İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2009: sömürülen ve yeni ciddi CVE kayıtları

50 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2009-1209
    41Planlayın

    Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script tag with a long def

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    w3 · amaya1 Nis 2009

  • CVE-2009-1210
    45Planlayın

    Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitra

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    wireshark · wireshark1 Nis 2009

  • CVE-2009-1216
    47Planlayın

    Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Service

    KritikCVSS 10,0İstismar yokEPSS %24

    microsoft · subsystem for unix-based applications1 Nis 2009

  • CVE-2009-1217
    22İzleyin

    Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of

    OrtaCVSS 4,3Kavram kanıtıEPSS %16

    microsoft · gdi\+1 Nis 2009

  • CVE-2007-4475
    49Planlayın

    Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote at

    KritikCVSS 9,3SilahlaştırılmışEPSS %40

    sap · sapgui1 Nis 2009

  • CVE-2009-0556
    85Hemen

    Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to ex

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %67

    microsoft · office powerpoint3 Nis 2009

  • CVE-2009-1247
    34İzleyin

    SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the user

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    acutecp.rediscussed · acutecp6 Nis 2009

  • CVE-2009-0796
    19İzleyin

    Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 for the Apache HTTP S

    DüşükCVSS 2,6Kavram kanıtıEPSS %29

    apache · mod perl7 Nis 2009

  • CVE-2009-1257
    40Planlayın

    Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash) or execute arbitra

    KritikCVSS 9,0Kavram kanıtıEPSS %13

    magic iso maker · magic iso maker7 Nis 2009

  • CVE-2009-1260
    50Planlayın

    Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or exec

    KritikCVSS 9,3SilahlaştırılmışEPSS %42

    ezbsystems · ultraiso7 Nis 2009

  • CVE-2008-6668
    24İzleyin

    Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    dirk bartley · nweb2fax8 Nis 2009

  • CVE-2009-1284
    24İzleyin

    Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a long .bib

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    bibtex · bibtex9 Nis 2009

  • CVE-2008-6714
    34İzleyin

    admin.php in xeCMS 1.0.0 RC2 and earlier allows remote attackers to bypass authentication and access the admin panel by setting the xecms_us

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    xecms project · xecms10 Nis 2009

  • CVE-2009-1287
    24İzleyin

    Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web sc

    OrtaCVSS 4,3Kavram kanıtıEPSS %23

    cisco · subscriber edge services manager13 Nis 2009

  • CVE-2009-0159
    31İzleyin

    Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execut

    OrtaCVSS 6,8İstismar yokEPSS %13

    ntp · ntp14 Nis 2009

  • CVE-2009-0077
    44Planlayın

    The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Accelerat

    OrtaCVSS 5,0İstismar yokEPSS %78

    microsoft · forefront threat management gateway15 Nis 2009

  • CVE-2009-0084
    47Planlayın

    Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG f

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · windows 200015 Nis 2009

  • CVE-2009-0086
    44Planlayın

    Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold

    KritikCVSS 10,0İstismar yokEPSS %14

    microsoft · windows 200015 Nis 2009

  • CVE-2009-0087
    45Planlayın

    Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · office word15 Nis 2009

  • CVE-2009-0088
    46Planlayın

    The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not prop

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · office converter pack15 Nis 2009

  • CVE-2009-0100
    46Planlayın

    Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel in Microsoft Office 2004 and 2008 for Mac; Microsoft Office Excel V

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · office15 Nis 2009

  • CVE-2009-0235
    47Planlayın

    Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and

    KritikCVSS 9,3İstismar yokEPSS %33

    microsoft · windows 200015 Nis 2009

  • CVE-2009-0237
    24İzleyin

    Cross-site scripting (XSS) vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Manageme

