İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2009: sömürülen ve yeni ciddi CVE kayıtları

37 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2009-2655
    24İzleyin

    mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service (application crash)

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · internet explorer3 Ağu 2009

  • CVE-2009-2668
    35İzleyin

    Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16473 allows remote attackers to cause a denial of service (CPU c

    YüksekCVSS 7,8İstismar yokEPSS %14

    microsoft · internet explorer5 Ağu 2009

  • CVE-2008-6898
    47Planlayın

    Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    saschart · sascam webcam server5 Ağu 2009

  • CVE-2008-6904
    43Planlayın

    Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to

    KritikCVSS 10,0İstismar yokEPSS %10

    sophos · anti-virus5 Ağu 2009

  • CVE-2009-2412
    44Planlayın

    Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3

    KritikCVSS 10,0İstismar yokEPSS %13

    apache · apr-util6 Ağu 2009

  • CVE-2009-2625
    29İzleyin

    XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0

    OrtaCVSS 5,0İstismar yokEPSS %30

    apache · xerces2 java6 Ağu 2009

  • CVE-2009-2727
    45Planlayın

    Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5

    KritikCVSS 9,3SilahlaştırılmışEPSS %26

    ibm · aix10 Ağu 2009

  • CVE-2008-6938
    40Planlayın

    Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.pi3, allows remote att

    OrtaCVSS 4,3SilahlaştırılmışEPSS %26

    holger zimmermann · pi3web11 Ağu 2009

  • CVE-2009-0562
    45Planlayın

    The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Compone

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · isa server12 Ağu 2009

  • CVE-2009-1133
    46Planlayın

    Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · windows 200012 Ağu 2009

  • CVE-2009-1534
    52Planlayın

    Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Compo

    KritikCVSS 9,3SilahlaştırılmışEPSS %51

    microsoft · biztalk server12 Ağu 2009

  • CVE-2009-1536
    25İzleyin

    ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not prope

    DüşükCVSS 2,6İstismar yokEPSS %51

    microsoft · .net framework12 Ağu 2009

  • CVE-2009-1544
    41Planlayın

    Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted

    YüksekCVSS 8,8İstismar yokEPSS %20

    microsoft · windows 2003 server12 Ağu 2009

  • CVE-2009-1545
    46Planlayın

    Unspecified vulnerability in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows 2000 SP4, XP SP2 and SP3, Se

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · windows 2003 server12 Ağu 2009

  • CVE-2009-1546
    41Planlayın

    Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute ar

    YüksekCVSS 8,5İstismar yokEPSS %22

    microsoft · windows 2003 server12 Ağu 2009

  • CVE-2009-1923
    44Planlayın

    Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows r

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · windows 200012 Ağu 2009

  • CVE-2009-1929
    47Planlayın

    Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or

    KritikCVSS 9,3İstismar yokEPSS %34

    microsoft · windows 2003 server12 Ağu 2009

  • CVE-2009-1930
    52Planlayın

    The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 al

    KritikCVSS 10,0İstismar yokEPSS %41

    microsoft · windows 200012 Ağu 2009

  • CVE-2009-2494
    52Planlayın

    The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008

    KritikCVSS 9,8İstismar yokEPSS %42

    microsoft · windows 200012 Ağu 2009

  • CVE-2009-2496
    46Planlayın

    Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Component

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · biztalk server12 Ağu 2009

  • CVE-2009-2195
    41Planlayın

    Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (appli

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    apple · mac os x12 Ağu 2009

  • CVE-2009-2762
    36İzleyin

    wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly t

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    wordpress · wordpress13 Ağu 2009

  • CVE-2009-2692
    40Planlayın

    The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in prot

    YüksekCVSS 7,8SilahlaştırılmışEPSS %14

    linux · linux kernel14 Ağu 2009

  • CVE-2009-2764
    23İzleyin

    Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service (application

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    microsoft · internet explorer14 Ağu 2009

  • CVE-2009-2765
    58Planlayın

    httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary

    YüksekCVSS 8,3SilahlaştırılmışEPSS %82

    dd-wrt · dd-wrt14 Ağu 2009

  • CVE-2009-2855
    30İzleyin

    The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth he

    OrtaCVSS 5,0İstismar yokEPSS %34

    squid-cache · squid18 Ağu 2009

  • CVE-2009-1872
    22İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitr

    OrtaCVSS 4,3Kavram kanıtıEPSS %16

    adobe · coldfusion18 Ağu 2009

  • CVE-2008-6994
    40Planlayın

    Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-ass

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    google · chrome19 Ağu 2009

  • CVE-2009-2055
    60Bu hafta

    Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an inval

    OrtaCVSS 5,9KEVSilahlaştırılmışEPSS %3

    cisco · ios xr19 Ağu 2009

  • CVE-2009-2694
    46Planlayın

    The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and A

    KritikCVSS 10,0Kavram kanıtıEPSS %20

    pidgin · pidgin21 Ağu 2009

  • CVE-2009-2934
    40Planlayın

    Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attackers to execute arbitr

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    programmedintegration · pipl21 Ağu 2009

  • CVE-2009-2954
    24İzleyin

    Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU consumption and application

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · internet explorer24 Ağu 2009

  • CVE-2009-3003
    20İzleyin

    Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an ar

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · internet explorer28 Ağu 2009

  • CVE-2008-7126
    43Planlayın

    Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of se

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    microfocus · visibroker31 Ağu 2009

  • CVE-2009-3019
    25İzleyin

    Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of serv

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    microsoft · internet explorer31 Ağu 2009

  • CVE-2009-3020
    33İzleyin

    win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service (system crash) by referencing a crafted

    YüksekCVSS 7,1Kavram kanıtıEPSS %16

    microsoft · windows server 200331 Ağu 2009

  • CVE-2009-3023
    63Bu hafta

    Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to exe

    KritikCVSS 9,0SilahlaştırılmışEPSS %90

    microsoft · internet information server31 Ağu 2009