İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2008: sömürülen ve yeni ciddi CVE kayıtları

66 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2008-5297
    36İzleyin

    Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update r

    YüksekCVSS 7,6Kavram kanıtıEPSS %18

    vitalwerks · no-ip duc1 Ara 2008

  • CVE-2008-5353
    66Bu hafta

    The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2

    KritikCVSS 10,0SilahlaştırılmışEPSS %85

    sun · jdk5 Ara 2008

  • CVE-2008-5357
    40Planlayın

    Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK a

    KritikCVSS 9,3İstismar yokEPSS %10

    sun · jre5 Ara 2008

  • CVE-2008-5359
    40Planlayın

    Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK an

    KritikCVSS 9,3İstismar yokEPSS %10

    sun · jre5 Ara 2008

  • CVE-2008-4310
    35İzleyin

    httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of s

    YüksekCVSS 7,8Kavram kanıtıEPSS %13

    ruby-lang · ruby8 Ara 2008

  • CVE-2008-5405
    51Planlayın

    Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attac

    KritikCVSS 9,3SilahlaştırılmışEPSS %46

    oxid · cain and abel10 Ara 2008

  • CVE-2008-5409
    40Planlayın

    Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Securit

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    bitdefender · antivirus10 Ara 2008

  • CVE-2008-2249
    46Planlayın

    Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows r

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · windows 200010 Ara 2008

  • CVE-2008-3009
    45Planlayın

    Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly

    KritikCVSS 10,0İstismar yokEPSS %15

    microsoft · windows media player10 Ara 2008

  • CVE-2008-3010
    45Planlayın

    Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate

    KritikCVSS 10,0İstismar yokEPSS %15

    microsoft · windows media player10 Ara 2008

  • CVE-2008-3465
    43Planlayın

    Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and

    KritikCVSS 9,8İstismar yokEPSS %13

    microsoft · windows 200010 Ara 2008

  • CVE-2008-4024
    46Planlayın

    Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document wit

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · office10 Ara 2008

  • CVE-2008-4025
    47Planlayın

    Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 G

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · office10 Ara 2008

  • CVE-2008-4026
    44Planlayın

    Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · office10 Ara 2008

  • CVE-2008-4027
    47Planlayın

    Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word View

    KritikCVSS 9,3İstismar yokEPSS %33

    microsoft · office10 Ara 2008

  • CVE-2008-4028
    48Planlayın

    Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office

    KritikCVSS 9,3İstismar yokEPSS %38

    microsoft · office10 Ara 2008

  • CVE-2008-4030
    44Planlayın

    Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Off

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · office10 Ara 2008

  • CVE-2008-4031
    44Planlayın

    Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · office10 Ara 2008

  • CVE-2008-4032
    44Planlayın

    Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorizati

    YüksekCVSS 7,5İstismar yokEPSS %47

    microsoft · office sharepoint server10 Ara 2008

  • CVE-2008-4252
    40Planlayın

    The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors dur

    YüksekCVSS 8,5İstismar yokEPSS %20

    microsoft · office frontpage10 Ara 2008

  • CVE-2008-4253
    40Planlayın

    The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office

    YüksekCVSS 8,5İstismar yokEPSS %20

    microsoft · office frontpage10 Ara 2008

  • CVE-2008-4254
    41Planlayın

    Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 S

    YüksekCVSS 8,5İstismar yokEPSS %22

    microsoft · office frontpage10 Ara 2008

  • CVE-2008-4255
    53Planlayın

    Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual B

    KritikCVSS 9,3Kavram kanıtıEPSS %53

    microsoft · office frontpage10 Ara 2008

  • CVE-2008-4256
    40Planlayın

    The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 an

    YüksekCVSS 8,5İstismar yokEPSS %20

    microsoft · office frontpage10 Ara 2008

  • CVE-2008-4258
    39İzleyin

    Microsoft Internet Explorer 5.01 SP4 and 6 SP1 does not properly validate parameters during calls to navigation methods, which allows remote

    YüksekCVSS 8,5İstismar yokEPSS %17

    microsoft · internet explorer10 Ara 2008

  • CVE-2008-4259
    47Planlayın

    Microsoft Internet Explorer 7 sometimes attempts to access uninitialized memory locations, which allows remote attackers to execute arbitrar

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · internet explorer10 Ara 2008

  • CVE-2008-4260
    40Planlayın

    Microsoft Internet Explorer 7 sometimes attempts to access a deleted object, which allows remote attackers to execute arbitrary code via a c

    YüksekCVSS 8,5İstismar yokEPSS %19

    microsoft · internet explorer10 Ara 2008

  • CVE-2008-4261
    46Planlayın

    Stack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6 on Windows XP and Server 2003 does not pro

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · internet explorer10 Ara 2008

  • CVE-2008-4264
    45Planlayın

    Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Office Compatibili

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · office excel10 Ara 2008

  • CVE-2008-4265
    44Planlayın

    Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · office excel10 Ara 2008

  • CVE-2008-4266
    45Planlayın

    Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel Viewer 2003 Gold and SP3; Office 2004 and 2008 f

