İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2009: sömürülen ve yeni ciddi CVE kayıtları

41 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2009-0183
    60Bu hafta

    Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers

    KritikCVSS 10,0SilahlaştırılmışEPSS %66

    free download manager · free download manager3 Şub 2009

  • CVE-2009-0184
    45Planlayın

    Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote

    KritikCVSS 9,3SilahlaştırılmışEPSS %27

    free download manager · free download manager3 Şub 2009

  • CVE-2009-0388
    44Planlayın

    Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to cause a denial of serv

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    tightvnc · tightvnc4 Şub 2009

  • CVE-2009-0419
    25İzleyin

    Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly r

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · xml core services4 Şub 2009

  • CVE-2008-6063
    20İzleyin

    Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" ope

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · word4 Şub 2009

  • CVE-2008-6080
    23İzleyin

    Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles) 4.4.2 component for Joomla! allows remote attackers to read

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    joomla · joomla6 Şub 2009

  • CVE-2008-6082
    40Planlayın

    Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO command.

    OrtaCVSS 5,0SilahlaştırılmışEPSS %44

    southrivertech · titan ftp server6 Şub 2009

  • CVE-2009-0473
    31İzleyin

    Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote

    OrtaCVSS 6,8Kavram kanıtıEPSS %13

    rockwellautomation · controllogix 1756-enbt\/a ethernet\/ ip bridge6 Şub 2009

  • CVE-2008-4559
    47Planlayın

    HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in

    KritikCVSS 10,0İstismar yokEPSS %24

    hp · openview network node manager8 Şub 2009

  • CVE-2009-0476
    48Planlayın

    Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio compone

    KritikCVSS 9,3SilahlaştırılmışEPSS %37

    multimediasoft · audio dj studio for .net8 Şub 2009

  • CVE-2009-0478
    42Planlayın

    Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request w

    OrtaCVSS 5,0Kavram kanıtıEPSS %71

    squid · squid8 Şub 2009

  • CVE-2009-0490
    42Planlayın

    Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other ve

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    audacityteam · audacity9 Şub 2009

  • CVE-2009-0450
    40Planlayın

    Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code via a long string in

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    blazevideo · hdtv player10 Şub 2009

  • CVE-2009-0075
    63Bu hafta

    Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to e

    KritikCVSS 9,3SilahlaştırılmışEPSS %85

    microsoft · internet explorer10 Şub 2009

  • CVE-2009-0076
    47Planlayın

    Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via the zoom style directiv

    KritikCVSS 9,3Kavram kanıtıEPSS %33

    microsoft · internet explorer10 Şub 2009

  • CVE-2009-0095
    44Planlayın

    Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · visio10 Şub 2009

  • CVE-2009-0096
    44Planlayın

    Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remot

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · visio10 Şub 2009

  • CVE-2009-0097
    44Planlayın

    Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · visio10 Şub 2009

  • CVE-2009-0098
    44Planlayın

    Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encap

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · exchange server10 Şub 2009

  • CVE-2009-0099
    28İzleyin

    The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2,

    OrtaCVSS 5,0İstismar yokEPSS %26

    microsoft · exchange server10 Şub 2009

  • CVE-2009-0305
    43Planlayın

    Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry

    KritikCVSS 9,3İstismar yokEPSS %19

    research in motion limited · blackberry application web loader10 Şub 2009

  • CVE-2009-0517
    55Planlayın

    Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary PHP code via the fiel

    KritikCVSS 10,0Kavram kanıtıEPSS %48

    phpslash · phpslash10 Şub 2009

  • CVE-2009-0542
    52Planlayın

    SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (pe

    YüksekCVSS 7,5Kavram kanıtıEPSS %73

    proftpd project · proftpd12 Şub 2009

  • CVE-2009-0543
    32İzleyin

    ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded m

    OrtaCVSS 6,8Kavram kanıtıEPSS %15

    proftpd · proftpd12 Şub 2009

  • CVE-2009-0544
    43Planlayın

    Buffer overflow in the PyCrypto ARC2 module 2.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code v

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    pycrypto · arc212 Şub 2009

  • CVE-2009-0545
    67Bu hafta

    cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the ty

    KritikCVSS 10,0SilahlaştırılmışEPSS %90

    zeroshell · zeroshell12 Şub 2009

  • CVE-2009-0546
    48Planlayın

    Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a lon

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    newsgator · feeddemon12 Şub 2009

  • CVE-2008-6132
    40Planlayın

    Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers

    OrtaCVSS 6,8SilahlaştırılmışEPSS %26

    brickhost · phpscheduleit13 Şub 2009

  • CVE-2009-0592
    40Planlayın

    Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local file

    YüksekCVSS 7,5Kavram kanıtıEPSS %34

    pnphpbb · pnphpbb216 Şub 2009

  • CVE-2009-0595
    30İzleyin

    PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled and magic_quotes_gpc

    OrtaCVSS 5,1Kavram kanıtıEPSS %34

    phpskelsite · phpskelsite16 Şub 2009

  • CVE-2008-6172
    31İzleyin

    Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!, when magic_quotes_

    OrtaCVSS 6,8Kavram kanıtıEPSS %12

    joomla · joomla19 Şub 2009

  • CVE-2009-0647
    25İzleyin

    msnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denia

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · windows live messenger19 Şub 2009

  • CVE-2008-6194
    34İzleyin

    Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service (memory consumption) via DNS packets

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows19 Şub 2009

  • CVE-2009-0650
    44Planlayın

    Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 and earlier, and possibly 5.02, allows remote attackers to caus

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    tptest · tptest20 Şub 2009

  • CVE-2009-0658
    57Planlayın

    Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafte

    YüksekCVSS 7,8SilahlaştırılmışEPSS %87

    adobe · acrobat20 Şub 2009

  • CVE-2008-6221
    46Planlayın

    PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remo

    YüksekCVSS 7,5Kavram kanıtıEPSS %53

    joomla · joomla20 Şub 2009

  • CVE-2008-6222
    23İzleyin

    Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allows remote attackers to

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    joomla · joomla20 Şub 2009

  • CVE-2009-0238
    78Bu hafta

    Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %42

    microsoft · excel25 Şub 2009

  • CVE-2009-0187
    49Planlayın

    Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execut

    KritikCVSS 9,3SilahlaştırılmışEPSS %39

    orbitdownloader · orbit downloader26 Şub 2009

  • CVE-2009-0519
    41Planlayın

    Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of

    KritikCVSS 9,3İstismar yokEPSS %14

    adobe · air26 Şub 2009

  • CVE-2009-0520
    46Planlayın

    Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave

    KritikCVSS 9,3Kavram kanıtıEPSS %28

    adobe · air26 Şub 2009