İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2010: sömürülen ve yeni ciddi CVE kayıtları

55 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-0483
    56Planlayın

    vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer i

    YüksekCVSS 7,6SilahlaştırılmışEPSS %86

    microsoft · windows 20003 Mar 2010

  • CVE-2010-0917
    37İzleyin

    Stack-based buffer overflow in VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used,

    YüksekCVSS 7,6İstismar yokEPSS %24

    microsoft · windows 20003 Mar 2010

  • CVE-2009-4656
    46Planlayın

    Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-assisted remote attack

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    e-soft.co · dj studio pro3 Mar 2010

  • CVE-2009-4660
    59Planlayın

    Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary co

    KritikCVSS 10,0SilahlaştırılmışEPSS %62

    bigantsoft · bigant messenger3 Mar 2010

  • CVE-2009-4663
    40Planlayın

    Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitrary code via a long a

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    quiksoft · easymail objects3 Mar 2010

  • CVE-2009-2753
    43Planlayın

    Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka po

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    ibm · informix dynamic server5 Mar 2010

  • CVE-2009-2754
    52Planlayın

    Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka por

    KritikCVSS 10,0Kavram kanıtıEPSS %40

    ibm · informix dynamic server5 Mar 2010

  • CVE-2010-0408
    26İzleyin

    The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle

    OrtaCVSS 5,0İstismar yokEPSS %21

    apache · http server5 Mar 2010

  • CVE-2010-0425
    68Bu hafta

    modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, w

    KritikCVSS 10,0SilahlaştırılmışEPSS %94

    apache · http server5 Mar 2010

  • CVE-2010-0434
    23İzleyin

    The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not

    OrtaCVSS 4,3İstismar yokEPSS %18

    apache · http server5 Mar 2010

  • CVE-2010-0943
    25İzleyin

    Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to read arbitrary files

    OrtaCVSS 5,0Kavram kanıtıEPSS %15

    joomla · joomla\!8 Mar 2010

  • CVE-2010-0944
    24İzleyin

    Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to read arbitrary files

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    joomla · joomla\!8 Mar 2010

  • CVE-2010-0103
    45Planlayın

    UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the

    KritikCVSS 9,3SilahlaştırılmışEPSS %27

    energizer · duo usb10 Mar 2010

  • CVE-2010-0926
    40Planlayın

    The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allow

    DüşükCVSS 3,5SilahlaştırılmışEPSS %30

    samba · samba10 Mar 2010

  • CVE-2010-0257
    43Planlayın

    Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · excel10 Mar 2010

  • CVE-2010-0258
    49Planlayın

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic

    YüksekCVSS 7,8İstismar yokEPSS %60

    microsoft · excel10 Mar 2010

  • CVE-2010-0260
    44Planlayın

    Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Wo

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · excel10 Mar 2010

  • CVE-2010-0261
    44Planlayın

    Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 Fil

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · excel10 Mar 2010

  • CVE-2010-0262
    43Planlayın

    Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers t

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel10 Mar 2010

  • CVE-2010-0263
    45Planlayın

    Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Offic

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · excel10 Mar 2010

  • CVE-2010-0264
    43Planlayın

    Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel fi

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel10 Mar 2010

  • CVE-2010-0265
    45Planlayın

    Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrar

    KritikCVSS 9,3Kavram kanıtıEPSS %26

    microsoft · windows movie maker10 Mar 2010

  • CVE-2010-0806
    90Hemen

    Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote at

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %82

    microsoft · internet explorer10 Mar 2010

  • CVE-2010-0049
    40Planlayın

    Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    apple · safari15 Mar 2010

  • CVE-2010-0050
    38İzleyin

    Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of s

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    apple · safari15 Mar 2010

  • CVE-2010-0972
    34İzleyin

    Directory traversal vulnerability in the GCalendar (com_gcalendar) component 2.1.5 for Joomla! allows remote attackers to include and execut

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    joomla · joomla\!16 Mar 2010

  • CVE-2010-0397
    23İzleyin

    The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request f

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    php · php16 Mar 2010

  • CVE-2010-0985
    34İzleyin

    Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote attackers to include and

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    joomla · joomla\!16 Mar 2010