    OrtaCVSS 4,3İstismar yokEPSS %22

    microsoft · forefront threat management gateway15 Nis 2009

  • CVE-2009-0550
    41Planlayın

    Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2

    KritikCVSS 9,3İstismar yokEPSS %11

    microsoft · windows 200015 Nis 2009

  • CVE-2009-0551
    39İzleyin

    Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold an

    YüksekCVSS 8,1İstismar yokEPSS %24

    microsoft · internet explorer15 Nis 2009

  • CVE-2009-0552
    46Planlayın

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · ie15 Nis 2009

  • CVE-2009-0553
    49Planlayın

    Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold an

    KritikCVSS 9,3Kavram kanıtıEPSS %41

    microsoft · internet explorer15 Nis 2009

  • CVE-2009-0554
    45Planlayın

    Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vis

    YüksekCVSS 8,8İstismar yokEPSS %32

    microsoft · internet explorer15 Nis 2009

  • CVE-2009-0978
    40Planlayın

    Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to a

    OrtaCVSS 5,5SilahlaştırılmışEPSS %16

    oracle · database 10g15 Nis 2009

  • CVE-2009-0991
    25İzleyin

    Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote at

    OrtaCVSS 5,0Kavram kanıtıEPSS %15

    oracle · database 10g15 Nis 2009

  • CVE-2007-2238
    51Planlayın

    Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Applicat

    KritikCVSS 9,3SilahlaştırılmışEPSS %45

    microsoft · intelligent application gateway 200716 Nis 2009

  • CVE-2008-4830
    45Planlayın

    Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7

    KritikCVSS 9,3SilahlaştırılmışEPSS %27

    sap · sap gui16 Nis 2009

  • CVE-2009-1285
    40Planlayın

    Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows

    YüksekCVSS 7,5SilahlaştırılmışEPSS %10

    phpmyadmin · phpmyadmin16 Nis 2009

  • CVE-2009-1314
    43Planlayın

    body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    webfileexplorer · web file explorer16 Nis 2009

  • CVE-2009-1324
    42Planlayın

    Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    mini-stream · asx to mp3 converter17 Nis 2009

  • CVE-2009-1330
    43Planlayın

    Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist

    KritikCVSS 9,3Kavram kanıtıEPSS %21

    mini-stream · easy rm to mp3 converter17 Nis 2009

  • CVE-2008-5518
    48Planlayın

    Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Wi

    KritikCVSS 9,4Kavram kanıtıEPSS %35

    apache · geronimo17 Nis 2009

  • CVE-2009-0038
    22İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.

    OrtaCVSS 4,3Kavram kanıtıEPSS %18

    apache · geronimo17 Nis 2009

  • CVE-2009-0039
    30İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 throu

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    apache · geronimo17 Nis 2009

  • CVE-2009-1185
    52Planlayın

    udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sen

    YüksekCVSS 7,2SilahlaştırılmışEPSS %80

    udev project · udev17 Nis 2009

  • CVE-2009-1331
    42Planlayın

    Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of service (application cr

    KritikCVSS 9,3Kavram kanıtıEPSS %18

    microsoft · windows media player17 Nis 2009

  • CVE-2009-1335
    22İzleyin

    Microsoft Internet Explorer 7 and 8 on Windows XP and Vista allows remote attackers to cause a denial of service (application hang) via a la

    OrtaCVSS 4,3Kavram kanıtıEPSS %15

    microsoft · internet explorer17 Nis 2009

  • CVE-2009-1350
    60Bu hafta

    Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by esta

    KritikCVSS 10,0SilahlaştırılmışEPSS %65

    novell · netidentity client1.2.321 Nis 2009

  • CVE-2009-1191
    24İzleyin

    mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, inte

    OrtaCVSS 5,0İstismar yokEPSS %12

    apache · http server23 Nis 2009

  • CVE-2009-1437
    41Planlayın

    Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to exe

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    coolplayer · coolplayer27 Nis 2009

  • CVE-2008-2438
    43Planlayın

    Integer overflow in ovalarmsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbi

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · openview network node manager28 Nis 2009

  • CVE-2009-1429
    66Bu hafta

    The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec An

    KritikCVSS 10,0SilahlaştırılmışEPSS %87

    symantec · antivirus29 Nis 2009

  • CVE-2009-1430
    54Planlayın

    Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used

    KritikCVSS 9,3SilahlaştırılmışEPSS %55

    symantec · antivirus29 Nis 2009

  • CVE-2009-1492
    45Planlayın

    The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a

    KritikCVSS 9,3Kavram kanıtıEPSS %25

    adobe · acrobat30 Nis 2009

  • CVE-2009-1493
    34İzleyin

    The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote a

    OrtaCVSS 6,8Kavram kanıtıEPSS %21

    adobe · reader30 Nis 2009