İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2009: sömürülen ve yeni ciddi CVE kayıtları

50 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2009-0689
    35İzleyin

    Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in

    OrtaCVSS 6,8Kavram kanıtıEPSS %28

    k-meleon project · k-meleon1 Tem 2009

  • CVE-2009-2288
    55Planlayın

    statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) T

    YüksekCVSS 7,5SilahlaştırılmışEPSS %83

    nagios · nagios1 Tem 2009

  • CVE-2009-1890
    33İzleyin

    The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is c

    YüksekCVSS 7,1İstismar yokEPSS %16

    apache · http server5 Tem 2009

  • CVE-2009-2265
    55Planlayın

    Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary dire

    YüksekCVSS 7,5SilahlaştırılmışEPSS %83

    fckeditor · fckeditor5 Tem 2009

  • CVE-2008-0015
    88Hemen

    Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneReques

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %76

    microsoft · windows 2003 server7 Tem 2009

  • CVE-2008-0020
    46Planlayın

    Unspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active Template Library (ATL), as used in the Micros

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · windows 2003 server7 Tem 2009

  • CVE-2009-2350
    21İzleyin

    Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows rem

    OrtaCVSS 4,3Kavram kanıtıEPSS %14

    microsoft · internet explorer7 Tem 2009

  • CVE-2009-2364
    40Planlayın

    Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in a .plf file and (2)

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    mp3-nator · mp3-nator8 Tem 2009

  • CVE-2009-2367
    60Bu hafta

    cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and

    KritikCVSS 9,8SilahlaştırılmışEPSS %23

    iomega · storcenter pro firmware8 Tem 2009

  • CVE-2009-1891
    33İzleyin

    The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connecti

    YüksekCVSS 7,1İstismar yokEPSS %17

    apache · http server10 Tem 2009

  • CVE-2009-2335
    46Planlayın

    WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists,

    OrtaCVSS 5,0SilahlaştırılmışEPSS %85

    wordpress · wordpress10 Tem 2009

  • CVE-2009-2433
    23İzleyin

    Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a denial of service (a

    OrtaCVSS 4,3Kavram kanıtıEPSS %18

    microsoft · ie10 Tem 2009

  • CVE-2009-2446
    37İzleyin

    Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 al

    YüksekCVSS 8,5Kavram kanıtıEPSS %10

    mysql · mysql13 Tem 2009

  • CVE-2009-0192
    24İzleyin

    Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers t

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    novell · edirectory14 Tem 2009

  • CVE-2009-0692
    48Planlayın

    Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1

    KritikCVSS 10,0Kavram kanıtıEPSS %25

    isc · dhcp14 Tem 2009

  • CVE-2009-1019
    33İzleyin

    Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 al

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    oracle · database server14 Tem 2009

  • CVE-2009-1020
    39İzleyin

    Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows

    KritikCVSS 9,0Kavram kanıtıEPSS %10

    oracle · database server14 Tem 2009

  • CVE-2009-1968
    29İzleyin

    Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity

    OrtaCVSS 4,3Kavram kanıtıEPSS %40

    oracle · database server14 Tem 2009

  • CVE-2009-1970
    24İzleyin

    Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote at

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    oracle · database server14 Tem 2009

  • CVE-2009-1977
    62Bu hafta

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confident

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    oracle · secure backup14 Tem 2009

  • CVE-2009-1978
    55Planlayın

    Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confident

    KritikCVSS 9,0SilahlaştırılmışEPSS %64

    oracle · secure backup14 Tem 2009

  • CVE-2009-0231
    46Planlayın

    The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and S

    YüksekCVSS 8,8İstismar yokEPSS %37

    microsoft · windows 200015 Tem 2009

  • CVE-2009-0232
    45Planlayın

    Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1,

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · windows 200015 Tem 2009

  • CVE-2009-0566
    46Planlayın

    Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to ex

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · office publisher15 Tem 2009