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · excel10 Ara 2008

  • CVE-2008-4268
    40Planlayın

    The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation f

    YüksekCVSS 8,5İstismar yokEPSS %20

    microsoft · windows server 200810 Ara 2008

  • CVE-2008-4269
    40Planlayın

    The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obt

    YüksekCVSS 8,5İstismar yokEPSS %20

    microsoft · windows server 200810 Ara 2008

  • CVE-2008-4837
    48Planlayın

    Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Off

    KritikCVSS 9,3İstismar yokEPSS %37

    microsoft · office10 Ara 2008

  • CVE-2008-4841
    50Planlayın

    The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to e

    KritikCVSS 9,3Kavram kanıtıEPSS %43

    microsoft · wordpad10 Ara 2008

  • CVE-2008-5416
    62Bu hafta

    Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) S

    KritikCVSS 9,0SilahlaştırılmışEPSS %87

    microsoft · sql server10 Ara 2008

  • CVE-2008-4844
    57Planlayın

    Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6

    KritikCVSS 9,3SilahlaştırılmışEPSS %66

    microsoft · internet explorer11 Ara 2008

  • CVE-2008-5424
    21İzleyin

    The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle (1) multipart/mixed

    OrtaCVSS 4,3İstismar yokEPSS %12

    microsoft · outlook express11 Ara 2008

  • CVE-2008-5492
    48Planlayın

    Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remo

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    verypdf · verydoc pdf viewer12 Ara 2008

  • CVE-2008-5539
    40Planlayın

    RISING Antivirus 21.06.31.00 and possibly 20.61.42.00, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of

    KritikCVSS 9,3İstismar yokEPSS %10

    rising-global · rising antivirus12 Ara 2008

  • CVE-2008-5551
    21İzleyin

    The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS atta

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    microsoft · internet explorer12 Ara 2008

  • CVE-2008-5552
    20İzleyin

    The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS atta

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · internet explorer12 Ara 2008

  • CVE-2008-5553
    20İzleyin

    The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which all

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · internet explorer12 Ara 2008

  • CVE-2008-5554
    21İzleyin

    The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a U

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · internet explorer12 Ara 2008

  • CVE-2008-5555
    21İzleyin

    Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to authorize data exchange between domains, which all

    OrtaCVSS 4,3İstismar yokEPSS %12

    microsoft · internet explorer12 Ara 2008

  • CVE-2008-5556
    20İzleyin

    The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are e

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · internet explorer12 Ara 2008

  • CVE-2008-5587
    21İzleyin

    Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote

    OrtaCVSS 4,3Kavram kanıtıEPSS %12

    phppgadmin · phppgadmin16 Ara 2008

  • CVE-2008-5081
    40Planlayın

    The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attacker

    OrtaCVSS 5,0SilahlaştırılmışEPSS %59

    avahi · avahi16 Ara 2008

  • CVE-2008-5619
    58Planlayın

    html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2

    KritikCVSS 10,0Kavram kanıtıEPSS %58

    roundcube · webmail16 Ara 2008

  • CVE-2008-5626
    40Planlayın

    XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST command,

    OrtaCVSS 4,0SilahlaştırılmışEPSS %35

    dxmsoft · xm easy personal ftp server17 Ara 2008

  • CVE-2008-5499
    61Bu hafta

    Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrar

    KritikCVSS 9,3SilahlaştırılmışEPSS %79

    adobe · flash player for linux17 Ara 2008

  • CVE-2008-5664
    48Planlayın

    Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    realtek · realtek media player18 Ara 2008

  • CVE-2008-5666
    40Planlayın

    WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a sequence

    DüşükCVSS 3,5SilahlaştırılmışEPSS %20

    wftpserver · winftp ftp server18 Ara 2008

  • CVE-2008-5692
    24İzleyin

    Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    ipswitch · ws ftp19 Ara 2008

  • CVE-2008-5695
    38İzleyin

    wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option,

    YüksekCVSS 8,5Kavram kanıtıEPSS %12

    wordpress · wordpress19 Ara 2008

  • CVE-2008-5711
    47Planlayın

    Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary c

    KritikCVSS 9,3SilahlaştırılmışEPSS %32

    facebook · photouploader24 Ara 2008

  • CVE-2008-5722
    44Planlayın

    Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execut

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    sawstudio · sawstudio26 Ara 2008

  • CVE-2008-5732
    34İzleyin

    Unrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote attackers to execute arbitrary code by upl

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    kafooeyblog · kafooeyblog26 Ara 2008

  • CVE-2008-5745
    23İzleyin

    Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260,

    OrtaCVSS 4,3Kavram kanıtıEPSS %21

    microsoft · windows media player29 Ara 2008

  • CVE-2008-5748
    35İzleyin

    Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files vi

    YüksekCVSS 8,1Kavram kanıtıEPSS %10

    bloofox · bloofoxcms29 Ara 2008

  • CVE-2008-5750
    33İzleyin

    Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary comm

    OrtaCVSS 6,8Kavram kanıtıEPSS %21

    microsoft · internet explorer29 Ara 2008

  • CVE-2008-5763
    42Planlayın

    PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to e

    YüksekCVSS 7,5Kavram kanıtıEPSS %39

    mariovaldez · simple text-file login script30 Ara 2008

  • CVE-2008-5764
    51Planlayın

    PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to ex

    KritikCVSS 9,3Kavram kanıtıEPSS %45

    2500mhz · worksimple30 Ara 2008

  • CVE-2008-5789
    43Planlayın

    Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) component 1.0.5 for Joomla! allow re

    YüksekCVSS 7,5Kavram kanıtıEPSS %44

    recly · interactive feederator31 Ara 2008

  • CVE-2008-5790
    41Planlayın

    Multiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (com_competitions) component 1.0 for Joomla! allow remote attac

    YüksekCVSS 7,5Kavram kanıtıEPSS %36

    recly · competitions31 Ara 2008

  • CVE-2008-5793
    34İzleyin

    Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for Joomla! allow remote

    OrtaCVSS 6,8Kavram kanıtıEPSS %24

    joomla · joomla31 Ara 2008