İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2009: sömürülen ve yeni ciddi CVE kayıtları

56 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2009-3672
    59Planlayın

    Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, wh

    KritikCVSS 9,3SilahlaştırılmışEPSS %71

    microsoft · internet explorer2 Ara 2009

  • CVE-2009-4146
    40Planlayın

    The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not clear the LD_PRELOAD

    YüksekCVSS 7,2SilahlaştırılmışEPSS %3

    freebsd · freebsd2 Ara 2009

  • CVE-2009-4147
    40Planlayın

    The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear the (1) LD_LIBMAP, (2

    YüksekCVSS 7,2SilahlaştırılmışEPSS %3

    freebsd · freebsd2 Ara 2009

  • CVE-2009-4188
    61Bu hafta

    HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary

    KritikCVSS 10,0SilahlaştırılmışEPSS %69

    hp · operations dashboard3 Ara 2009

  • CVE-2009-4189
    64Bu hafta

    HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code

    KritikCVSS 10,0SilahlaştırılmışEPSS %78

    hp · operations manager3 Ara 2009

  • CVE-2009-4195
    58Planlayın

    Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code vi

    KritikCVSS 9,3SilahlaştırılmışEPSS %70

    adobe · illustrator4 Ara 2009

  • CVE-2009-3560
    27İzleyin

    The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attac

    OrtaCVSS 5,0İstismar yokEPSS %24

    libexpat project · libexpat4 Ara 2009

  • CVE-2009-4223
    46Planlayın

    PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code

    YüksekCVSS 7,5Kavram kanıtıEPSS %54

    gianni tommasi · kr-php web content server7 Ara 2009

  • CVE-2009-4225
    46Planlayın

    Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute

    KritikCVSS 9,3SilahlaştırılmışEPSS %30

    ca · etrust pestpatrole ppctl.dll activex8 Ara 2009

  • CVE-2009-4227
    30İzleyin

    Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject functi

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    xfig · xfig8 Ara 2009

  • CVE-2009-1568
    47Planlayın

    Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows remote attackers to

    KritikCVSS 9,3SilahlaştırılmışEPSS %32

    novell · iprint client8 Ara 2009

  • CVE-2009-1569
    48Planlayın

    Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow remote attackers to

    KritikCVSS 9,3SilahlaştırılmışEPSS %37

    novell · iprint8 Ara 2009

  • CVE-2009-3844
    62Bu hafta

    Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote at

    KritikCVSS 10,0SilahlaştırılmışEPSS %74

    hp · openview data protector application recovery manager8 Ara 2009

  • CVE-2009-0102
    44Planlayın

    Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which al

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · office project9 Ara 2009

  • CVE-2009-2505
    49Planlayın

    The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected

    KritikCVSS 10,0İstismar yokEPSS %31

    microsoft · windows server 20089 Ara 2009

  • CVE-2009-2506
    46Planlayın

    Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Win

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · windows 20009 Ara 2009

  • CVE-2009-2509
    41Planlayın

    Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate hea

    KritikCVSS 9,0İstismar yokEPSS %17

    microsoft · windows server 20039 Ara 2009

  • CVE-2009-3563
    40Planlayın

    ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption)

    OrtaCVSS 6,4SilahlaştırılmışEPSS %32

    ntp · ntp9 Ara 2009

  • CVE-2009-3671
    38İzleyin

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    YüksekCVSS 8,1İstismar yokEPSS %21

    microsoft · internet explorer9 Ara 2009

  • CVE-2009-3673
    45Planlayın

    Microsoft Internet Explorer 7 and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by a

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · internet explorer9 Ara 2009

  • CVE-2009-3674
    45Planlayın

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · internet explorer9 Ara 2009

  • CVE-2009-3675
    34İzleyin

    LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allow

    OrtaCVSS 6,8İstismar yokEPSS %24

    microsoft · windows 20009 Ara 2009

  • CVE-2009-3677
    47Planlayın

    The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 200

    KritikCVSS 10,0İstismar yokEPSS %21

    microsoft · windows 20009 Ara 2009

  • CVE-2009-4265
    46Planlayın

    Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary co

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    pointdev · ideal administration 200910 Ara 2009

  • CVE-2009-3794
    40Planlayın

    Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary c

    KritikCVSS 9,3İstismar yokEPSS %11

    adobe · adobe air10 Ara 2009

  • CVE-2009-3845
    47Planlayın

    The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary com

    KritikCVSS 10,0İstismar yokEPSS %21

    hp · openview network node manager10 Ara 2009

  • CVE-2009-3846
    44Planlayın

    Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · openview network node manager10 Ara 2009

