İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2009: sömürülen ve yeni ciddi CVE kayıtları

33 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2008-5828
    24İzleyin

    Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote a

    OrtaCVSS 5,0İstismar yokEPSS %14

    microsoft · windows live messenger2 Oca 2009

  • CVE-2009-0065
    45Planlayın

    Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    linux · linux kernel7 Oca 2009

  • CVE-2008-0067
    59Planlayın

    Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute ar

    KritikCVSS 10,0SilahlaştırılmışEPSS %63

    hp · openview network node manager8 Oca 2009

  • CVE-2009-0043
    56Planlayın

    The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict acces

    KritikCVSS 10,0Kavram kanıtıEPSS %53

    ca · service level management8 Oca 2009

  • CVE-2009-0103
    33İzleyin

    Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    playsms · playsms9 Oca 2009

  • CVE-2008-5887
    23İzleyin

    phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability."

    OrtaCVSS 5,0İstismar yokEPSS %11

    tincan · phplist12 Oca 2009

  • CVE-2008-5517
    34İzleyin

    The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    git · git13 Oca 2009

  • CVE-2008-3979
    40Planlayın

    Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affe

    OrtaCVSS 5,5SilahlaştırılmışEPSS %32

    oracle · database 10g13 Oca 2009

  • CVE-2008-5440
    34İzleyin

    Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiali

    YüksekCVSS 7,5İstismar yokEPSS %11

    oracle · timesten in-memory database13 Oca 2009

  • CVE-2008-5444
    58Planlayın

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confident

    KritikCVSS 10,0SilahlaştırılmışEPSS %60

    oracle · secure backup13 Oca 2009

  • CVE-2008-5448
    52Planlayın

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confident

    KritikCVSS 10,0SilahlaştırılmışEPSS %40

    oracle · secure backup13 Oca 2009

  • CVE-2008-5457
    58Planlayın

    Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3,

    KritikCVSS 10,0SilahlaştırılmışEPSS %61

    oracle · bea product suite13 Oca 2009

  • CVE-2008-4834
    54Planlayın

    Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attack

    KritikCVSS 10,0İstismar yokEPSS %45

    microsoft · windows 200014 Oca 2009

  • CVE-2008-4835
    52Planlayın

    SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows

    KritikCVSS 9,8İstismar yokEPSS %44

    microsoft · windows 200014 Oca 2009

  • CVE-2009-0119
    51Planlayın

    Buffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (memory corruption and application crash) o

    KritikCVSS 10,0Kavram kanıtıEPSS %36

    microsoft · windows xp14 Oca 2009

  • CVE-2003-1566
    28İzleyin

    Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain s

    OrtaCVSS 5,0Kavram kanıtıEPSS %28

    microsoft · internet information services14 Oca 2009

  • CVE-2003-1567
    38İzleyin

    The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body o

    YüksekCVSS 7,5İstismar yokEPSS %25

    microsoft · internet information services14 Oca 2009

  • CVE-1999-1593
    35İzleyin

    Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1

    YüksekCVSS 7,6İstismar yokEPSS %18

    microsoft · windows 200014 Oca 2009

  • CVE-2009-0133
    60Bu hafta

    Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp fil

    KritikCVSS 10,0SilahlaştırılmışEPSS %67

    microsoft · html help workshop15 Oca 2009

  • CVE-2009-0174
    41Planlayın

    Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    vuplayer · vuplayer20 Oca 2009

  • CVE-2008-4388
    48Planlayın

    The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly val

    KritikCVSS 9,3SilahlaştırılmışEPSS %37

    symantec · appstream client20 Oca 2009

  • CVE-2009-0182
    60Bu hafta

    Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pl

    YüksekCVSS 8,8SilahlaştırılmışEPSS %48

    vuplayer · vuplayer20 Oca 2009

  • CVE-2009-0026
    25İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script

    OrtaCVSS 4,3Kavram kanıtıEPSS %26

    apache · jackrabbit21 Oca 2009

  • CVE-2009-0244
    44Planlayın

    Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Wi

    YüksekCVSS 8,8İstismar yokEPSS %30

    microsoft · windows mobile21 Oca 2009

  • CVE-2009-0255
    60Bu hafta

    The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with

    YüksekCVSS 7,5SilahlaştırılmışEPSS %9

    typo3 · typo322 Oca 2009

  • CVE-2009-0261
    41Planlayın

    Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary code via a Skins\Def

    KritikCVSS 9,3SilahlaştırılmışEPSS %13

    effectmatrix · total video player23 Oca 2009

  • CVE-2009-0263
    45Planlayın

    Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary cod

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    nullsoft · winamp23 Oca 2009

  • CVE-2007-2795
    43Planlayın

    Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) t

    KritikCVSS 9,0Kavram kanıtıEPSS %24

    ipswitch · imail27 Oca 2009

  • CVE-2009-0323
    59Planlayın

    Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long

    KritikCVSS 10,0SilahlaştırılmışEPSS %62

    w3 · amaya28 Oca 2009

  • CVE-2009-0341
    42Planlayın

    The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VA

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    microsoft · windows xp29 Oca 2009

  • CVE-2009-0347
    26İzleyin

    Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attackers to redirect users t

    OrtaCVSS 5,8Kavram kanıtıEPSS %10

    autonomy · ultraseek29 Oca 2009

  • CVE-2009-0350
    40Planlayın

    Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    merak · media player29 Oca 2009

  • CVE-2009-0369
    20İzleyin

    Microsoft Internet Explorer 7 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a craf

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    microsoft · internet explorer30 Oca 2009