İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2009: sömürülen ve yeni ciddi CVE kayıtları

45 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2009-3591
    40Planlayın

    Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.

    OrtaCVSS 5,0SilahlaştırılmışEPSS %52

    ben webb · dopewars8 Eki 2009

  • CVE-2009-3663
    44Planlayın

    Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of se

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    jasper · httpdx11 Eki 2009

  • CVE-2009-2699
    34İzleyin

    The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used

    YüksekCVSS 7,5İstismar yokEPSS %14

    apache · http server13 Eki 2009

  • CVE-2009-3459
    91Hemen

    Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to exe

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %86

    adobe · acrobat13 Eki 2009

  • CVE-2009-3693
    49Planlayın

    Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to cre

    KritikCVSS 9,3SilahlaştırılmışEPSS %41

    persits · xupload13 Eki 2009

  • CVE-2009-0090
    43Planlayın

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obt

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 200014 Eki 2009

  • CVE-2009-0091
    45Planlayın

    Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which a

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · windows 200014 Eki 2009

  • CVE-2009-0555
    45Planlayın

    Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (AC

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · windows 200014 Eki 2009

  • CVE-2009-1547
    46Planlayın

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a c

    YüksekCVSS 8,8Kavram kanıtıEPSS %37

    microsoft · internet explorer14 Eki 2009

  • CVE-2009-2497
    44Planlayın

    The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · windows 200014 Eki 2009

  • CVE-2009-2500
    44Planlayın

    Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · windows 2003 server14 Eki 2009

  • CVE-2009-2501
    45Planlayın

    Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Micros

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · windows 2003 server14 Eki 2009

  • CVE-2009-2502
    39İzleyin

    Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office

    YüksekCVSS 8,1İstismar yokEPSS %22

    microsoft · windows 2003 server14 Eki 2009

  • CVE-2009-2503
    44Planlayın

    GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft O

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · windows 2003 server14 Eki 2009

  • CVE-2009-2504
    43Planlayın

    Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 a

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 2003 server14 Eki 2009

  • CVE-2009-2507
    43Planlayın

    A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly proce

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · windows 200014 Eki 2009

  • CVE-2009-2511
    34İzleyin

    Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Go

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    microsoft · windows 200014 Eki 2009

  • CVE-2009-2518
    44Planlayın

    Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office document with a bitmap (

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · office14 Eki 2009

  • CVE-2009-2524
    39İzleyin

    Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 a

    YüksekCVSS 7,8İstismar yokEPSS %28

    microsoft · windows 2003 server14 Eki 2009

  • CVE-2009-2525
    44Planlayın

    Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (AC

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · windows 200014 Eki 2009

  • CVE-2009-2526
    56Planlayın

    Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets, which allows remot

    YüksekCVSS 7,8Kavram kanıtıEPSS %81

    microsoft · windows server 200814 Eki 2009

  • CVE-2009-2527
    45Planlayın

    Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via (1) a crafted ASF fil

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · windows 200014 Eki 2009

  • CVE-2009-2528
    43Planlayın

    GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to e

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 2003 server14 Eki 2009

  • CVE-2009-2529
    38İzleyin

    Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allow

    YüksekCVSS 8,1İstismar yokEPSS %19

    microsoft · internet explorer14 Eki 2009

  • CVE-2009-2530
    44Planlayın

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrar

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · internet explorer14 Eki 2009

  • CVE-2009-2531
    44Planlayın

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrar

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · internet explorer14 Eki 2009

  • CVE-2009-2532
    59Planlayın

    Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in

    KritikCVSS 10,0Kavram kanıtıEPSS %62

    microsoft · windows server 200814 Eki 2009

  • CVE-2009-3126
    44Planlayın

    Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · windows 2003 server14 Eki 2009

  • CVE-2009-3699
    59Planlayın

    Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1

    KritikCVSS 10,0SilahlaştırılmışEPSS %62

    ibm · vios15 Eki 2009

  • CVE-2009-3707
    23İzleyin

    VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    vmware · ace16 Eki 2009

  • CVE-2009-3711
    59Planlayın

    Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a d

    KritikCVSS 10,0SilahlaştırılmışEPSS %63

    jasper · httpdx16 Eki 2009

  • CVE-2009-3546
    40Planlayın

    The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certa

    KritikCVSS 9,3İstismar yokEPSS %10

    php · php19 Eki 2009

  • CVE-2009-3613
    35İzleyin

    The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    linux · linux kernel19 Eki 2009

  • CVE-2009-2983
    41Planlayın

    Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memo

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    adobe · acrobat19 Eki 2009

  • CVE-2009-2990
    58Planlayın

    Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to exec

    KritikCVSS 9,3SilahlaştırılmışEPSS %68

    adobe · acrobat19 Eki 2009

  • CVE-2009-2994
    43Planlayın

    Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrar

    KritikCVSS 9,3Kavram kanıtıEPSS %18

    adobe · acrobat19 Eki 2009

  • CVE-2009-2998
    40Planlayın

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers

    KritikCVSS 9,3İstismar yokEPSS %10

    adobe · acrobat19 Eki 2009

  • CVE-2009-3458
    40Planlayın

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers

    KritikCVSS 9,3İstismar yokEPSS %10

    adobe · acrobat19 Eki 2009

  • CVE-2009-3608
    40Planlayın

    Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf

    KritikCVSS 9,3İstismar yokEPSS %10

    poppler · poppler21 Eki 2009

  • CVE-2008-3685
    44Planlayın

    Directory traversal vulnerability in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, po

    KritikCVSS 10,0İstismar yokEPSS %12

    emc · documentum applicationxtender workflow manager22 Eki 2009

  • CVE-2009-1979
    63Bu hafta

    Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect

    KritikCVSS 10,0SilahlaştırılmışEPSS %76

    oracle · database server22 Eki 2009

  • CVE-2009-3641
    29İzleyin

    Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted

    OrtaCVSS 4,3Kavram kanıtıEPSS %38

    snort · snort28 Eki 2009

  • CVE-2009-3373
    45Planlayın

    Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    mozilla · firefox29 Eki 2009

  • CVE-2009-3382
    43Planlayın

    layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter fra

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    mozilla · firefox29 Eki 2009

  • CVE-2009-3830
    30İzleyin

    The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers t

    OrtaCVSS 5,0Kavram kanıtıEPSS %32

    microsoft · sharepoint server30 Eki 2009