İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2009: sömürülen ve yeni ciddi CVE kayıtları

28 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2009-2957
    31İzleyin

    Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote att

    OrtaCVSS 6,8Kavram kanıtıEPSS %12

    thekelleys · dnsmasq2 Eyl 2009

  • CVE-2009-2958
    20İzleyin

    The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    thekelleys · dnsmasq2 Eyl 2009

  • CVE-2009-2521
    45Planlayın

    Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authentica

    OrtaCVSS 5,0SilahlaştırılmışEPSS %82

    microsoft · internet information services4 Eyl 2009

  • CVE-2009-3068
    60Bu hafta

    Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to

    KritikCVSS 9,3SilahlaştırılmışEPSS %78

    adobe · robohelp server4 Eyl 2009

  • CVE-2008-7182
    23İzleyin

    Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to

    OrtaCVSS 4,0Kavram kanıtıEPSS %24

    netwin · surgemail8 Eyl 2009

  • CVE-2009-3095
    24İzleyin

    The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary command

    OrtaCVSS 5,0İstismar yokEPSS %13

    apache · http server8 Eyl 2009

  • CVE-2009-1132
    45Planlayın

    Heap-based buffer overflow in the Wireless LAN AutoConfig Service (aka Wlansvc) in Microsoft Windows Vista Gold, SP1, and SP2 and Server 200

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · windows server 20088 Eyl 2009

  • CVE-2009-1920
    43Planlayın

    The JScript scripting engine 5.1, 5.6, 5.7, and 5.8 in JScript.dll in Microsoft Windows, as used in Internet Explorer, does not properly loa

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · windows 20008 Eyl 2009

  • CVE-2009-1925
    48Planlayın

    The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state informat

    KritikCVSS 10,0İstismar yokEPSS %27

    microsoft · windows 20008 Eyl 2009

  • CVE-2009-1926
    42Planlayın

    Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers t

    YüksekCVSS 7,8İstismar yokEPSS %35

    microsoft · windows 20008 Eyl 2009

  • CVE-2009-2498
    43Planlayın

    Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in A

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · windows media format runtime8 Eyl 2009

  • CVE-2009-2499
    39İzleyin

    Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008;

    YüksekCVSS 8,5İstismar yokEPSS %15

    microsoft · windows media format runtime8 Eyl 2009

  • CVE-2009-2519
    45Planlayın

    The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · windows 20008 Eyl 2009

  • CVE-2009-3103
    68Bu hafta

    Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold a

    KritikCVSS 10,0SilahlaştırılmışEPSS %92

    microsoft · windows server 20088 Eyl 2009

  • CVE-2009-3111
    23İzleyin

    The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunn

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    freeradius · freeradius9 Eyl 2009

  • CVE-2009-3115
    23İzleyin

    SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknow

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    solarwinds · tftp server9 Eyl 2009

  • CVE-2009-3170
    42Planlayın

    Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a denial of service (cras

    KritikCVSS 9,3Kavram kanıtıEPSS %15

    aimp · aimp2 audio converter11 Eyl 2009

  • CVE-2007-6731
    44Planlayın

    Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    claudio matsuoka · extended module player13 Eyl 2009

  • CVE-2008-7220
    34İzleyin

    Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests"

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    prototypejs · prototype13 Eyl 2009

  • CVE-2008-7232
    47Planlayın

    Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT

    KritikCVSS 10,0SilahlaştırılmışEPSS %24

    netplex-tech · xtacacsd14 Eyl 2009

  • CVE-2009-2629
    53Planlayın

    Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.

    YüksekCVSS 7,5Kavram kanıtıEPSS %75

    f5 · nginx15 Eyl 2009

  • CVE-2009-3214
    46Planlayın

    Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slide

    KritikCVSS 9,3SilahlaştırılmışEPSS %30

    photodex · proshow gold16 Eyl 2009

  • CVE-2009-3244
    43Planlayın

    Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to caus

    KritikCVSS 9,3Kavram kanıtıEPSS %20

    adobe · shockwave player18 Eyl 2009

  • CVE-2009-3250
    39İzleyin

    The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbi

    KritikCVSS 9,0Kavram kanıtıEPSS %10

    vtiger · vtiger crm18 Eyl 2009

  • CVE-2009-3267
    25İzleyin

    Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of service (CPU consumpti

    OrtaCVSS 5,0İstismar yokEPSS %15

    microsoft · internet explorer18 Eyl 2009

  • CVE-2009-3270
    28İzleyin

    Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (unusable browser) by calling the

    OrtaCVSS 5,0Kavram kanıtıEPSS %28

    microsoft · internet explorer18 Eyl 2009

  • CVE-2009-3429
    48Planlayın

    Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code via a long string in

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    pirateradio · destiny media player25 Eyl 2009

  • CVE-2009-3431
    27İzleyin

    Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and earlier 8.x versions; a

    OrtaCVSS 5,0Kavram kanıtıEPSS %21

    adobe · acrobat25 Eyl 2009