İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2010: sömürülen ve yeni ciddi CVE kayıtları

71 kayıt · 3 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-0094
    54Planlayın

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 al

    YüksekCVSS 7,5SilahlaştırılmışEPSS %80

    sun · jre1 Nis 2010

  • CVE-2010-0838
    34İzleyin

    Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote at

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    sun · jre1 Nis 2010

  • CVE-2010-0840
    98Hemen

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %96

    oracle · jre1 Nis 2010

  • CVE-2010-0842
    53Planlayın

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27

    YüksekCVSS 7,5SilahlaştırılmışEPSS %77

    sun · jre1 Nis 2010

  • CVE-2010-1225
    45Planlayın

    The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtu

    KritikCVSS 9,3Kavram kanıtıEPSS %27

    microsoft · virtual pc1 Nis 2010

  • CVE-2010-1240
    59Planlayın

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in t

    KritikCVSS 9,3SilahlaştırılmışEPSS %73

    adobe · acrobat reader5 Nis 2010

  • CVE-2009-2936
    49Planlayın

    The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before

    YüksekCVSS 7,5SilahlaştırılmışEPSS %63

    varnish.projects.linpro · varnish5 Nis 2010

  • CVE-2010-1223
    45Planlayın

    Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the w

    KritikCVSS 10,0İstismar yokEPSS %16

    ca · xosoft content distribution7 Nis 2010

  • CVE-2010-1299
    23İzleyin

    Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is disabled and register_

    OrtaCVSS 5,1Kavram kanıtıEPSS %10

    dynpg · dynpg7 Nis 2010

  • CVE-2010-1304
    24İzleyin

    Directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! allows remote attacker

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    joomla · joomla\!8 Nis 2010

  • CVE-2010-1305
    26İzleyin

    Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly other versions before

    OrtaCVSS 5,0Kavram kanıtıEPSS %20

    joomlamo · com jinventory8 Nis 2010

  • CVE-2010-1306
    35İzleyin

    Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbi

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    joomla · joomla\!8 Nis 2010

  • CVE-2010-1307
    23İzleyin

    Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers to read arbitrary f

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    joomla · joomla\!8 Nis 2010

  • CVE-2010-1308
    24İzleyin

    Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read arbitrary files via a

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    joomla · joomla\!8 Nis 2010

  • CVE-2010-1312
    24İzleyin

    Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote attackers to read a

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    ijoomla · com news portal8 Nis 2010

  • CVE-2010-1314
    25İzleyin

    Directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arb

    OrtaCVSS 5,0Kavram kanıtıEPSS %15

    joomla · joomla\!8 Nis 2010

  • CVE-2010-1340
    24İzleyin

    Directory traversal vulnerability in jresearch.php in the J!Research (com_jresearch) component for Joomla! allows remote attackers to read a

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    joomla · joomla\!9 Nis 2010

  • CVE-2010-1345
    25İzleyin

    Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attackers to read arb

    OrtaCVSS 5,0Kavram kanıtıEPSS %16

    cookex · com ckforms9 Nis 2010

  • CVE-2009-3732
    45Planlayın

    Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    vmware · ace12 Nis 2010

  • CVE-2010-1152
    23İzleyin

    memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a long line that trigg

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    memcachedb · memcached12 Nis 2010

  • CVE-2010-1349
    46Planlayın

    Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which trig

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    opera · opera browser12 Nis 2010

  • CVE-2010-1352
    24İzleyin

    Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote attackers to read ar

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    jooforge · com jukebox12 Nis 2010

  • CVE-2010-1353
    26İzleyin

    Directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to read arbitrary files v

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    joomla · joomla\!12 Nis 2010

  • CVE-2010-1354
    25İzleyin

    Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers to read arbitrary fil

    OrtaCVSS 5,0Kavram kanıtıEPSS %15

    joomla · joomla\!12 Nis 2010

  • CVE-2010-0866
    40Planlayın

    Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated users to affect confi

    OrtaCVSS 6,5SilahlaştırılmışEPSS %11

    oracle · database server13 Nis 2010

  • CVE-2010-0870
    40Planlayın

    Unspecified vulnerability in the Change Data Capture component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to

