İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2008: sömürülen ve yeni ciddi CVE kayıtları

64 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2008-4381
    26İzleyin

    Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert f

    OrtaCVSS 5,0İstismar yokEPSS %18

    microsoft · internet explorer2 Eki 2008

  • CVE-2008-2439
    40Planlayın

    Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in the client in Trend Mi

    OrtaCVSS 5,0SilahlaştırılmışEPSS %20

    trend micro · officescan3 Eki 2008

  • CVE-2008-4434
    40Planlayın

    Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attac

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    utorrent · utorrent3 Eki 2008

  • CVE-2008-4449
    49Planlayın

    Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message.

    KritikCVSS 9,3SilahlaştırılmışEPSS %38

    mirc · mirc6 Eki 2008

  • CVE-2008-4453
    40Planlayın

    The GdPicture (1) Light Imaging Toolkit 4.7.1 GdPicture4S.Imaging ActiveX control (gdpicture4s.ocx) 4.7.0.1 and (2) Pro Imaging SDK 5.7.1 Gd

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    dspicture · light imaging toolkit6 Eki 2008

  • CVE-2008-4384
    46Planlayın

    Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow re

    KritikCVSS 9,3SilahlaştırılmışEPSS %28

    iseemedia · lpviewer7 Eki 2008

  • CVE-2008-4493
    32İzleyin

    Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Edition, allows remote att

    OrtaCVSS 6,8Kavram kanıtıEPSS %17

    microsoft · digital image8 Eki 2008

  • CVE-2008-4500
    19İzleyin

    Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service (CPU consumption) via a crafte

    OrtaCVSS 4,0Kavram kanıtıEPSS %10

    solarwinds · serv-u file server8 Eki 2008

  • CVE-2008-4501
    39İzleyin

    Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to o

    KritikCVSS 9,0Kavram kanıtıEPSS %10

    solarwinds · serv-u file server8 Eki 2008

  • CVE-2008-3641
    47Planlayın

    The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen w

    KritikCVSS 10,0Kavram kanıtıEPSS %24

    apple · cups10 Eki 2008

  • CVE-2008-3544
    41Planlayın

    Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, and possibly 7.01, 7.50, and 7.53, al

    KritikCVSS 9,0Kavram kanıtıEPSS %18

    hp · openview network node manager13 Eki 2008

  • CVE-2008-4546
    37İzleyin

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denia

    OrtaCVSS 4,3Kavram kanıtıEPSS %65

    adobe · flash player14 Eki 2008

  • CVE-2008-4547
    40Planlayın

    Heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control (pdvratl.dll) in DVRHOST Web CMS OCX 1.0.1.25 allows remote attackers to

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    dvrstation · dvrstation cms14 Eki 2008

  • CVE-2008-4385
    48Planlayın

    Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of

    KritikCVSS 9,3SilahlaştırılmışEPSS %37

    systemrequirementslab · system requirements lab14 Eki 2008

  • CVE-2008-4397
    64Bu hafta

    Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 throu

    KritikCVSS 10,0SilahlaştırılmışEPSS %80

    ca · arcserve backup14 Eki 2008

  • CVE-2008-3982
    40Planlayın

    Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows

    OrtaCVSS 5,5SilahlaştırılmışEPSS %11

    oracle · database 10g14 Eki 2008

  • CVE-2008-3983
    40Planlayın

    Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows

    OrtaCVSS 5,5SilahlaştırılmışEPSS %41

    oracle · database 10g14 Eki 2008

  • CVE-2008-3984
    40Planlayın

    Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows

    OrtaCVSS 5,5SilahlaştırılmışEPSS %41

    oracle · database 10g14 Eki 2008

  • CVE-2008-3995
    40Planlayın

    Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticat

    OrtaCVSS 5,5SilahlaştırılmışEPSS %9

    oracle · database 10g14 Eki 2008

  • CVE-2008-3996
    40Planlayın

    Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticat

    OrtaCVSS 5,5SilahlaştırılmışEPSS %9

    oracle · database 10g14 Eki 2008

  • CVE-2008-4008
    57Planlayın

    Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP

    KritikCVSS 10,0SilahlaştırılmışEPSS %56

    oracle · bea product suite14 Eki 2008

  • CVE-2008-4479
    43Planlayın

    Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to ex

    KritikCVSS 10,0İstismar yokEPSS %10

    novell · edirectory14 Eki 2008

  • CVE-2008-4480
    43Planlayın

    Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to ex

    KritikCVSS 10,0İstismar yokEPSS %10

    novell · edirectory14 Eki 2008

  • CVE-2008-4556
    61Bu hafta

    Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers

    KritikCVSS 10,0SilahlaştırılmışEPSS %69

    sun · solaris14 Eki 2008

  • CVE-2008-4557
    54Planlayın

    plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code v

    KritikCVSS 10,0Kavram kanıtıEPSS %45

    cutephp · cutenews14 Eki 2008

  • CVE-2008-1446
    50Planlayın

    Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on

    KritikCVSS 9,0İstismar yokEPSS %46

    microsoft · internet information services14 Eki 2008

  • CVE-2008-3466
    63Bu hafta

    Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote atta

    KritikCVSS 10,0SilahlaştırılmışEPSS %77

    microsoft · host integration server 200014 Eki 2008

  • CVE-2008-3471
    53Planlayın

    Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Of

    KritikCVSS 9,3İstismar yokEPSS %52

    microsoft · excel14 Eki 2008

  • CVE-2008-3472
    47Planlayın

    Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote att

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · internet explorer14 Eki 2008

  • CVE-2008-3473
    47Planlayın

    Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote att

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · internet explorer14 Eki 2008

