İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2008: sömürülen ve yeni ciddi CVE kayıtları

27 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2008-4910
    43Planlayın

    The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    sun · java web start3 Kas 2008

  • CVE-2008-2992
    91Hemen

    Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file t

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %98

    adobe · acrobat4 Kas 2008

  • CVE-2008-4922
    47Planlayın

    Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrar

    KritikCVSS 9,3SilahlaştırılmışEPSS %32

    djvu · activex control for microsoft office 20004 Kas 2008

  • CVE-2008-4814
    41Planlayın

    Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to

    KritikCVSS 9,3İstismar yokEPSS %11

    adobe · acrobat5 Kas 2008

  • CVE-2008-5002
    49Planlayın

    Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Comp

    KritikCVSS 9,3SilahlaştırılmışEPSS %40

    chilkat software · chilkat crypt activex control10 Kas 2008

  • CVE-2008-4387
    42Planlayın

    Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary cod

    KritikCVSS 9,3İstismar yokEPSS %15

    sap · sapgui10 Kas 2008

  • CVE-2008-5032
    40Planlayın

    Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code v

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    videolan · vlc media player10 Kas 2008

  • CVE-2008-5036
    49Planlayın

    Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code vi

    KritikCVSS 9,3SilahlaştırılmışEPSS %41

    videolan · vlc media player10 Kas 2008

  • CVE-2008-4029
    25İzleyin

    Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet Explorer, allows remote attackers to obtain sensi

    OrtaCVSS 4,3Kavram kanıtıEPSS %26

    microsoft · internet explorer12 Kas 2008

  • CVE-2008-4033
    25İzleyin

    Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, a

    OrtaCVSS 4,3Kavram kanıtıEPSS %27

    microsoft · xml core services12 Kas 2008

  • CVE-2008-4037
    55Planlayın

    Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB

    KritikCVSS 9,3SilahlaştırılmışEPSS %59

    microsoft · windows12 Kas 2008

  • CVE-2008-5053
    59Planlayın

    PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla! allows rem

    KritikCVSS 10,0Kavram kanıtıEPSS %64

    joomla · com rssreader13 Kas 2008

  • CVE-2008-5106
    44Planlayın

    Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly execute

    KritikCVSS 10,0SilahlaştırılmışEPSS %12

    karjasoft · sami ftp server17 Kas 2008

  • CVE-2008-4824
    41Planlayın

    Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute

    KritikCVSS 9,3İstismar yokEPSS %13

    adobe · flash player17 Kas 2008

  • CVE-2008-5112
    25İzleyin

    The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    microsoft · windows17 Kas 2008

  • CVE-2008-5159
    58Planlayın

    Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote at

    KritikCVSS 10,0SilahlaştırılmışEPSS %59

    clientsoftware · wincome mpd total18 Kas 2008

  • CVE-2008-5161
    60Bu hafta

    Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through

    DüşükCVSS 3,7SilahlaştırılmışEPSS %18

    ssh · tectia client19 Kas 2008

  • CVE-2008-5177
    45Planlayın

    Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to (1) execute arbitrary code on a Li

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    insight-tech · yosemite backup20 Kas 2008

  • CVE-2008-5178
    46Planlayın

    Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI.

    KritikCVSS 9,3Kavram kanıtıEPSS %31

    opera · opera20 Kas 2008

  • CVE-2008-5179
    25İzleyin

    Unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger allows remote att

    OrtaCVSS 5,0İstismar yokEPSS %16

    microsoft · office communications server20 Kas 2008

  • CVE-2008-5180
    41Planlayın

    Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consump

    OrtaCVSS 5,3Kavram kanıtıEPSS %67

    microsoft · office communicator20 Kas 2008

  • CVE-2008-5181
    24İzleyin

    Microsoft Communicator allows remote attackers to cause a denial of service (application or device outage) via instant messages containing l

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · office communicator20 Kas 2008

  • CVE-2008-5191
    40Planlayın

    Multiple SQL injection vulnerabilities in SePortal 2.4 allow remote attackers to execute arbitrary SQL commands via the (1) poll_id paramete

    YüksekCVSS 7,5SilahlaştırılmışEPSS %17

    seportal · seportal21 Kas 2008

  • CVE-2008-5220
    44Planlayın

    Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers to execute arbitrary c

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    wportfolio · wportfolio25 Kas 2008

  • CVE-2008-2431
    52Planlayın

    Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calling the Novell iPrint

    KritikCVSS 9,3İstismar yokEPSS %51

    novell · iprint25 Kas 2008

  • CVE-2008-5232
    47Planlayın

    Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media

    KritikCVSS 9,3Kavram kanıtıEPSS %32

    microsoft · windows 200025 Kas 2008

  • CVE-2008-5282
    45Planlayın

    Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    w3c · amaya web browser28 Kas 2008