İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2010: sömürülen ve yeni ciddi CVE kayıtları

50 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-0010
    40Planlayın

    Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platf

    OrtaCVSS 6,8İstismar yokEPSS %43

    apache · http server2 Şub 2010

  • CVE-2010-0467
    36İzleyin

    Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitra

    OrtaCVSS 5,8Kavram kanıtıEPSS %43

    joomla · joomla\!2 Şub 2010

  • CVE-2010-0442
    30İzleyin

    The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a de

    OrtaCVSS 6,5Kavram kanıtıEPSS %13

    postgresql · postgresql2 Şub 2010

  • CVE-2010-0304
    52Planlayın

    Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause

    YüksekCVSS 7,5SilahlaştırılmışEPSS %74

    wireshark · wireshark3 Şub 2010

  • CVE-2010-0308
    24İzleyin

    lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (asserti

    OrtaCVSS 4,0İstismar yokEPSS %27

    squid-cache · squid3 Şub 2010

  • CVE-2010-0295
    24İzleyin

    lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to ca

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    lighttpd · lighttpd3 Şub 2010

  • CVE-2010-0555
    43Planlayın

    Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer4 Şub 2010

  • CVE-2010-0255
    28İzleyin

    Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows

    OrtaCVSS 4,3İstismar yokEPSS %36

    microsoft · internet explorer4 Şub 2010

  • CVE-2003-1582
    13İzleyin

    Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject

    DüşükCVSS 2,6İstismar yokEPSS %10

    microsoft · internet information server5 Şub 2010

  • CVE-2010-0557
    46Planlayın

    IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leve

    YüksekCVSS 7,5SilahlaştırılmışEPSS %51

    ibm · cognos express5 Şub 2010

  • CVE-2009-4637
    45Planlayın

    FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    ffmpeg · ffmpeg9 Şub 2010

  • CVE-2010-0017
    46Planlayın

    Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-m

    KritikCVSS 9,3SilahlaştırılmışEPSS %30

    microsoft · windows 710 Şub 2010

  • CVE-2010-0020
    46Planlayın

    The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista G

    KritikCVSS 9,0İstismar yokEPSS %32

    microsoft · windows 200010 Şub 2010

  • CVE-2010-0021
    27İzleyin

    Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008

    OrtaCVSS 5,9İstismar yokEPSS %13

    microsoft · windows 200010 Şub 2010

  • CVE-2010-0022
    55Planlayın

    The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista G

    YüksekCVSS 7,8İstismar yokEPSS %78

    microsoft · windows 200010 Şub 2010

  • CVE-2010-0028
    51Planlayın

    Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary co

    KritikCVSS 9,3Kavram kanıtıEPSS %48

    microsoft · windows 200010 Şub 2010

  • CVE-2010-0029
    44Planlayın

    Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document,

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · powerpoint10 Şub 2010

  • CVE-2010-0030
    44Planlayın

    Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a craf

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · powerpoint10 Şub 2010

  • CVE-2010-0031
    43Planlayın

    Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to ex

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · office10 Şub 2010

  • CVE-2010-0032
    43Planlayın

    Use-after-free vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a cr

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · powerpoint10 Şub 2010

  • CVE-2010-0033
    52Planlayın

    Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoi

    KritikCVSS 9,3SilahlaştırılmışEPSS %51

    microsoft · powerpoint10 Şub 2010

  • CVE-2010-0034
    46Planlayın

    Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoi

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · powerpoint10 Şub 2010

  • CVE-2010-0035
    30İzleyin

    The Key Distribution Center (KDC) in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust rel

