İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2010: sömürülen ve yeni ciddi CVE kayıtları

35 kayıt · 3 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-0157
    34İzleyin

    Directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers to include and execu

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    joomla · joomla\!6 Oca 2010

  • CVE-2009-4588
    47Planlayın

    Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awake

    KritikCVSS 9,3SilahlaştırılmışEPSS %32

    awingsoft · awakening winds3d player7 Oca 2010

  • CVE-2009-4009
    45Planlayın

    Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute

    KritikCVSS 10,0İstismar yokEPSS %17

    powerdns · recursor8 Oca 2010

  • CVE-2009-4010
    33İzleyin

    Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.

    YüksekCVSS 7,5İstismar yokEPSS %10

    powerdns · recursor8 Oca 2010

  • CVE-2010-0013
    34İzleyin

    Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers t

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    adium · adium9 Oca 2010

  • CVE-2009-3953
    90Hemen

    The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remot

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %83

    adobe · acrobat13 Oca 2010

  • CVE-2009-3955
    45Planlayın

    Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a

    KritikCVSS 10,0İstismar yokEPSS %15

    adobe · acrobat13 Oca 2010

  • CVE-2009-3958
    56Planlayın

    Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manag

    KritikCVSS 10,0Kavram kanıtıEPSS %52

    adobe · acrobat13 Oca 2010

  • CVE-2009-3959
    43Planlayın

    Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows re

    KritikCVSS 10,0İstismar yokEPSS %11

    adobe · acrobat13 Oca 2010

  • CVE-2010-0018
    45Planlayın

    Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4; Windows XP SP2 and SP3; Windows Ser

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · windows 200013 Oca 2010

  • CVE-2009-4487
    36İzleyin

    nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's

    OrtaCVSS 6,8Kavram kanıtıEPSS %29

    f5 · nginx13 Oca 2010

  • CVE-2009-4488
    43Planlayın

    Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    varnish.projects.linpro · varnish13 Oca 2010

  • CVE-2009-4490
    23İzleyin

    mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    acme · mini httpd13 Oca 2010

  • CVE-2009-4491
    43Planlayın

    thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    acme · thttpd13 Oca 2010

  • CVE-2009-4492
    35İzleyin

    WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev write

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    ruby-lang · webrick13 Oca 2010

  • CVE-2009-4496
    24İzleyin

    Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    boa · boa13 Oca 2010

  • CVE-2009-4611
    31İzleyin

    Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote atta

    YüksekCVSS 7,5İstismar yokEPSS %3

    mortbay · jetty13 Oca 2010

  • CVE-2010-0249
    93Hemen

    Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %91

    microsoft · internet explorer15 Oca 2010

  • CVE-2010-0317
    34İzleyin

    Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash)

    YüksekCVSS 7,8Kavram kanıtıEPSS %10

    novell · netware15 Oca 2010

  • CVE-2010-0356
    46Planlayın

    Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player

    KritikCVSS 9,3SilahlaştırılmışEPSS %30

    viscomsoft · movie player pro sdk activex18 Oca 2010

  • CVE-2010-0359
    46Planlayın

    Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service (daemon crash) or

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    zeus · zeus web server20 Oca 2010

  • CVE-2010-0361
    64Bu hafta

    Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote att

    KritikCVSS 10,0SilahlaştırılmışEPSS %80

    sun · java system web server20 Oca 2010

  • CVE-2009-3999
    61Bu hafta

    Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code

    KritikCVSS 10,0SilahlaştırılmışEPSS %71

    hp · power manager20 Oca 2010

  • CVE-2009-4000
    46Planlayın

    Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitr

    KritikCVSS 10,0İstismar yokEPSS %19

    hp · power manager20 Oca 2010

  • CVE-2010-0232
    70Bu hafta

    The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windo

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %28

    microsoft · windows 200021 Oca 2010

  • CVE-2010-0379
    42Planlayın

    Multiple unspecified vulnerabilities in the Macromedia Flash ActiveX control in Adobe Flash Player 6, as distributed in Microsoft Windows XP

    KritikCVSS 9,3İstismar yokEPSS %16

    adobe · flash player21 Oca 2010

  • CVE-2010-0027
    47Planlayın

    The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 S

    KritikCVSS 9,3Kavram kanıtıEPSS %33

    microsoft · internet explorer22 Oca 2010

  • CVE-2010-0244
    43Planlayın

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrar

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer22 Oca 2010

  • CVE-2010-0245
    43Planlayın

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer22 Oca 2010

  • CVE-2010-0246
    43Planlayın

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer22 Oca 2010

  • CVE-2010-0247
    43Planlayın

    Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 does not properly handle objects in memory, which allows remote attackers to execute arbi

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer22 Oca 2010

  • CVE-2010-0248
    60Bu hafta

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrar

    YüksekCVSS 8,1SilahlaştırılmışEPSS %53

    microsoft · internet explorer22 Oca 2010

  • CVE-2009-4273
    45Planlayın

    stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line argu

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    systemtap · systemtap26 Oca 2010

  • CVE-2009-4272
    33İzleyin

    A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to caus

    YüksekCVSS 7,5İstismar yokEPSS %11

    linux · linux kernel27 Oca 2010

  • CVE-2009-2902
    20İzleyin

    Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-dire

    OrtaCVSS 4,3İstismar yokEPSS %10

    apache · tomcat28 Oca 2010