İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2008: sömürülen ve yeni ciddi CVE kayıtları

44 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2008-2511
    40Planlayın

    Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEventCli.dll in CA Int

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    ca · internet security suite plus 20082 Haz 2008

  • CVE-2008-1035
    20İzleyin

    Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger me

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    apple · ical3 Haz 2008

  • CVE-2008-1661
    61Bu hafta

    Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute

    KritikCVSS 10,0SilahlaştırılmışEPSS %68

    hp · storageworks storage mirroring4 Haz 2008

  • CVE-2008-2549
    33İzleyin

    Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possi

    OrtaCVSS 4,3Kavram kanıtıEPSS %52

    adobe · acrobat reader4 Haz 2008

  • CVE-2007-5604
    34İzleyin

    Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support be

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    hp · instant support4 Haz 2008

  • CVE-2007-5606
    44Planlayın

    Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support befo

    KritikCVSS 10,0İstismar yokEPSS %12

    hp · instant support4 Haz 2008

  • CVE-2007-5607
    34İzleyin

    Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Suppor

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    hp · instant support4 Haz 2008

  • CVE-2008-2402
    23İzleyin

    The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient

    OrtaCVSS 5,0İstismar yokEPSS %11

    sun · java asp server4 Haz 2008

  • CVE-2008-2403
    46Planlayın

    Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow

    KritikCVSS 10,0İstismar yokEPSS %19

    sun · java asp server4 Haz 2008

  • CVE-2008-2541
    43Planlayın

    Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attacke

    KritikCVSS 10,0İstismar yokEPSS %10

    ca · etrust secure content manager4 Haz 2008

  • CVE-2008-1770
    40Planlayın

    CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and exe

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    akamai · download manager4 Haz 2008

  • CVE-2008-2551
    51Planlayın

    The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and ex

    KritikCVSS 9,3SilahlaştırılmışEPSS %46

    icona · instant messenger4 Haz 2008

  • CVE-2008-2631
    27İzleyin

    The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference

    OrtaCVSS 5,0Kavram kanıtıEPSS %22

    altn · mdaemon9 Haz 2008

  • CVE-2008-0960
    61Bu hafta

    SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) J

    KritikCVSS 10,0Kavram kanıtıEPSS %68

    net-snmp · net snmp10 Haz 2008

  • CVE-2008-2645
    42Planlayın

    Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow remote attackers to execute arbitrary PHP code via a

    YüksekCVSS 7,5Kavram kanıtıEPSS %39

    brim-project · brim10 Haz 2008

  • CVE-2008-2650
    33İzleyin

    Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register_globals is enabled, allows remote attackers to include

    OrtaCVSS 6,8Kavram kanıtıEPSS %18

    cmsimple · cmsimple10 Haz 2008

  • CVE-2008-0011
    46Planlayın

    Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, d

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · windows-nt11 Haz 2008

  • CVE-2008-1440
    35İzleyin

    Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multi

    YüksekCVSS 7,1İstismar yokEPSS %22

    microsoft · windows server 200311 Haz 2008

  • CVE-2008-1441
    27İzleyin

    Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of

    OrtaCVSS 5,4İstismar yokEPSS %19

    microsoft · windows server 200311 Haz 2008

  • CVE-2008-1442
    49Planlayın

    Heap-based buffer overflow in the substringData method in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary c

    KritikCVSS 9,3İstismar yokEPSS %38

    microsoft · internet explorer11 Haz 2008

  • CVE-2008-1444
    49Planlayın

    Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Syn

    KritikCVSS 9,3İstismar yokEPSS %39

    microsoft · windows-nt11 Haz 2008

  • CVE-2008-1445
    36İzleyin

    Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote a

    YüksekCVSS 7,1İstismar yokEPSS %27

    microsoft · windows-nt11 Haz 2008

  • CVE-2008-2683
    47Planlayın

    The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and

    KritikCVSS 9,3SilahlaştırılmışEPSS %34

    black ice · barcode sdk12 Haz 2008

  • CVE-2008-2364
    24İzleyin

    The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not

    OrtaCVSS 5,0İstismar yokEPSS %12

    apache · http server13 Haz 2008

  • CVE-2008-2689
    54Planlayın

    PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arbitrary PHP code via

    KritikCVSS 10,0Kavram kanıtıEPSS %46

    browsercrm · browsercrm13 Haz 2008

  • CVE-2008-2693
    40Planlayın

    Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote at

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    black ice · barcode sdk13 Haz 2008

  • CVE-2008-2702
    40Planlayın

    Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP servers to create or overw

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    estsoft · alftp13 Haz 2008

  • CVE-2008-2703
    58Planlayın

    Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to exe

    KritikCVSS 10,0SilahlaştırılmışEPSS %61

    novell · groupwise messenger13 Haz 2008

  • CVE-2008-2639
    53Planlayın

    Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows remote attackers to exe

    YüksekCVSS 7,6SilahlaştırılmışEPSS %77

    citect · citectfacilities16 Haz 2008

  • CVE-2008-2712
    42Planlayın

    Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properl

    KritikCVSS 9,3Kavram kanıtıEPSS %15

    vim · vim16 Haz 2008

  • CVE-2008-2719
    30İzleyin

    Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers to cause a denial of

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    nasm · netwide assembler16 Haz 2008

  • CVE-2008-2745
    40Planlayın

    Stack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) in Black Ice Software Annotation Plugin 10.95 allows remote attackers to

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    black ice · annotation software17 Haz 2008

  • CVE-2008-2752
    36İzleyin

    Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to

    YüksekCVSS 7,1Kavram kanıtıEPSS %27

    microsoft · word18 Haz 2008

  • CVE-2008-2666
    24İzleyin

    Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_mode restrictions by

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    php · php19 Haz 2008

  • CVE-2008-2789
    40Planlayın

    SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands via the page_id parame

    YüksekCVSS 7,5SilahlaştırılmışEPSS %22

    basic-cms · basic-cms20 Haz 2008

  • CVE-2008-2427
    42Planlayın

    Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    freebsd · freebsd24 Haz 2008

  • CVE-2008-2832
    44Planlayın

    Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution aspWebCalendar 2008 allows remote attackers to upload and ex

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    fullrevolution · aspwebcalendar200824 Haz 2008

  • CVE-2008-2841
    32İzleyin

    Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute

    OrtaCVSS 6,8Kavram kanıtıEPSS %15

    xchat · xchat24 Haz 2008

  • CVE-2008-2641
    47Planlayın

    Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers to cause a denial of

    KritikCVSS 10,0İstismar yokEPSS %23

    adobe · acrobat 3d25 Haz 2008

  • CVE-2008-2905
    40Planlayın

    PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when registe

    OrtaCVSS 6,8SilahlaştırılmışEPSS %18

    mambo · mambo30 Haz 2008

  • CVE-2008-2908
    48Planlayın

    Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows before 4.36 allow remot

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    novell · iprint client30 Haz 2008

  • CVE-2008-2947
    34İzleyin

    Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from o

    OrtaCVSS 6,8İstismar yokEPSS %24

    microsoft · internet explorer30 Haz 2008

  • CVE-2008-2948
    35İzleyin

    Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the

    OrtaCVSS 6,8Kavram kanıtıEPSS %25

    microsoft · internet explorer30 Haz 2008

  • CVE-2008-2949
    33İzleyin

    Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the

    OrtaCVSS 6,8Kavram kanıtıEPSS %20

    microsoft · internet explorer30 Haz 2008