    OrtaCVSS 6,3İstismar yokEPSS %16

    microsoft · windows 200010 Şub 2010

  • CVE-2010-0231
    52Planlayın

    The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista G

    KritikCVSS 10,0Kavram kanıtıEPSS %41

    microsoft · windows 200010 Şub 2010

  • CVE-2010-0239
    58Planlayın

    The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properl

    KritikCVSS 10,0Kavram kanıtıEPSS %61

    microsoft · windows server 200810 Şub 2010

  • CVE-2010-0240
    55Planlayın

    The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used,

    KritikCVSS 10,0İstismar yokEPSS %48

    microsoft · windows server 200810 Şub 2010

  • CVE-2010-0241
    55Planlayın

    The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properl

    KritikCVSS 10,0İstismar yokEPSS %49

    microsoft · windows server 200810 Şub 2010

  • CVE-2010-0242
    51Planlayın

    The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a deni

    YüksekCVSS 7,8İstismar yokEPSS %65

    microsoft · windows server 200810 Şub 2010

  • CVE-2010-0243
    44Planlayın

    Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafte

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · office10 Şub 2010

  • CVE-2010-0250
    47Planlayın

    Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Wi

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · windows 710 Şub 2010

  • CVE-2010-0252
    46Planlayın

    The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · windows 200010 Şub 2010

  • CVE-2009-3960
    83Hemen

    Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %90

    adobe · blazeds15 Şub 2010

  • CVE-2010-0187
    22İzleyin

    Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash)

    OrtaCVSS 4,3Kavram kanıtıEPSS %15

    adobe · adobe air15 Şub 2010

  • CVE-2010-0287
    23İzleyin

    Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    dokuwiki · dokuwiki15 Şub 2010

  • CVE-2010-0288
    33İzleyin

    A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote a

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    dokuwiki · dokuwiki15 Şub 2010

  • CVE-2010-0639
    29İzleyin

    The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABL

    OrtaCVSS 5,0İstismar yokEPSS %31

    squid-cache · squid15 Şub 2010

  • CVE-2009-2949
    41Planlayın

    Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows remote atta

    KritikCVSS 9,3İstismar yokEPSS %14

    apache · openoffice16 Şub 2010

  • CVE-2009-2950
    41Planlayın

    Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl/lgif/decode.cxx in OpenOffice.org (OOo) befo

    KritikCVSS 9,3İstismar yokEPSS %13

    apache · openoffice16 Şub 2010

  • CVE-2009-3301
    41Planlayın

    Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (applica

    KritikCVSS 9,3İstismar yokEPSS %11

    apache · openoffice16 Şub 2010

  • CVE-2009-3302
    41Planlayın

    filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possib

    KritikCVSS 9,3İstismar yokEPSS %11

    apache · openoffice16 Şub 2010

  • CVE-2010-0416
    33İzleyin

    Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and Rea

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    realnetworks · helix player18 Şub 2010

  • CVE-2010-0108
    46Planlayın

    Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x b

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    symantec · antivirus19 Şub 2010

  • CVE-2010-0188
    87Hemen

    Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (a

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %88

    adobe · acrobat22 Şub 2010

  • CVE-2010-0679
    48Planlayın

    Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    hyleos · chemview22 Şub 2010

  • CVE-2010-0696
    28İzleyin

    Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! al

    OrtaCVSS 5,0Kavram kanıtıEPSS %28

    joomlaworks · jw allvideos23 Şub 2010

  • CVE-2010-0682
    19İzleyin

    WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p p

    OrtaCVSS 4,0Kavram kanıtıEPSS %10

    wordpress · wordpress23 Şub 2010

  • CVE-2010-0620
    43Planlayın

    Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attacker

    KritikCVSS 9,3Kavram kanıtıEPSS %19

    emc · homebase server24 Şub 2010

  • CVE-2009-4653
    40Planlayın

    Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to cause a denial

    KritikCVSS 9,0Kavram kanıtıEPSS %12

    novell · edirectory26 Şub 2010

  • CVE-2009-4655
    45Planlayın

    The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack ses

    YüksekCVSS 7,5SilahlaştırılmışEPSS %50

    novell · edirectory26 Şub 2010

  • CVE-2010-0759
    35İzleyin

    Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plu

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    greatjoomla · scriptegrator plugin26 Şub 2010