  • CVE-2008-3474
    34İzleyin

    Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote att

    OrtaCVSS 6,5İstismar yokEPSS %27

    microsoft · internet explorer14 Eki 2008

  • CVE-2008-3475
    47Planlayın

    Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been (

    YüksekCVSS 8,8İstismar yokEPSS %39

    microsoft · internet explorer14 Eki 2008

  • CVE-2008-3476
    46Planlayın

    Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle errors associated with access to uninitialized memory, which allows remo

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · internet explorer14 Eki 2008

  • CVE-2008-3477
    48Planlayın

    Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Off

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · internet explorer14 Eki 2008

  • CVE-2008-3479
    53Planlayın

    Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %44

    microsoft · windows 200014 Eki 2008

  • CVE-2008-4019
    47Planlayın

    Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 20

    KritikCVSS 9,3İstismar yokEPSS %34

    microsoft · excel14 Eki 2008

  • CVE-2008-4020
    24İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Office XP SP3 allows remote attackers to inject arbitrary web script or HTML via a doc

    OrtaCVSS 4,3İstismar yokEPSS %24

    microsoft · office14 Eki 2008

  • CVE-2008-4023
    52Planlayın

    Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote at

    KritikCVSS 10,0İstismar yokEPSS %39

    microsoft · windows 200014 Eki 2008

  • CVE-2008-4038
    52Planlayın

    Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote a

    KritikCVSS 10,0İstismar yokEPSS %39

    microsoft · windows 200014 Eki 2008

  • CVE-2008-4572
    58Planlayın

    GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary

    KritikCVSS 10,0SilahlaştırılmışEPSS %60

    guildftpd · guildftpd15 Eki 2008

  • CVE-2008-4582
    20İzleyin

    Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windows, do not properly

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    mozilla · firefox15 Eki 2008

  • CVE-2008-4587
    40Planlayın

    Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in Macrovisio

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    acresso · flexnet connect15 Eki 2008

  • CVE-2008-4609
    38İzleyin

    The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operatin

    YüksekCVSS 7,1Kavram kanıtıEPSS %32

    bsd · bsd20 Eki 2008

  • CVE-2008-4619
    44Planlayın

    The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted request to procedure 8

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    sun · sunos20 Eki 2008

  • CVE-2008-1547
    31İzleyin

    Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638)

    OrtaCVSS 4,3Kavram kanıtıEPSS %48

    microsoft · exchange server20 Eki 2008

  • CVE-2008-4652
    40Planlayın

    Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to exec

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    dart · powertcp ftp for activex21 Eki 2008

  • CVE-2008-4654
    54Planlayın

    Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4

    KritikCVSS 9,3SilahlaştırılmışEPSS %57

    videolan · vlc media player21 Eki 2008

  • CVE-2008-4668
    42Planlayın

    Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote attackers to include and

    KritikCVSS 9,0Kavram kanıtıEPSS %21

    joomla · com imagebrowser22 Eki 2008

  • CVE-2008-4687
    56Planlayın

    manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP

    KritikCVSS 9,0SilahlaştırılmışEPSS %67

    mantis · mantis22 Eki 2008

  • CVE-2008-4688
    24İzleyin

    core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source

    OrtaCVSS 5,0İstismar yokEPSS %11

    mantis · mantis22 Eki 2008

  • CVE-2008-4699
    45Planlayın

    Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attackers to execute arbitrar

    KritikCVSS 9,3Kavram kanıtıEPSS %27

    microsoft · peachtree accounting22 Eki 2008

  • CVE-2008-2469
    47Planlayın

    Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to exec

    KritikCVSS 10,0Kavram kanıtıEPSS %22

    libspf · libspf223 Eki 2008

  • CVE-2008-3862
    46Planlayın

    Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and

    KritikCVSS 10,0İstismar yokEPSS %18

    trend micro · officescan23 Eki 2008

  • CVE-2008-4250
    99Hemen

    The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta a

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    microsoft · windows 200023 Eki 2008

  • CVE-2008-4696
    40Planlayın

    Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML vi

    OrtaCVSS 4,3SilahlaştırılmışEPSS %45

    opera · opera23 Eki 2008

  • CVE-2008-4726
    49Planlayın

    Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbitrary code via a long

    KritikCVSS 9,0Kavram kanıtıEPSS %44

    goodtechsystems · goodtech ssh23 Eki 2008

  • CVE-2008-4728
    46Planlayın

    Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deploym

    KritikCVSS 9,3Kavram kanıtıEPSS %31

    hummingbird · deployment wizard23 Eki 2008

  • CVE-2008-4762
    40Planlayın

    Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service crash) and potentially

    KritikCVSS 9,0Kavram kanıtıEPSS %14

    freesshd · freesshd27 Eki 2008

  • CVE-2008-4764
    25İzleyin

    Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remote attackers to read a

    OrtaCVSS 5,0Kavram kanıtıEPSS %16

    extplorer · com extplorer27 Eki 2008

  • CVE-2008-4779
    59Planlayın

    Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary code via a long file

    KritikCVSS 10,0SilahlaştırılmışEPSS %64

    tguzip · tguzip29 Eki 2008

  • CVE-2008-4787
    27İzleyin

    Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname

    OrtaCVSS 5,8Kavram kanıtıEPSS %13

    microsoft · internet explorer29 Eki 2008

  • CVE-2008-4800
    28İzleyin

    The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denia

    OrtaCVSS 5,0Kavram kanıtıEPSS %25

    microsoft · debug diagnostic tool30 Eki 2008

  • CVE-2008-4801
    43Planlayın

    Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler

    KritikCVSS 10,0İstismar yokEPSS %11

    ibm · tivoli storage manager client30 Eki 2008

  • CVE-2008-4864
    36İzleyin

    Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out o

    YüksekCVSS 7,5Kavram kanıtıEPSS %21

    python · python31 Eki 2008