İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2008: sömürülen ve yeni ciddi CVE kayıtları

56 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2007-2952
    42Planlayın

    Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allo

    KritikCVSS 9,3İstismar yokEPSS %15

    blue coat systems · filter1 Ağu 2008

  • CVE-2008-2935
    34İzleyin

    Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4Dec

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    xmlsoft · libxslt1 Ağu 2008

  • CVE-2008-3175
    44Planlayın

    Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows

    KritikCVSS 10,0İstismar yokEPSS %14

    ca · arcserve backup for laptops and desktops1 Ağu 2008

  • CVE-2008-1232
    40Planlayın

    Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote

    OrtaCVSS 4,3Kavram kanıtıEPSS %75

    apache · tomcat3 Ağu 2008

  • CVE-2008-2321
    41Planlayın

    Unspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    apple · mac os x3 Ağu 2008

  • CVE-2008-2370
    36İzleyin

    Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normaliz

    OrtaCVSS 5,0Kavram kanıtıEPSS %52

    apache · tomcat3 Ağu 2008

  • CVE-2008-3431
    67Bu hafta

    The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTL

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %6

    oracle · virtualbox5 Ağu 2008

  • CVE-2008-2939
    29İzleyin

    Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the

    OrtaCVSS 4,3İstismar yokEPSS %38

    apache · http server6 Ağu 2008

  • CVE-2008-0964
    41Planlayın

    Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, all

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    sun · opensolaris8 Ağu 2008

  • CVE-2008-3558
    57Planlayın

    Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 al

    KritikCVSS 9,3SilahlaştırılmışEPSS %65

    cisco · webex meeting manager8 Ağu 2008

  • CVE-2008-3273
    40Planlayın

    JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtai

    OrtaCVSS 5,0SilahlaştırılmışEPSS %47

    jboss · enterprise application platform10 Ağu 2008

  • CVE-2008-3571
    42Planlayın

    The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via an empty UDP packet to port 1900.

    YüksekCVSS 7,8Kavram kanıtıEPSS %35

    xerox · phaser10 Ağu 2008

  • CVE-2008-3004
    47Planlayın

    Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not properly

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · office12 Ağu 2008

  • CVE-2008-3005
    47Planlayın

    Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execu

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · office12 Ağu 2008

  • CVE-2008-3006
    48Planlayın

    Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel View

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · office12 Ağu 2008

  • CVE-2008-3018
    46Planlayın

    Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which a

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · windows nt12 Ağu 2008

  • CVE-2008-3019
    46Planlayın

    Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated Post

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · office12 Ağu 2008

  • CVE-2008-3020
    46Planlayın

    Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · office12 Ağu 2008

  • CVE-2008-3021
    48Planlayın

    Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which a

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · office12 Ağu 2008

  • CVE-2008-3460
    47Planlayın

    WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · office12 Ağu 2008

  • CVE-2008-3648
    44Planlayın

    nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DN

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · windows xp12 Ağu 2008

  • CVE-2008-0082
    50Planlayın

    An ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attacker

    KritikCVSS 10,0İstismar yokEPSS %34

    microsoft · windows messenger12 Ağu 2008

  • CVE-2008-0120
    47Planlayın

    Integer overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with a malforme

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · office powerpoint viewer12 Ağu 2008

  • CVE-2008-0121
    46Planlayın

    A "memory calculation error" in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file wit

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · office powerpoint viewer12 Ağu 2008

  • CVE-2008-1448
    36İzleyin

    The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the corr

    YüksekCVSS 7,1İstismar yokEPSS %26

    microsoft · outlook express12 Ağu 2008

  • CVE-2008-1455
    35İzleyin

    A "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1; Office Compatibility Pack fo

    OrtaCVSS 6,8İstismar yokEPSS %25

    microsoft · compatibility pack word excel powerpoint12 Ağu 2008

  • CVE-2008-2245
    51Planlayın

    Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System (MSCMS)

    KritikCVSS 9,3Kavram kanıtıEPSS %46

    microsoft · windows 200012 Ağu 2008

  • CVE-2008-2246
    41Planlayın

    Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a W

    YüksekCVSS 7,8İstismar yokEPSS %32

    microsoft · windows-nt12 Ağu 2008

  • CVE-2008-2938
    47Planlayın

    Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking a

    OrtaCVSS 4,3SilahlaştırılmışEPSS %99

    apache · tomcat12 Ağu 2008

  • CVE-2008-3655
    34İzleyin

    Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly restrict access to criti

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    ruby-lang · ruby12 Ağu 2008