  • CVE-2010-0688
    48Planlayın

    Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a crafted (1) .orb or

    KritikCVSS 9,3SilahlaştırılmışEPSS %37

    orbitals · orbital viewer19 Mar 2010

  • CVE-2010-1029
    24İzleyin

    Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    apple · safari19 Mar 2010

  • CVE-2010-1042
    20İzleyin

    Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of servic

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    microsoft · windows media player22 Mar 2010

  • CVE-2010-1056
    30İzleyin

    Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remote attackers to inclu

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    joomla · joomla\!23 Mar 2010

  • CVE-2010-1081
    24İzleyin

    Directory traversal vulnerability in the Community Polls (com_communitypolls) component 1.5.2, and possibly earlier, for Core Joomla! allows

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    joomla · joomla\!23 Mar 2010

  • CVE-2010-0437
    35İzleyin

    The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances i

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    linux · linux kernel24 Mar 2010

  • CVE-2010-1098
    32İzleyin

    The ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer and other applications, allows remote attacke

    YüksekCVSS 7,1İstismar yokEPSS %14

    microsoft · windows vista24 Mar 2010

  • CVE-2010-0167
    40Planlayın

    The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonk

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    mozilla · firefox25 Mar 2010

  • CVE-2010-0168
    34İzleyin

    The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6

    YüksekCVSS 7,6Kavram kanıtıEPSS %12

    mozilla · firefox25 Mar 2010

  • CVE-2010-1117
    34İzleyin

    Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .

    YüksekCVSS 7,6İstismar yokEPSS %14

    microsoft · internet explorer25 Mar 2010

  • CVE-2010-1118
    47Planlayın

    Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vector

    KritikCVSS 10,0İstismar yokEPSS %22

    microsoft · internet explorer25 Mar 2010

  • CVE-2010-1119
    46Planlayın

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 1

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    apple · safari25 Mar 2010

  • CVE-2010-0740
    26İzleyin

    The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) v

    OrtaCVSS 5,0Kavram kanıtıEPSS %20

    openssl · openssl26 Mar 2010

  • CVE-2010-1127
    26İzleyin

    Microsoft Internet Explorer 6 and 7 does not initialize certain data structures during execution of the createElement method, which allows r

    OrtaCVSS 5,0İstismar yokEPSS %18

    microsoft · internet explorer26 Mar 2010

  • CVE-2010-1175
    41Planlayın

    Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XM

    KritikCVSS 9,3Kavram kanıtıEPSS %14

    microsoft · internet explorer29 Mar 2010

  • CVE-2010-1185
    45Planlayın

    Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to execute arbitrary code

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    sap · maxdb29 Mar 2010

  • CVE-2010-0520
    33İzleyin

    Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitra

    OrtaCVSS 6,8Kavram kanıtıEPSS %18

    apple · mac os x30 Mar 2010

  • CVE-2010-0529
    41Planlayın

    Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or

    KritikCVSS 9,3İstismar yokEPSS %12

    apple · quicktime31 Mar 2010

  • CVE-2010-0267
    47Planlayın

    Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary c

    KritikCVSS 9,3İstismar yokEPSS %34

    microsoft · internet explorer31 Mar 2010

  • CVE-2010-0488
    35İzleyin

    Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers

    OrtaCVSS 6,5İstismar yokEPSS %29

    microsoft · internet explorer31 Mar 2010

  • CVE-2010-0489
    44Planlayın

    Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer31 Mar 2010

  • CVE-2010-0490
    46Planlayın

    Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrar

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · internet explorer31 Mar 2010

  • CVE-2010-0491
    46Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by chan

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · internet explorer31 Mar 2010

  • CVE-2010-0492
    40Planlayın

    Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors re

    YüksekCVSS 8,1İstismar yokEPSS %27

    microsoft · internet explorer31 Mar 2010

  • CVE-2010-0494
    24İzleyin

    Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin

    OrtaCVSS 4,3İstismar yokEPSS %22

    microsoft · internet explorer31 Mar 2010

  • CVE-2010-0805
    61Bu hafta

    The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote

    KritikCVSS 9,3SilahlaştırılmışEPSS %80

    microsoft · internet explorer31 Mar 2010

  • CVE-2010-0807
    46Planlayın

    Microsoft Internet Explorer 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · internet explorer31 Mar 2010