  • CVE-2009-1135
    44Planlayın

    Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication

    KritikCVSS 9,0İstismar yokEPSS %26

    microsoft · isa server15 Tem 2009

  • CVE-2009-1136
    56Planlayın

    The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, O

    KritikCVSS 9,3SilahlaştırılmışEPSS %62

    microsoft · isa server15 Tem 2009

  • CVE-2009-1538
    45Planlayın

    The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · directx15 Tem 2009

  • CVE-2009-1539
    45Planlayın

    The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · directx15 Tem 2009

  • CVE-2009-2477
    50Planlayın

    js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attack

    KritikCVSS 9,3SilahlaştırılmışEPSS %42

    mozilla · firefox15 Tem 2009

  • CVE-2009-2479
    35İzleyin

    Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service (uncaught exception and application cr

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    mozilla · firefox16 Tem 2009

  • CVE-2009-2484
    48Planlayın

    Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on M

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    videolan · vlc media player16 Tem 2009

  • CVE-2009-2485
    54Planlayın

    Stack-based buffer overflow in HT-MP3Player 1.0 allows remote attackers to execute arbitrary code via a long string in a .ht3 file.

    KritikCVSS 9,3SilahlaştırılmışEPSS %58

    tingan · ht-mp3player16 Tem 2009

  • CVE-2009-2536
    23İzleyin

    Microsoft Internet Explorer 5 through 8 allows remote attackers to cause a denial of service (memory consumption and application crash) via

    OrtaCVSS 4,3İstismar yokEPSS %19

    microsoft · internet explorer20 Tem 2009

  • CVE-2009-2566
    46Planlayın

    Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    tfm · mmplayer21 Tem 2009

  • CVE-2009-2570
    41Planlayın

    Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW.DLL in Symantec WinFax Pro 10.03 allows re

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    symantec · winfax pro22 Tem 2009

  • CVE-2009-2464
    44Planlayın

    The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows r

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    mozilla · firefox22 Tem 2009

  • CVE-2009-2576
    24İzleyin

    Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via

    OrtaCVSS 5,0İstismar yokEPSS %14

    microsoft · ie22 Tem 2009

  • CVE-2009-1862
    67Bu hafta

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %21

    adobe · acrobat23 Tem 2009

  • CVE-2009-2621
    27İzleyin

    Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows rem

    OrtaCVSS 5,0İstismar yokEPSS %23

    squid-cache · squid28 Tem 2009

  • CVE-2009-2622
    37İzleyin

    Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests includin

    OrtaCVSS 5,0İstismar yokEPSS %56

    squid-cache · squid28 Tem 2009

  • CVE-2009-0696
    21İzleyin

    The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when config

    OrtaCVSS 4,3Kavram kanıtıEPSS %12

    isc · bind29 Tem 2009

  • CVE-2009-0901
    46Planlayın

    The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 an

    YüksekCVSS 8,8İstismar yokEPSS %36

    microsoft · visual c\+\+29 Tem 2009

  • CVE-2009-1917
    45Planlayın

    Microsoft Internet Explorer 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Win

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · internet explorer29 Tem 2009

  • CVE-2009-1918
    53Planlayın

    Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7

    KritikCVSS 10,0İstismar yokEPSS %43

    microsoft · internet explorer29 Tem 2009

  • CVE-2009-1919
    47Planlayın

    Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7

    KritikCVSS 9,3İstismar yokEPSS %34

    microsoft · internet explorer29 Tem 2009

  • CVE-2009-2493
    46Planlayın

    The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 200

    YüksekCVSS 8,8İstismar yokEPSS %37

    microsoft · visual c\+\+29 Tem 2009

  • CVE-2009-2495
    36İzleyin

    The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 200

    OrtaCVSS 6,5İstismar yokEPSS %34

    microsoft · visual c\+\+29 Tem 2009

  • CVE-2009-2650
    46Planlayın

    Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a denial of service (ap

    KritikCVSS 9,3SilahlaştırılmışEPSS %30

    sorcerersoftware · multimedia jukebox30 Tem 2009

  • CVE-2009-1868
    43Planlayın

    Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers t

    KritikCVSS 9,3Kavram kanıtıEPSS %21

    adobe · air31 Tem 2009

  • CVE-2009-1869
    43Planlayın

    Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.

    KritikCVSS 9,3Kavram kanıtıEPSS %19

    adobe · air31 Tem 2009