İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2008: sömürülen ve yeni ciddi CVE kayıtları

33 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-6339
    30İzleyin

    The Akamai Download Manager (aka DLM or dlmanager) ActiveX control (DownloadManagerV2.ocx) before 2.2.3.5 allows remote attackers to force t

    OrtaCVSS 6,8İstismar yokEPSS %10

    akamai technologies · download manager1 May 2008

  • CVE-2008-2044
    33İzleyin

    includes/library.php in netOffice Dwins 1.3 p2 compares the demoSession variable to the 'true' string literal instead of the true boolean li

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    netoffice · dwins1 May 2008

  • CVE-2008-2069
    47Planlayın

    Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in

    KritikCVSS 9,3Kavram kanıtıEPSS %33

    novell · groupwise2 May 2008

  • CVE-2008-0599
    42Planlayın

    The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating th

    KritikCVSS 9,8İstismar yokEPSS %10

    php · php5 May 2008

  • CVE-2008-2005
    25İzleyin

    The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attacke

    OrtaCVSS 5,0Kavram kanıtıEPSS %16

    wonderware · intouch6 May 2008

  • CVE-2008-1801
    41Planlayın

    Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and po

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    rdesktop · rdesktop12 May 2008

  • CVE-2008-1802
    41Planlayın

    Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remot

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    rdesktop · rdesktop12 May 2008

  • CVE-2008-2138
    25İzleyin

    Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of /dav

    OrtaCVSS 5,0Kavram kanıtıEPSS %15

    oracle · application server portal12 May 2008

  • CVE-2008-2144
    45Planlayın

    Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of servi

    KritikCVSS 10,0İstismar yokEPSS %16

    sun · sunos12 May 2008

  • CVE-2008-2160
    42Planlayın

    Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execu

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · windows embedded compact12 May 2008

  • CVE-2008-2161
    60Bu hafta

    Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via

    KritikCVSS 10,0SilahlaştırılmışEPSS %65

    tftp · tftp server sp12 May 2008

  • CVE-2008-0166
    51Planlayın

    OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable

    YüksekCVSS 7,5Kavram kanıtıEPSS %70

    openssl · openssl13 May 2008

  • CVE-2008-2167
    22İzleyin

    Cross-site scripting (XSS) vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or HTML via the Referer

    OrtaCVSS 4,3Kavram kanıtıEPSS %16

    zyxel · zywall 10013 May 2008

  • CVE-2008-2168
    33İzleyin

    Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-

    OrtaCVSS 4,3Kavram kanıtıEPSS %54

    apache · http server13 May 2008

  • CVE-2008-0119
    46Planlayın

    Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attacke

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · office13 May 2008

  • CVE-2008-1091
    49Planlayın

    Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remot

    KritikCVSS 9,3İstismar yokEPSS %40

    microsoft · office13 May 2008

  • CVE-2008-1434
    46Planlayın

    Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows re

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · office13 May 2008

  • CVE-2008-1437
    24İzleyin

    Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft pro

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · antigen for exchange13 May 2008

  • CVE-2008-1438
    24İzleyin

    Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft pro

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · antigen for exchange13 May 2008

  • CVE-2008-2281
    44Planlayın

    Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote a

    KritikCVSS 9,3Kavram kanıtıEPSS %23

    microsoft · ie18 May 2008

  • CVE-2008-2286
    40Planlayın

    SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers t

    YüksekCVSS 7,5SilahlaştırılmışEPSS %32

    symantec · altiris deployment solution18 May 2008

  • CVE-2008-1104
    44Planlayın

    Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a craf

    KritikCVSS 9,3İstismar yokEPSS %22

    foxitsoftware · foxit reader21 May 2008

  • CVE-2008-1948
    44Planlayın

    The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly c

    KritikCVSS 10,0İstismar yokEPSS %12

    gnu · gnutls21 May 2008

  • CVE-2008-2241
    44Planlayın

    Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbit

    KritikCVSS 10,0İstismar yokEPSS %11

    ca · brightstor arcserve backup21 May 2008

  • CVE-2008-2242
    34İzleyin

    Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to exe

    YüksekCVSS 7,5İstismar yokEPSS %14

    ca · brightstor arcserve backup21 May 2008

  • CVE-2007-5962
    32İzleyin

    Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresigh

    YüksekCVSS 7,1Kavram kanıtıEPSS %12

    redhat · enterprise linux22 May 2008

  • CVE-2008-2240
    59Planlayın

    Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to

    KritikCVSS 10,0SilahlaştırılmışEPSS %64

    ibm · lotus domino22 May 2008

  • CVE-2008-1767
    34İzleyin

    Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly e

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    redhat · desktop23 May 2008

  • CVE-2008-0955
    49Planlayın

    Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arb

    KritikCVSS 9,3SilahlaştırılmışEPSS %41

    creative · creative software autoupdate engine29 May 2008

  • CVE-2008-1105
    51Planlayın

    Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute a

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    samba · samba29 May 2008

  • CVE-2008-2157
    51Planlayın

    robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified

    KritikCVSS 10,0SilahlaştırılmışEPSS %35

    emc corporation · alphastor29 May 2008

  • CVE-2008-2158
    58Planlayın

    Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow r

    KritikCVSS 10,0SilahlaştırılmışEPSS %58

    emc corporation · alphastor29 May 2008

  • CVE-2008-2499
    53Planlayın

    Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %77

    ibm · lotus sametime29 May 2008