İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2009: sömürülen ve yeni ciddi CVE kayıtları

64 kayıt · 3 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2009-0950
    46Planlayın

    Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (appli

    KritikCVSS 9,3SilahlaştırılmışEPSS %28

    apple · itunes2 Haz 2009

  • CVE-2009-1902
    24İzleyin

    The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a multipart form datapo

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    trustwave · modsecurity3 Haz 2009

  • CVE-2009-1385
    41Planlayın

    Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30

    YüksekCVSS 7,8İstismar yokEPSS %33

    linux · kernel4 Haz 2009

  • CVE-2009-1386
    44Planlayın

    ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a

    OrtaCVSS 5,0SilahlaştırılmışEPSS %80

    openssl · openssl4 Haz 2009

  • CVE-2009-1387
    23İzleyin

    The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of s

    OrtaCVSS 5,0İstismar yokEPSS %10

    openssl · openssl4 Haz 2009

  • CVE-2009-1916
    43Planlayın

    dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter.

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    gscripts · dns tools4 Haz 2009

  • CVE-2009-0033
    23İzleyin

    Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing ar

    OrtaCVSS 5,0İstismar yokEPSS %10

    apache · tomcat5 Haz 2009

  • CVE-2009-0580
    45Planlayın

    Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attacker

    OrtaCVSS 4,3SilahlaştırılmışEPSS %94

    apache · tomcat5 Haz 2009

  • CVE-2009-1936
    52Planlayın

    _functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows re

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    cpcommerce project · cpcommerce5 Haz 2009

  • CVE-2008-6825
    40Planlayın

    Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute

    OrtaCVSS 6,8SilahlaştırılmışEPSS %20

    trixbox · trixbox5 Haz 2009

  • CVE-2009-1943
    62Bu hafta

    Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    safenet-inc · softremote5 Haz 2009

  • CVE-2009-1944
    40Planlayın

    Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag.

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    aimp · aimp5 Haz 2009

  • CVE-2009-1955
    46Planlayın

    The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn mod

    YüksekCVSS 7,5Kavram kanıtıEPSS %52

    apache · apr-util7 Haz 2009

  • CVE-2009-1956
    29İzleyin

    Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obta

    OrtaCVSS 6,4İstismar yokEPSS %12

    apache · apr-util7 Haz 2009

  • CVE-2009-1960
    44Planlayın

    inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include an

    KritikCVSS 9,3Kavram kanıtıEPSS %23

    dokuwiki · dokuwiki7 Haz 2009

  • CVE-2008-6829
    40Planlayın

    VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a LIST command that starts with a "/\/" (forward slash, backwar

