İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2009: sömürülen ve yeni ciddi CVE kayıtları

42 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2009-1511
    35İzleyin

    GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file that contains a certain

    YüksekCVSS 7,8Kavram kanıtıEPSS %14

    microsoft · windows xp1 May 2009

  • CVE-2008-4828
    61Bu hafta

    Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 thr

    KritikCVSS 10,0SilahlaştırılmışEPSS %71

    ibm · tivoli storage manager client5 May 2009

  • CVE-2009-0720
    43Planlayın

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary cod

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · openview network node manager5 May 2009

  • CVE-2009-1523
    28İzleyin

    Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote att

    OrtaCVSS 5,0Kavram kanıtıEPSS %25

    mortbay · jetty5 May 2009

  • CVE-2009-1490
    24İzleyin

    Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execut

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    sendmail · sendmail5 May 2009

  • CVE-2009-1551
    41Planlayın

    Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP code via a URL in the (

    YüksekCVSS 7,5Kavram kanıtıEPSS %36

    qt-cute · quickteam6 May 2009

  • CVE-2009-1558
    40Planlayın

    Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allo

    YüksekCVSS 7,8Kavram kanıtıEPSS %29

    cisco · wvc54gca6 May 2009

  • CVE-2009-1574
    23İzleyin

    racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    ipsec-tools · ipsec-tools6 May 2009

  • CVE-2009-1608
    40Planlayın

    Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrar

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    microchip · mplab ide11 May 2009

  • CVE-2009-1612
    47Planlayın

    Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote attackers to execute

    KritikCVSS 9,3SilahlaştırılmışEPSS %33

    baofeng · storm11 May 2009

  • CVE-2009-0220
    48Planlayın

    Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 200

    KritikCVSS 9,3İstismar yokEPSS %37

    microsoft · office powerpoint12 May 2009

  • CVE-2009-0221
    48Planlayın

    Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint fil

    KritikCVSS 9,3İstismar yokEPSS %37

    microsoft · office powerpoint12 May 2009

  • CVE-2009-0222
    46Planlayın

    Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a f

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · office powerpoint12 May 2009

  • CVE-2009-0223
    45Planlayın

    Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a f

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · office powerpoint12 May 2009

  • CVE-2009-0224
    46Planlayın

    Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in M

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · compatibility pack word excel powerpoint12 May 2009

  • CVE-2009-0225
    46Planlayın

    Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoi

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · office powerpoint12 May 2009

  • CVE-2009-0226
    47Planlayın

    Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows r

    KritikCVSS 9,3İstismar yokEPSS %34

    microsoft · office powerpoint12 May 2009

  • CVE-2009-0227
    48Planlayın

    Stack-based buffer overflow in the PowerPoint 4.2 conversion filter (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · office powerpoint12 May 2009

  • CVE-2009-1128
    45Planlayın

    Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a f

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · office powerpoint12 May 2009

  • CVE-2009-1129
    48Planlayın

    Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · office powerpoint12 May 2009

  • CVE-2009-1130
    49Planlayın

    Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows rem

    KritikCVSS 9,3İstismar yokEPSS %39

    microsoft · office12 May 2009

  • CVE-2009-1131
    48Planlayın

    Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large a

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · office powerpoint12 May 2009

  • CVE-2009-1137
    46Planlayın

    Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a f

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · office powerpoint12 May 2009

  • CVE-2009-0714
    43Planlayın

    Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x

    YüksekCVSS 7,2Kavram kanıtıEPSS %51

    hp · data protector express14 May 2009

  • CVE-2009-1641
    46Planlayın

    Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL

    KritikCVSS 9,3SilahlaştırılmışEPSS %30

    mini-stream · ripper15 May 2009

  • CVE-2009-1667
    45Planlayın

    Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long entry in a .m3u f

    KritikCVSS 9,3Kavram kanıtıEPSS %27

    mini-stream · castripper18 May 2009

  • CVE-2009-1669
    44Planlayın

    The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    smarty · smarty18 May 2009

  • CVE-2009-1671
    40Planlayın

    Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    sun · jre18 May 2009

  • CVE-2009-1675
    41Planlayın

    Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a

    KritikCVSS 9,3SilahlaştırılmışEPSS %13

    electrasoft · 32bit ftp18 May 2009

  • CVE-2009-1252
    33İzleyin

    Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSS

    OrtaCVSS 6,8İstismar yokEPSS %21

    ntp · ntp19 May 2009

  • CVE-2009-1377
    23İzleyin

    The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of s

    OrtaCVSS 5,0İstismar yokEPSS %11

    openssl · openssl19 May 2009

  • CVE-2009-1378
    24İzleyin

    Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow r

    OrtaCVSS 5,0İstismar yokEPSS %12

    openssl · openssl19 May 2009

  • CVE-2009-1379
    25İzleyin

    Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attacke

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    openssl · openssl19 May 2009

  • CVE-2009-1730
    56Planlayın

    Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary

    KritikCVSS 10,0SilahlaştırılmışEPSS %54

    netmechanica · netdecision tftp server20 May 2009

  • CVE-2009-1161
    45Planlayın

    Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in

    KritikCVSS 10,0İstismar yokEPSS %16

    cisco · ciscoworks common services21 May 2009

  • CVE-2009-1759
    41Planlayın

    Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    rahul · dtorrent22 May 2009

  • CVE-2009-1765
    32İzleyin

    Multiple directory traversal vulnerabilities in pluck 4.6.2, when register_globals is enabled, allow remote attackers to include and execute

    OrtaCVSS 6,8Kavram kanıtıEPSS %15

    pluck-cms · pluck22 May 2009

  • CVE-2009-1774
    42Planlayın

    Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and execute arbitrary local

    KritikCVSS 9,3Kavram kanıtıEPSS %17

    strawberry · strawberry22 May 2009

  • CVE-2009-1376
    41Planlayın

    Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    pidgin · pidgin26 May 2009

  • CVE-2009-1800
    33İzleyin

    Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames iGame 2009, allows re

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    chinagames · igame28 May 2009

  • CVE-2009-1537
    80Hemen

    Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %51

    microsoft · directx29 May 2009

  • CVE-2009-1831
    48Planlayın

    The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    nullsoft · winamp29 May 2009