  • CVE-2009-3847
    43Planlayın

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary cod

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · openview network node manager10 Ara 2009

  • CVE-2009-3848
    44Planlayın

    Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · openview network node manager10 Ara 2009

  • CVE-2009-3849
    62Bu hafta

    Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute ar

    KritikCVSS 10,0SilahlaştırılmışEPSS %73

    hp · openview network node manager10 Ara 2009

  • CVE-2009-4176
    44Planlayın

    Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote atta

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · openview network node manager10 Ara 2009

  • CVE-2009-4177
    44Planlayın

    Buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitr

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · openview network node manager10 Ara 2009

  • CVE-2009-4178
    62Bu hafta

    Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to exe

    KritikCVSS 10,0SilahlaştırılmışEPSS %74

    hp · openview network node manager10 Ara 2009

  • CVE-2009-4179
    60Bu hafta

    Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to exec

    KritikCVSS 10,0SilahlaştırılmışEPSS %66

    hp · openview network node manager10 Ara 2009

  • CVE-2009-4180
    44Planlayın

    Stack-based buffer overflow in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to e

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · openview network node manager10 Ara 2009

  • CVE-2009-4181
    43Planlayın

    Stack-based buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · openview network node manager10 Ara 2009

  • CVE-2009-0898
    44Planlayın

    Stack-based buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary c

    KritikCVSS 10,0İstismar yokEPSS %14

    hp · openview network node manager10 Ara 2009

  • CVE-2009-3027
    43Planlayın

    VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager

    KritikCVSS 10,0İstismar yokEPSS %10

    symantec · backup exec continuous protection server11 Ara 2009

  • CVE-2009-4210
    42Planlayın

    The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (mem

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · windows 200012 Ara 2009

  • CVE-2009-4309
    44Planlayın

    Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 200

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · windows media player12 Ara 2009

  • CVE-2009-4310
    44Planlayın

    Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 20

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · windows 200012 Ara 2009

  • CVE-2009-4311
    44Planlayın

    Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to e

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · windows 200012 Ara 2009

  • CVE-2009-4312
    43Planlayın

    Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to e

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 200012 Ara 2009

  • CVE-2009-4313
    43Planlayın

    ir32_32.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cau

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 200012 Ara 2009

  • CVE-2009-4324
    86Hemen

    Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %81

    adobe · acrobat14 Ara 2009

  • CVE-2007-2280
    58Planlayın

    Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenV

    KritikCVSS 10,0SilahlaştırılmışEPSS %60

    hp · openview storage data protector18 Ara 2009

  • CVE-2009-4140
    53Planlayın

    Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0

    YüksekCVSS 7,5SilahlaştırılmışEPSS %75

    teethgrinder.co.uk · open flash chart22 Ara 2009

  • CVE-2009-3305
    23İzleyin

    Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a Cache-Control h

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    pps.jussieu · polipo24 Ara 2009

  • CVE-2009-4137
    35İzleyin

    The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate strings obtained from cookies before calling the

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    matomo · matomo24 Ara 2009

  • CVE-2009-3295
    32İzleyin

    The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT K

    OrtaCVSS 5,0İstismar yokEPSS %40

    mit · kerberos 529 Ara 2009

  • CVE-2009-4444
    43Planlayın

    Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename before a ; (semicolon) character to determine

    OrtaCVSS 6,0İstismar yokEPSS %63

    microsoft · internet information services29 Ara 2009

  • CVE-2009-4445
    28İzleyin

    Microsoft Internet Information Services (IIS), when used in conjunction with unspecified third-party upload applications, allows remote atta

    OrtaCVSS 6,0İstismar yokEPSS %12

    microsoft · internet information services29 Ara 2009

  • CVE-2009-4462
    46Planlayın

    Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attacker

    KritikCVSS 10,0Kavram kanıtıEPSS %20

    intellicom · netbiterconfig30 Ara 2009

  • CVE-2009-4484
    51Planlayın

    Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysq

    YüksekCVSS 7,5SilahlaştırılmışEPSS %69

    oracle · mysql30 Ara 2009

  • CVE-2009-4498
    40Planlayın

    The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request.

    OrtaCVSS 6,8SilahlaştırılmışEPSS %31

    zabbix · zabbix31 Ara 2009

  • CVE-2009-4502
    43Planlayın

    The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the

    KritikCVSS 9,3SilahlaştırılmışEPSS %21

    zabbix · zabbix31 Ara 2009