    OrtaCVSS 5,0SilahlaştırılmışEPSS %37

    vicftps · vicftps8 Haz 2009

  • CVE-2009-0949
    36İzleyin

    The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allow

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    apple · cups9 Haz 2009

  • CVE-2009-1535
    59Planlayın

    The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mec

    YüksekCVSS 7,5SilahlaştırılmışEPSS %98

    microsoft · internet information services10 Haz 2009

  • CVE-2009-0228
    46Planlayın

    Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Microsoft Windows 2000 S

    KritikCVSS 10,0İstismar yokEPSS %20

    microsoft · windows 200010 Haz 2009

  • CVE-2009-0230
    46Planlayın

    The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allo

    KritikCVSS 9,0İstismar yokEPSS %34

    microsoft · windows 200010 Haz 2009

  • CVE-2009-0239
    27İzleyin

    Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted

    OrtaCVSS 4,3İstismar yokEPSS %32

    microsoft · windows server 200310 Haz 2009

  • CVE-2009-0563
    80Hemen

    Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %62

    microsoft · office10 Haz 2009

  • CVE-2009-0565
    49Planlayın

    Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File For

    KritikCVSS 9,3Kavram kanıtıEPSS %40

    microsoft · office10 Haz 2009

  • CVE-2009-0568
    50Planlayın

    The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 20

    KritikCVSS 10,0İstismar yokEPSS %32

    microsoft · windows 200010 Haz 2009

  • CVE-2009-1138
    52Planlayın

    The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows r

    KritikCVSS 10,0İstismar yokEPSS %39

    microsoft · windows 200010 Haz 2009

  • CVE-2009-1139
    43Planlayın

    Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode

    YüksekCVSS 7,8İstismar yokEPSS %39

    microsoft · adam10 Haz 2009

  • CVE-2009-1533
    48Planlayın

    Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1,

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · office10 Haz 2009

  • CVE-2009-1699
    39İzleyin

    The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 throug

    YüksekCVSS 7,5Kavram kanıtıEPSS %29

    apple · safari10 Haz 2009

  • CVE-2009-0549
    46Planlayın

    Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · office10 Haz 2009

  • CVE-2009-0557
    77Bu hafta

    Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %53

    microsoft · office10 Haz 2009

  • CVE-2009-0558
    46Planlayın

    Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · office10 Haz 2009

  • CVE-2009-0559
    46Planlayın

    Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · office10 Haz 2009

  • CVE-2009-0560
    45Planlayın

    Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · office10 Haz 2009

  • CVE-2009-0561
    48Planlayın

    Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Micr

    KritikCVSS 9,3İstismar yokEPSS %36

    microsoft · office10 Haz 2009

  • CVE-2009-1122
    60Bu hafta

    The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows re

    YüksekCVSS 7,5SilahlaştırılmışEPSS %98

    microsoft · internet information services10 Haz 2009

  • CVE-2009-1123
    62Bu hafta

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly v

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %4

    microsoft · windows 200010 Haz 2009

  • CVE-2009-1134
    48Planlayın

    Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, a

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · office10 Haz 2009

  • CVE-2009-1140
    35İzleyin

    Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2

    YüksekCVSS 7,1Kavram kanıtıEPSS %24

    microsoft · internet explorer10 Haz 2009

  • CVE-2009-1141
    45Planlayın

    Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecifi

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · internet explorer10 Haz 2009

  • CVE-2009-1528
    48Planlayın

    Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Serve

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · internet explorer10 Haz 2009

  • CVE-2009-1529
    41Planlayın

    Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 d

    YüksekCVSS 8,1İstismar yokEPSS %28

    microsoft · internet explorer10 Haz 2009

  • CVE-2009-1530
    47Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and

    KritikCVSS 9,3İstismar yokEPSS %33

    microsoft · internet explorer10 Haz 2009

  • CVE-2009-1531
    48Planlayın

    Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 a

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · internet explorer10 Haz 2009

  • CVE-2009-1532
    46Planlayın

    Microsoft Internet Explorer 8 for Windows XP SP2 and SP3; 8 for Server 2003 SP2; 8 for Vista Gold, SP1, and SP2; and 8 for Server 2008 SP2 d

    YüksekCVSS 8,8İstismar yokEPSS %36

    microsoft · internet explorer10 Haz 2009

  • CVE-2009-0510
    40Planlayın

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and

    KritikCVSS 9,3İstismar yokEPSS %10

    adobe · acrobat11 Haz 2009

  • CVE-2009-0511
    40Planlayın

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and

    KritikCVSS 9,3İstismar yokEPSS %10

    adobe · acrobat11 Haz 2009

  • CVE-2009-0512
    40Planlayın

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and

    KritikCVSS 9,3İstismar yokEPSS %10

    adobe · acrobat11 Haz 2009

  • CVE-2009-0888
    40Planlayın

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and

    KritikCVSS 9,3İstismar yokEPSS %10

    adobe · acrobat11 Haz 2009

  • CVE-2009-0889
    40Planlayın

    Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and

    KritikCVSS 9,3İstismar yokEPSS %10

    adobe · acrobat11 Haz 2009

  • CVE-2009-1420
    44Planlayın

    Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP)

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · openview network node manager11 Haz 2009

  • CVE-2009-1855
    41Planlayın

    Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and

    KritikCVSS 9,3İstismar yokEPSS %12

    adobe · acrobat11 Haz 2009

  • CVE-2009-1856
    41Planlayın

    Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 b

    KritikCVSS 9,3İstismar yokEPSS %13

    adobe · acrobat11 Haz 2009

  • CVE-2009-0202
    44Planlayın

    Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote atta

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · office powerpoint11 Haz 2009

  • CVE-2009-1904
    24İzleyin

    The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (appl

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    ruby-lang · ruby11 Haz 2009

  • CVE-2008-5515
    26İzleyin

    Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname

    OrtaCVSS 5,0İstismar yokEPSS %18

    apache · tomcat16 Haz 2009

  • CVE-2009-2011
    49Planlayın

    Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox,

    KritikCVSS 9,3SilahlaştırılmışEPSS %40

    dxstudio · dx studio player16 Haz 2009

  • CVE-2009-2146
    30İzleyin

    Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (aka SugarCRM) before 5.

    OrtaCVSS 6,0Kavram kanıtıEPSS %21

    sugarcrm · sugarcrm22 Haz 2009

  • CVE-2009-2168
    43Planlayın

    cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied crede

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    egyplus · 7ammel22 Haz 2009

  • CVE-2009-1886
    41Planlayın

    Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    samba · samba24 Haz 2009

  • CVE-2009-1394
    47Planlayın

    Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long ma

    KritikCVSS 9,3SilahlaştırılmışEPSS %33

    motorola · timbuktu pro26 Haz 2009

  • CVE-2009-2227
    61Bu hafta

    Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted

    KritikCVSS 10,0SilahlaştırılmışEPSS %68

    blabsoft · bopup communication server26 Haz 2009

  • CVE-2009-2254
    33İzleyin

    Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    zen-cart · zen cart30 Haz 2009

  • CVE-2009-2255
    36İzleyin

    Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/record_company.php, which allows remote attacke

    OrtaCVSS 6,8Kavram kanıtıEPSS %30

    zen-cart · zen cart30 Haz 2009

  • CVE-2009-2261
    49Planlayın

    PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .t

    KritikCVSS 9,3SilahlaştırılmışEPSS %41

    giorgio tani · peazip30 Haz 2009