İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2009: sömürülen ve yeni ciddi CVE kayıtları

42 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2008-6347
    39İzleyin

    PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b component for Joomla

    YüksekCVSS 7,5Kavram kanıtıEPSS %31

    joomla · joomla2 Mar 2009

  • CVE-2009-0751
    23İzleyin

    Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of he

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    yaws · yaws2 Mar 2009

  • CVE-2008-6393
    45Planlayın

    PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file

    KritikCVSS 10,0Kavram kanıtıEPSS %18

    jabber · jabber client3 Mar 2009

  • CVE-2009-0755
    23İzleyin

    The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    poppler · poppler3 Mar 2009

  • CVE-2009-0756
    23İzleyin

    The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service (crash) via a PDF

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    poppler · poppler3 Mar 2009

  • CVE-2009-0367
    40Planlayın

    The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by usin

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    wesnoth · wesnoth4 Mar 2009

  • CVE-2009-0815
    40Planlayın

    The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alp

    OrtaCVSS 5,0SilahlaştırılmışEPSS %42

    typo3 · typo34 Mar 2009

  • CVE-2009-0819
    19İzleyin

    sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash)

    OrtaCVSS 4,0Kavram kanıtıEPSS %10

    mysql · mysql4 Mar 2009

  • CVE-2009-0849
    35İzleyin

    Stack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote attackers to (1) execute arbitrary code on Linu

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    novastor · novanet9 Mar 2009

  • CVE-2009-0850
    26İzleyin

    Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web

    OrtaCVSS 4,3İstismar yokEPSS %29

    bitdefender · internet security9 Mar 2009

  • CVE-2009-0081
    47Planlayın

    The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vis

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · windows 200010 Mar 2009

  • CVE-2009-0085
    33İzleyin

    The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gol

    YüksekCVSS 7,1İstismar yokEPSS %15

    microsoft · windows 200010 Mar 2009

  • CVE-2009-0836
    53Planlayın

    Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing

    KritikCVSS 10,0SilahlaştırılmışEPSS %42

    foxitsoftware · reader10 Mar 2009

  • CVE-2009-0837
    63Bu hafta

    Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary cod

    KritikCVSS 10,0SilahlaştırılmışEPSS %75

    foxit · reader3.010 Mar 2009

  • CVE-2008-4563
    49Planlayın

    Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager

    KritikCVSS 10,0İstismar yokEPSS %28

    ibm · tivoli storage manager11 Mar 2009

  • CVE-2009-0093
    19İzleyin

    Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restr

    DüşükCVSS 3,5İstismar yokEPSS %17

    microsoft · windows 200011 Mar 2009

  • CVE-2009-0094
    29İzleyin

    The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap"

    OrtaCVSS 5,5İstismar yokEPSS %23

    microsoft · windows 200011 Mar 2009

  • CVE-2009-0233
    31İzleyin

    The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008,

    OrtaCVSS 5,8İstismar yokEPSS %27

    microsoft · windows 200011 Mar 2009

  • CVE-2009-0234
    35İzleyin

    The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008

    OrtaCVSS 6,4İstismar yokEPSS %34

    microsoft · windows 200011 Mar 2009

  • CVE-2009-0880
    40Planlayın

    Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to loa

    OrtaCVSS 6,8SilahlaştırılmışEPSS %31

    ibm · director12 Mar 2009

  • CVE-2009-0922
    19İzleyin

    PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumptio

    OrtaCVSS 4,0Kavram kanıtıEPSS %10

    postgresql · postgresql17 Mar 2009

  • CVE-2009-0932
    39İzleyin

    Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remot

    OrtaCVSS 6,4Kavram kanıtıEPSS %45

    debian · horde17 Mar 2009

  • CVE-2008-6482
    34İzleyin

    PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Joomla!, when register_gl

    OrtaCVSS 6,8Kavram kanıtıEPSS %22

    joomla · joomla18 Mar 2009

  • CVE-2008-6483
    38İzleyin

    PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_googlebase or Froogle)

    YüksekCVSS 7,5Kavram kanıtıEPSS %25

    virtuemart-solutions · com googlebase18 Mar 2009

  • CVE-2009-0927
    94Hemen

    Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to e

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %96

    adobe · acrobat reader19 Mar 2009

  • CVE-2009-1025
    42Planlayın

    PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute arbitrary PHP code v

    YüksekCVSS 7,5Kavram kanıtıEPSS %40

    beerwin · phplinkadmin19 Mar 2009

  • CVE-2009-1028
    47Planlayın

    Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file.

    KritikCVSS 9,3SilahlaştırılmışEPSS %33

    edisys · ezip wizard19 Mar 2009

  • CVE-2009-1029
    47Planlayın

    Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, r

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    poppeeper · pop peeper19 Mar 2009

  • CVE-2009-1031
    34İzleyin

    Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to

    YüksekCVSS 7,8Kavram kanıtıEPSS %11

    solarwinds · serv-u file server19 Mar 2009

  • CVE-2008-6504
    31İzleyin

    ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not

    OrtaCVSS 5,0Kavram kanıtıEPSS %36

    opensymphony · xwork23 Mar 2009

  • CVE-2008-6505
    42Planlayın

    Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbi

    OrtaCVSS 5,0Kavram kanıtıEPSS %72

    apache · struts23 Mar 2009

  • CVE-2009-1043
    49Planlayın

    Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vector

    KritikCVSS 10,0İstismar yokEPSS %30

    microsoft · internet explorer23 Mar 2009

  • CVE-2008-6508
    55Planlayın

    Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to byp

    YüksekCVSS 7,5SilahlaştırılmışEPSS %83

    igniterealtime · openfire23 Mar 2009

  • CVE-2009-0920
    52Planlayın

    Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers t

    YüksekCVSS 7,5SilahlaştırılmışEPSS %74

    hp · network node manager24 Mar 2009

  • CVE-2009-0921
    44Planlayın

    Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote att

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · network node manager24 Mar 2009

  • CVE-2009-0928
    43Planlayın

    Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · acrobat24 Mar 2009

  • CVE-2009-1061
    40Planlayın

    Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to execute a

    KritikCVSS 9,3İstismar yokEPSS %11

    adobe · acrobat reader24 Mar 2009

  • CVE-2009-0215
    48Planlayın

    Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and L

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    ibm · access support activex control25 Mar 2009

  • CVE-2009-1088
    40Planlayın

    Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted

    KritikCVSS 9,0Kavram kanıtıEPSS %11

    hannonhill · cascade25 Mar 2009

  • CVE-2009-1068
    41Planlayın

    Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remote attackers to cause

    KritikCVSS 9,3Kavram kanıtıEPSS %14

    bsplayer · bs.player26 Mar 2009

  • CVE-2009-1151
    98Hemen

    Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inje

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %96

    phpmyadmin · phpmyadmin26 Mar 2009

  • CVE-2009-1169
    40Planlayın

    The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to c

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    mozilla · firefox26 Mar 2009