İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2009: sömürülen ve yeni ciddi CVE kayıtları

42 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2009-3733
    45Planlayın

    Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.

    OrtaCVSS 5,0SilahlaştırılmışEPSS %83

    vmware · esx2 Kas 2009

  • CVE-2009-3837
    47Planlayın

    Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message.

    KritikCVSS 9,3SilahlaştırılmışEPSS %32

    eureka-email · eureka email2 Kas 2009

  • CVE-2009-3031
    51Planlayın

    Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSCo

    KritikCVSS 9,3SilahlaştırılmışEPSS %45

    symantec · altiris deployment solution3 Kas 2009

  • CVE-2009-3720
    28İzleyin

    The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allow

    OrtaCVSS 5,0İstismar yokEPSS %27

    python · python3 Kas 2009

  • CVE-2009-3853
    48Planlayın

    Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    ibm · tivoli storage manager4 Kas 2009

  • CVE-2009-3859
    40Planlayın

    Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attack

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    eeye · retina wifi scanner4 Kas 2009

  • CVE-2009-3861
    40Planlayın

    Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows l

    OrtaCVSS 6,9SilahlaştırılmışEPSS %3

    safenet-inc · softremote4 Kas 2009

  • CVE-2009-3864
    37İzleyin

    The Java Update functionality in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22 and JDK and JRE 6 before

    YüksekCVSS 7,5İstismar yokEPSS %22

    sun · jdk5 Kas 2009

  • CVE-2009-3867
    59Planlayın

    Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before

    KritikCVSS 9,3SilahlaştırılmışEPSS %73

    sun · jdk5 Kas 2009

  • CVE-2009-3869
    57Planlayın

    Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE

    KritikCVSS 9,3SilahlaştırılmışEPSS %65

    sun · jdk5 Kas 2009

  • CVE-2009-2685
    63Bu hafta

    Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary

    KritikCVSS 10,0SilahlaştırılmışEPSS %76

    hp · power manager6 Kas 2009

  • CVE-2009-3555
    65Bu hafta

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in th

    KritikCVSS 9,8Kavram kanıtıEPSS %87

    apache · http server9 Kas 2009

  • CVE-2009-3726
    35İzleyin

    The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to caus

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    linux · linux kernel9 Kas 2009

  • CVE-2009-1928
    40Planlayın

    Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold

    YüksekCVSS 7,8İstismar yokEPSS %30

    microsoft · windows 200011 Kas 2009

  • CVE-2009-2512
    48Planlayın

    The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the head

    KritikCVSS 9,8İstismar yokEPSS %31

    microsoft · windows server 200811 Kas 2009

  • CVE-2009-2514
    51Planlayın

    win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during constr

    KritikCVSS 9,3SilahlaştırılmışEPSS %47

    microsoft · windows 200011 Kas 2009

  • CVE-2009-2523
    48Planlayın

    The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message c

    KritikCVSS 10,0İstismar yokEPSS %26

    microsoft · windows 200011 Kas 2009

  • CVE-2009-3127
    45Planlayın

    Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, and Office Excel Viewer

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · compatibility pack word excel powerpoint11 Kas 2009

  • CVE-2009-3128
    44Planlayın

    Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · compatibility pack word excel powerpoint11 Kas 2009

  • CVE-2009-3129
    86Hemen

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %84

    microsoft · excel11 Kas 2009

  • CVE-2009-3135
    48Planlayın

    Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · office11 Kas 2009

  • CVE-2009-3130
    46Planlayın

    Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allo

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · compatibility pack word excel powerpoint11 Kas 2009

  • CVE-2009-3131
    44Planlayın

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · compatibility pack word excel powerpoint11 Kas 2009

  • CVE-2009-3132
    45Planlayın

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · compatibility pack word excel powerpoint11 Kas 2009

  • CVE-2009-3133
    44Planlayın

    Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · compatibility pack word excel powerpoint11 Kas 2009

  • CVE-2009-3134
    45Planlayın

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · compatibility pack word excel powerpoint11 Kas 2009

  • CVE-2009-3548
    54Planlayın

    The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default passw

    YüksekCVSS 7,5SilahlaştırılmışEPSS %78

    apache · tomcat12 Kas 2009

  • CVE-2009-3676
    38İzleyin

    The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to

    YüksekCVSS 7,1İstismar yokEPSS %34

    microsoft · windows 713 Kas 2009

  • CVE-2009-3943
    24İzleyin

    Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (appli

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · internet explorer16 Kas 2009

  • CVE-2009-3976
    45Planlayın

    Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code vi

    KritikCVSS 9,3SilahlaştırılmışEPSS %28

    labtam-inc · proftp18 Kas 2009

  • CVE-2009-4006
    65Bu hafta

    Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0

    KritikCVSS 10,0SilahlaştırılmışEPSS %82

    solarwinds · serv-u file server20 Kas 2009

  • CVE-2009-3843
    64Bu hafta

    HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers

    KritikCVSS 10,0SilahlaştırılmışEPSS %78

    hp · operations manager23 Kas 2009

  • CVE-2009-4017
    24İzleyin

    PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST re

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    php · php23 Kas 2009

  • CVE-2009-3896
    23İzleyin

    src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0

    OrtaCVSS 5,0İstismar yokEPSS %10

    nginx · nginx24 Kas 2009

  • CVE-2009-3898
    24İzleyin

    Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17,

    OrtaCVSS 4,9Kavram kanıtıEPSS %15

    nginx · nginx24 Kas 2009

  • CVE-2009-4073
    26İzleyin

    The printing functionality in Microsoft Internet Explorer 8 allows remote attackers to discover a local pathname, and possibly a local usern

    OrtaCVSS 5,0İstismar yokEPSS %19

    microsoft · internet explorer24 Kas 2009

  • CVE-2009-3033
    49Planlayın

    Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web con

    KritikCVSS 9,3SilahlaştırılmışEPSS %39

    symantec · altiris deployment solution25 Kas 2009

  • CVE-2009-4074
    21İzleyin

    The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to leverage the "response-changing mechanism" to conduct cross-site

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · internet explorer25 Kas 2009

  • CVE-2009-4018
    33İzleyin

    The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1) safe_mode_allowed_en

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    php · php29 Kas 2009

  • CVE-2009-4098
    40Planlayın

    Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner

    OrtaCVSS 6,0SilahlaştırılmışEPSS %18

    openx · openx29 Kas 2009

  • CVE-2009-4019
    21İzleyin

    mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statement

    OrtaCVSS 4,0Kavram kanıtıEPSS %16

    mysql · mysql30 Kas 2009

  • CVE-2009-4112
    39İzleyin

    Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux -

    KritikCVSS 9,0Kavram kanıtıEPSS %11

    cacti · cacti30 Kas 2009