    DüşükCVSS 3,6SilahlaştırılmışEPSS %12

    oracle · database server13 Nis 2010

  • CVE-2010-0024
    23İzleyin

    The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 20

    OrtaCVSS 5,0İstismar yokEPSS %10

    microsoft · windows 200014 Nis 2010

  • CVE-2010-0025
    26İzleyin

    The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 20

    OrtaCVSS 5,0İstismar yokEPSS %21

    microsoft · windows 200014 Nis 2010

  • CVE-2010-0254
    35İzleyin

    Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote at

    YüksekCVSS 7,6İstismar yokEPSS %17

    microsoft · visio14 Nis 2010

  • CVE-2010-0256
    35İzleyin

    Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files,

    YüksekCVSS 7,6İstismar yokEPSS %17

    microsoft · visio14 Nis 2010

  • CVE-2010-0268
    43Planlayın

    Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP S

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows media player14 Nis 2010

  • CVE-2010-0269
    49Planlayın

    The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Ser

    KritikCVSS 10,0Kavram kanıtıEPSS %28

    microsoft · windows 714 Nis 2010

  • CVE-2010-0270
    54Planlayın

    The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allow

    KritikCVSS 10,0Kavram kanıtıEPSS %48

    microsoft · windows 714 Nis 2010

  • CVE-2010-0476
    50Planlayın

    The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB server

    KritikCVSS 10,0Kavram kanıtıEPSS %34

    microsoft · windows 714 Nis 2010

  • CVE-2010-0477
    55Planlayın

    The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which al

    KritikCVSS 10,0Kavram kanıtıEPSS %50

    microsoft · windows 714 Nis 2010

  • CVE-2010-0478
    55Planlayın

    Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows

    KritikCVSS 9,3SilahlaştırılmışEPSS %60

    microsoft · windows 200014 Nis 2010

  • CVE-2010-0479
    44Planlayın

    Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · publisher14 Nis 2010

  • CVE-2010-0480
    57Planlayın

    Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista

    KritikCVSS 9,3SilahlaştırılmışEPSS %67

    microsoft · windows 200014 Nis 2010

  • CVE-2010-0486
    44Planlayın

    The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3,

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · windows 714 Nis 2010

  • CVE-2010-0487
    44Planlayın

    The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft W

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · windows 714 Nis 2010

  • CVE-2010-0812
    30İzleyin

    Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass i

    OrtaCVSS 6,4İstismar yokEPSS %17

    microsoft · windows xp14 Nis 2010

  • CVE-2010-0432
    24İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Openta

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    apache · ofbiz15 Nis 2010

  • CVE-2010-1423
    54Planlayın

    Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and ot

    KritikCVSS 9,3SilahlaştırılmışEPSS %55

    oracle · jdk15 Nis 2010

  • CVE-2010-1465
    46Planlayın

    Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitrary code via a long

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    trellian · ftp16 Nis 2010

  • CVE-2010-1470
    34İzleyin

    Directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Joomla! allows remote attackers to read arbitrary files and po

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    joomla · joomla19 Nis 2010

  • CVE-2010-1471
    35İzleyin

    Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attackers to read arbitrary

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    joomla · joomla\!19 Nis 2010

  • CVE-2010-1472
    34İzleyin

    Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attackers to read arbitra

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    joomla · joomla\!19 Nis 2010

  • CVE-2009-4769
    48Planlayın

    Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remote attackers to exec

    KritikCVSS 9,3SilahlaştırılmışEPSS %37

    jasper · httpdx20 Nis 2010

  • CVE-2010-1318
    57Planlayın

    Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile

    KritikCVSS 10,0SilahlaştırılmışEPSS %58

    realnetworks · helix mobile server20 Nis 2010

  • CVE-2010-1489
    21İzleyin

    The XSS Filter in Microsoft Internet Explorer 8 does not properly perform neutering for the SCRIPT tag, which allows remote attackers to con

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · internet explorer20 Nis 2010

  • CVE-2010-0886
    61Bu hafta

    Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 1

    KritikCVSS 10,0SilahlaştırılmışEPSS %69

    sun · jre20 Nis 2010

  • CVE-2010-1033
    41Planlayın

    Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    hp · operations manager21 Nis 2010

  • CVE-2010-1320
    20İzleyin

    Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x before 1.8.2 all

    OrtaCVSS 4,0Kavram kanıtıEPSS %11

    mit · kerberos 522 Nis 2010

  • CVE-2010-1157
    26İzleyin

    Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by

    DüşükCVSS 2,6Kavram kanıtıEPSS %52

    apache · tomcat23 Nis 2010

  • CVE-2010-1491
    24İzleyin

    Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to read arbitrary files

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    joomla · joomla\!23 Nis 2010

  • CVE-2010-1494
    25İzleyin

    Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to read arbitrary files v

    OrtaCVSS 5,0Kavram kanıtıEPSS %16

    joomla · joomla\!23 Nis 2010

  • CVE-2010-1495
    36İzleyin

    Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to read arbitrary files vi

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    matamko · com matamko23 Nis 2010

  • CVE-2010-1531
    35İzleyin

    Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to read arbitrary files v

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    joomla · joomla\!26 Nis 2010

  • CVE-2010-1532
    25İzleyin

    Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remote attackers to read

    OrtaCVSS 5,0Kavram kanıtıEPSS %15

    givesight · com powermail26 Nis 2010

  • CVE-2010-1533
    35İzleyin

    Directory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files v

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    joomla · joomla\!26 Nis 2010

  • CVE-2010-1534
    24İzleyin

    Directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows remote attackers to read arbitrary files v

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    joomla · joomla\!26 Nis 2010

  • CVE-2010-1535
    35İzleyin

    Directory traversal vulnerability in the TRAVELbook (com_travelbook) component 1.0.1 for Joomla! allows remote attackers to read arbitrary f

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    joomla · joomla\!26 Nis 2010

  • CVE-2010-1429
    40Planlayın

    Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allows remote attacke

    OrtaCVSS 5,0SilahlaştırılmışEPSS %53

    redhat · jboss enterprise application platform28 Nis 2010

  • CVE-2010-1586
    20İzleyin

    Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbi

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    hp · system management homepage28 Nis 2010

  • CVE-2010-1587
    43Planlayın

    The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a /

    OrtaCVSS 5,0SilahlaştırılmışEPSS %78

    apache · activemq28 Nis 2010

  • CVE-2010-0738
    73Bu hafta

    The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 a

    OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %74

    redhat · jboss enterprise application platform28 Nis 2010

  • CVE-2010-1428
    78Bu hafta

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %61

    redhat · jboss enterprise application platform28 Nis 2010

  • CVE-2010-1597
    41Planlayın

    Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbitrary code via a ZIP

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    zipgenius · zipgenius29 Nis 2010

  • CVE-2010-1601
    25İzleyin

    Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to read arbitrary files vi

    OrtaCVSS 5,0Kavram kanıtıEPSS %15

    joomla · joomla\!29 Nis 2010

  • CVE-2010-1602
    35İzleyin

    Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attackers to read arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    joomla · joomla\!29 Nis 2010

  • CVE-2010-0817
    26İzleyin

    Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and Sha

    OrtaCVSS 4,3Kavram kanıtıEPSS %28

    microsoft · sharepoint server29 Nis 2010