Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a

    KritikCVSS 9,3Kavram kanıtıEPSS %59

    adobe · air9 Nis 2008

  • CVE-2008-1721
    37İzleyin

    Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a ne

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    python · python10 Nis 2008

  • CVE-2008-1724
    48Planlayın

    Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    tumbleweed · securetransport server11 Nis 2008

  • CVE-2008-0927
    41Planlayın

    dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTT

    OrtaCVSS 5,0Kavram kanıtıEPSS %70

    novell · edirectory14 Nis 2008

  • CVE-2008-1100
    43Planlayın

    Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbit

    KritikCVSS 10,0İstismar yokEPSS %10

    clam anti-virus · clamav14 Nis 2008

  • CVE-2008-1773
    35İzleyin

    PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arbitrary PHP code via

    OrtaCVSS 6,8Kavram kanıtıEPSS %26

    dragoon · dragoon14 Nis 2008

  • CVE-2008-1776
    35İzleyin

    PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute ar

    OrtaCVSS 6,8Kavram kanıtıEPSS %26

    phpblock · phpblock14 Nis 2008

  • CVE-2008-1842
    44Planlayın

    Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to c

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    hp · openview network node manager16 Nis 2008

  • CVE-2008-0892
    40Planlayın

    The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and E

    KritikCVSS 9,0İstismar yokEPSS %14

    redhat · directory server16 Nis 2008

  • CVE-2008-0320
    54Planlayın

    Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and

    KritikCVSS 9,3SilahlaştırılmışEPSS %56

    openoffice · openoffice.org17 Nis 2008

  • CVE-2008-1876
    35İzleyin

    PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in t

    OrtaCVSS 6,8Kavram kanıtıEPSS %27

    snarky · visualpic17 Nis 2008

  • CVE-2008-1878
    35İzleyin

    Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and earlier allows remote at

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    xine · xine-lib17 Nis 2008

  • CVE-2008-1881
    31İzleyin

    Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary c

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    videolan · vlc17 Nis 2008

  • CVE-2008-1436
    47Planlayın

    Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2)

    KritikCVSS 9,0Kavram kanıtıEPSS %36

    microsoft · windows-nt21 Nis 2008

  • CVE-2008-1898
    53Planlayın

    A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote

    KritikCVSS 9,3SilahlaştırılmışEPSS %52

    microsoft · office21 Nis 2008

  • CVE-2008-1903
    42Planlayın

    PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enabled, allows remote a

    YüksekCVSS 7,5Kavram kanıtıEPSS %39

    newanz · newsoffice22 Nis 2008

  • CVE-2008-1912
    41Planlayın

    Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    divx · divx player22 Nis 2008

  • CVE-2008-1914
    62Bu hafta

    Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to e

    KritikCVSS 10,0SilahlaştırılmışEPSS %73

    bigantsoft · bigant messenger22 Nis 2008

  • CVE-2007-6255
    46Planlayın

    Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · windows 200023 Nis 2008

  • CVE-2008-1765
    43Planlayın

    Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and phys

    KritikCVSS 9,3Kavram kanıtıEPSS %19

    adobe · photoshop23 Nis 2008

  • CVE-2008-1933
    21İzleyin

    Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary file

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    microsoft · zune software25 Nis 2008

  • CVE-2008-1963
    42Planlayın

    PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbi

    YüksekCVSS 7,5Kavram kanıtıEPSS %39

    quate · grape web statistics25 Nis 2008

  • CVE-2008-1965
    40Planlayın

    Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used b

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    ibm · lotus expeditor client25 Nis 2008

  • CVE-2008-1996
    23İzleyin

    licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash) via a large number

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    licq · licq28 Nis 2008

  • CVE-2008-2031
    40Planlayın

    VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a crafted LIST command, which triggers a NULL pointer dereferen

    OrtaCVSS 5,0SilahlaştırılmışEPSS %46

    vicftps · vicftps30 Nis 2008

  • CVE-2008-2040
    34İzleyin

    Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in Peercast 0.1218 and gnome-peercast allows remote

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    peercast · peercast30 Nis 2008