  • CVE-2008-3656
    52Planlayın

    Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick i

    YüksekCVSS 7,8SilahlaştırılmışEPSS %70

    ruby-lang · ruby12 Ağu 2008

  • CVE-2008-3657
    34İzleyin

    The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not check "taintness

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    ruby-lang · ruby12 Ağu 2008

  • CVE-2008-1456
    44Planlayın

    Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, an

    KritikCVSS 9,0İstismar yokEPSS %28

    microsoft · windows-nt13 Ağu 2008

  • CVE-2008-1457
    47Planlayın

    The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not proper

    KritikCVSS 9,0İstismar yokEPSS %36

    microsoft · windows-nt13 Ağu 2008

  • CVE-2008-2254
    46Planlayın

    Microsoft Internet Explorer 6 and 7 accesses uninitialized memory, which allows remote attackers to cause a denial of service (crash) and ex

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · internet explorer13 Ağu 2008

  • CVE-2008-2255
    46Planlayın

    Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory, which allows remote attackers to cause a denial of service (crash)

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · internet explorer13 Ağu 2008

  • CVE-2008-2256
    46Planlayın

    Microsoft Internet Explorer 5.01, 6, and 7 does not properly handle objects that have been incorrectly initialized or deleted, which allows

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · internet explorer13 Ağu 2008

  • CVE-2008-2257
    48Planlayın

    Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote attackers to cause a den

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · internet explorer13 Ağu 2008

  • CVE-2008-2258
    48Planlayın

    Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote attackers to cause a den

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · internet explorer13 Ağu 2008

  • CVE-2008-2259
    46Planlayın

    Microsoft Internet Explorer 6 and 7 does not perform proper "argument validation" during print preview, which allows remote attackers to exe

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · internet explorer13 Ağu 2008

  • CVE-2008-3443
    25İzleyin

    The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423

    OrtaCVSS 5,0Kavram kanıtıEPSS %15

    ruby-lang · ruby14 Ağu 2008

  • CVE-2008-3533
    46Planlayın

    Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attac

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    gnome · yelp18 Ağu 2008

  • CVE-2008-3703
    44Planlayın

    The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation for Windows (

    KritikCVSS 10,0İstismar yokEPSS %12

    symantec · veritas storage foundation18 Ağu 2008

  • CVE-2008-3704
    54Planlayın

    Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Mic

    KritikCVSS 9,3SilahlaştırılmışEPSS %55

    microsoft · visual basic18 Ağu 2008

  • CVE-2008-3732
    41Planlayın

    Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    videolan · vlc media player20 Ağu 2008

  • CVE-2008-3734
    41Planlayın

    Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denia

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    ipswitch · ws ftp home20 Ağu 2008

  • CVE-2008-3794
    30İzleyin

    Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    videolan · vlc media player26 Ağu 2008

  • CVE-2008-3795
    45Planlayın

    Buffer overflow in Ipswitch WS_FTP Home client allows remote FTP servers to have an unknown impact via a long "message response."

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    ipswitch · ws ftp home27 Ağu 2008

  • CVE-2007-1682
    46Planlayın

    Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote att

    KritikCVSS 9,3SilahlaştırılmışEPSS %29

    softartisans · xfile27 Ağu 2008

  • CVE-2008-2433
    42Planlayın

    The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.

    KritikCVSS 9,8İstismar yokEPSS %10

    trendmicro · client server messaging suite27 Ağu 2008

  • CVE-2008-3790
    25İzleyin

    The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of

    OrtaCVSS 5,0Kavram kanıtıEPSS %15

    ruby-lang · ruby27 Ağu 2008

  • CVE-2008-3842
    23İzleyin

    Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update does not properly de

    OrtaCVSS 4,3İstismar yokEPSS %20

    microsoft · windows-nt27 Ağu 2008

  • CVE-2008-3843
    24İzleyin

    Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework with the MS07-040 update does not properly detec

    OrtaCVSS 4,3İstismar yokEPSS %21

    microsoft · windows-nt27 Ağu 2008

  • CVE-2008-3480
    40Planlayın

    Stack-based buffer overflow in the Anzio Web Print Object (WePO) ActiveX control 3.2.19 and 3.2.24, as used in Anzio Print Wizard, allows re

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    anzio · print wizard29 Ağu 2008

  • CVE-2008-3873
    22İzleyin

    The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard

    OrtaCVSS 4,3İstismar yokEPSS %16

    adobe · flash player29 Ağu 2008

  • CVE-2008-3282
    34İzleyin

    Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1,

    YüksekCVSS 7,8İstismar yokEPSS %10

    apache · openoffice29 Ağu 2008