İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2008: sömürülen ve yeni ciddi CVE kayıtları

34 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2008-3878
    48Planlayın

    Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Shareware Ultra Office Contro

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    ultrashareware · ultra office control2 Eyl 2008

  • CVE-2008-3892
    47Planlayın

    Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x

    KritikCVSS 10,0Kavram kanıtıEPSS %24

    vmware · ace3 Eyl 2008

  • CVE-2008-3922
    53Planlayın

    awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort paramet

    KritikCVSS 9,3SilahlaştırılmışEPSS %53

    telartis bv · awstats totals4 Eyl 2008

  • CVE-2007-5348
    53Planlayın

    Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2

    KritikCVSS 9,3Kavram kanıtıEPSS %52

    microsoft · digital image suite10 Eyl 2008

  • CVE-2008-2253
    46Planlayın

    Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a crafted audio-only fi

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · windows media player10 Eyl 2008

  • CVE-2008-3007
    47Planlayın

    Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and SP1, and Office

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · office10 Eyl 2008

  • CVE-2008-3008
    54Planlayın

    Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote

    KritikCVSS 9,3SilahlaştırılmışEPSS %55

    microsoft · windows media encoder10 Eyl 2008

  • CVE-2008-3012
    46Planlayın

    gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008,

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · digital image suite10 Eyl 2008

  • CVE-2008-3013
    53Planlayın

    gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008,

    KritikCVSS 9,3Kavram kanıtıEPSS %52

    microsoft · digital image suite10 Eyl 2008

  • CVE-2008-3014
    48Planlayın

    Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and

    KritikCVSS 9,3İstismar yokEPSS %36

    microsoft · digital image suite10 Eyl 2008

  • CVE-2008-3015
    49Planlayın

    Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visi

    KritikCVSS 9,3İstismar yokEPSS %39

    microsoft · digital image suite10 Eyl 2008

  • CVE-2008-3956
    41Planlayın

    orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibl

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    microsoft · organization chart10 Eyl 2008

  • CVE-2008-3957
    42Planlayın

    The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a clien

    KritikCVSS 9,3Kavram kanıtıEPSS %17

    microsoft · windows image acquisition logger10 Eyl 2008

  • CVE-2008-3529
    47Planlayın

    Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to

    KritikCVSS 10,0Kavram kanıtıEPSS %23

    xmlsoft · libxml212 Eyl 2008

  • CVE-2008-4071
    26İzleyin

    A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cau

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    adobe · acrobat15 Eyl 2008

  • CVE-2008-4110
    36İzleyin

    Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000 (aka SQL Server 8.0)

    YüksekCVSS 7,6İstismar yokEPSS %18

    microsoft · sql server16 Eyl 2008

  • CVE-2008-4114
    43Planlayın

    srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 al

    YüksekCVSS 7,1SilahlaştırılmışEPSS %49

    microsoft · windows 200016 Eyl 2008

  • CVE-2008-4096
    37İzleyin

    libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request

    YüksekCVSS 8,5Kavram kanıtıEPSS %11

    phpmyadmin · phpmyadmin18 Eyl 2008

  • CVE-2008-4109
    29İzleyin

    A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE use

    OrtaCVSS 5,0Kavram kanıtıEPSS %28

    debian · linux18 Eyl 2008

  • CVE-2008-4116
    40Planlayın

    Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly exe

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    apple · itunes18 Eyl 2008

  • CVE-2008-4127
    22İzleyin

    Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · internet explorer18 Eyl 2008

  • CVE-2008-4128
    72Bu hafta

    Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Serv

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %33

    cisco · ios18 Eyl 2008

  • CVE-2008-4138
    43Planlayın

    PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to e

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    technote · technote24 Eyl 2008

  • CVE-2008-4193
    62Bu hafta

    Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers to execute arbitrary

    KritikCVSS 10,0SilahlaştırılmışEPSS %74

    alt-n · securitygateway24 Eyl 2008

  • CVE-2008-0016
    53Planlayın

    Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote a

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    mozilla · firefox24 Eyl 2008

  • CVE-2008-4295
    30İzleyin

    Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth co

    OrtaCVSS 5,4Kavram kanıtıEPSS %30

    microsoft · windows mobile27 Eyl 2008

  • CVE-2008-4299
    25İzleyin

    A certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM Component in iashlpr.dll allows remote attackers

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · internet authentication service helper com component29 Eyl 2008

  • CVE-2008-4300
    24İzleyin

    A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows remote attackers to cause a denial of servic

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · internet information services29 Eyl 2008

  • CVE-2008-4301
    45Planlayın

    A certain ActiveX control in iisext.dll in Microsoft Internet Information Services (IIS) allows remote attackers to set a password via a str

    KritikCVSS 10,0İstismar yokEPSS %17

    microsoft · internet information services29 Eyl 2008

  • CVE-2008-4318
    44Planlayın

    Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) wh

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    project-observer · observer29 Eyl 2008

  • CVE-2008-3827
    40Planlayın

    Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of se

    KritikCVSS 9,3İstismar yokEPSS %10

    mplayer · mplayer29 Eyl 2008

  • CVE-2008-4322
    60Bu hafta

    Stack-based buffer overflow in RealFlex Technologies Ltd.

    KritikCVSS 10,0SilahlaştırılmışEPSS %65

    realflex technologies ltd · realwin server29 Eyl 2008

  • CVE-2008-4327
    22İzleyin

    gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial

    OrtaCVSS 4,3Kavram kanıtıEPSS %15

    microsoft · windows xp30 Eyl 2008

  • CVE-2008-4342
    42Planlayın

    NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used in CDBurnerXP 4.2.1.

    KritikCVSS 9,3Kavram kanıtıEPSS %17

    numedia soft · numedia dvd burning sdk30 Eyl 2008