İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2008: sömürülen ve yeni ciddi CVE kayıtları

30 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2008-2952
    24İzleyin

    liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER da

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    openldap · openldap1 Tem 2008

  • CVE-2008-2959
    44Planlayın

    Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might allow remote attackers

    KritikCVSS 9,3Kavram kanıtıEPSS %24

    microsoft · visual basic enterprise edition2 Tem 2008

  • CVE-2008-3023
    21İzleyin

    Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet

    OrtaCVSS 4,3İstismar yokEPSS %11

    fswiki · freestyle wiki7 Tem 2008

  • CVE-2008-2463
    45Planlayın

    The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Micro

    OrtaCVSS 6,8SilahlaştırılmışEPSS %59

    microsoft · office snapshot viewer activex7 Tem 2008

  • CVE-2008-2798
    44Planlayın

    Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow

    KritikCVSS 10,0İstismar yokEPSS %13

    mozilla · firefox7 Tem 2008

  • CVE-2008-2950
    35İzleyin

    The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Pa

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    poppler · poppler7 Tem 2008

  • CVE-2008-3068
    35İzleyin

    Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation Li

    YüksekCVSS 7,5İstismar yokEPSS %17

    microsoft · access7 Tem 2008

  • CVE-2008-0085
    23İzleyin

    SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engi

    OrtaCVSS 5,0İstismar yokEPSS %10

    microsoft · data engine8 Tem 2008

  • CVE-2008-0086
    55Planlayın

    Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSD

    KritikCVSS 9,0İstismar yokEPSS %61

    microsoft · data engine8 Tem 2008

  • CVE-2008-0106
    47Planlayın

    Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute

    KritikCVSS 9,0İstismar yokEPSS %35

    microsoft · data engine8 Tem 2008

  • CVE-2008-0107
    46Planlayın

    Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2,

    KritikCVSS 9,0İstismar yokEPSS %34

    microsoft · data engine8 Tem 2008

  • CVE-2008-1435
    46Planlayın

    Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execute arbitrary code via

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · windows-nt8 Tem 2008

  • CVE-2008-1447
    60Bu hafta

    The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2

    OrtaCVSS 6,8SilahlaştırılmışEPSS %95

    microsoft · windows 20008 Tem 2008

  • CVE-2008-1454
    47Planlayın

    Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct

    KritikCVSS 9,4İstismar yokEPSS %34

    microsoft · windows 20008 Tem 2008

  • CVE-2008-2247
    24İzleyin

    Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrar

    OrtaCVSS 4,3İstismar yokEPSS %24

    microsoft · exchange server8 Tem 2008

  • CVE-2008-2248
    24İzleyin

    Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrar

    OrtaCVSS 4,3İstismar yokEPSS %24

    microsoft · exchange server8 Tem 2008

  • CVE-2008-2991
    29İzleyin

    Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via

    OrtaCVSS 6,1İstismar yokEPSS %16

    adobe · robohelp server9 Tem 2008

  • CVE-2008-2244
    47Planlayın

    Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · office word9 Tem 2008

  • CVE-2008-3112
    48Planlayın

    Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE

    KritikCVSS 10,0İstismar yokEPSS %25

    sun · jdk9 Tem 2008

  • CVE-2008-3158
    40Planlayın

    Unspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact and attack vectors, possibly related to IOCTL

    OrtaCVSS 6,9SilahlaştırılmışEPSS %5

    novell · novell client for windows11 Tem 2008

  • CVE-2008-2303
    44Planlayın

    Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    apple · iphone14 Tem 2008

  • CVE-2008-3173
    30İzleyin

    Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one dot character, which co

    OrtaCVSS 6,8İstismar yokEPSS %11

    microsoft · internet explorer14 Tem 2008

  • CVE-2008-2595
    23İzleyin

    Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknow

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    oracle · database 10g15 Tem 2008

  • CVE-2008-3242
    45Planlayın

    Heap-based buffer overflow in the PPMedia Class ActiveX control in PPMPlayer.dll in PPMate 2.3.1.93 allows remote attackers to execute arbit

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    ppmate · ppmedia class21 Tem 2008

  • CVE-2008-3257
    65Bu hafta

    Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier allow

    KritikCVSS 10,0SilahlaştırılmışEPSS %83

    bea · weblogic server22 Tem 2008

  • CVE-2008-3263
    39İzleyin

    The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.

    YüksekCVSS 7,8Kavram kanıtıEPSS %28

    asterisk · asterisk22 Tem 2008

  • CVE-2008-3269
    23İzleyin

    WRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and Full 2008 allows remote attackers to cause a denial of service (CPU consumpt

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    winsoftmagic · winremotepc full24 Tem 2008

  • CVE-2008-3362
    45Planlayın

    Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress allows remote attacke

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    giulio ganci · wp downloads manager30 Tem 2008

  • CVE-2008-3364
    47Planlayın

    Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition (OS

    KritikCVSS 9,3Kavram kanıtıEPSS %32

    trend micro · officescan30 Tem 2008

  • CVE-2008-3409
    33İzleyin

    Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (memory corruption and daem

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    epic games · unreal tournament 331 Tem 2008