İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2010: sömürülen ve yeni ciddi CVE kayıtları

56 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-1653
    34İzleyin

    Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! allows remote attacke

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    joomla · joomla\!3 May 2010

  • CVE-2010-1657
    26İzleyin

    Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers to read arbitrary fil

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    recly · com smartsite3 May 2010

  • CVE-2010-1658
    25İzleyin

    Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remote attackers to read

    OrtaCVSS 5,0Kavram kanıtıEPSS %16

    code-garage · com noticeboard3 May 2010

  • CVE-2010-1659
    24İzleyin

    Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows remote attackers to rea

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    joomla · joomla\!3 May 2010

  • CVE-2010-1663
    56Planlayın

    The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Orig

    KritikCVSS 10,0Kavram kanıtıEPSS %54

    google · chrome3 May 2010

  • CVE-2010-1714
    26İzleyin

    Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attackers to read arbitrary

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    joomla · joomla\!4 May 2010

  • CVE-2010-1717
    37İzleyin

    Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attackers to read arbitrary

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    if surfalert project · if surfalert4 May 2010

  • CVE-2010-1681
    50Planlayın

    Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code

    YüksekCVSS 7,6SilahlaştırılmışEPSS %67

    microsoft · visio6 May 2010

  • CVE-2010-1549
    63Bu hafta

    Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote attackers to execute

    KritikCVSS 10,0SilahlaştırılmışEPSS %77

    hp · loadrunner7 May 2010

  • CVE-2009-4850
    44Planlayın

    The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value wi

    KritikCVSS 9,3SilahlaştırılmışEPSS %24

    awingsoft · awakening winds3d viewer plugin7 May 2010

  • CVE-2010-1173
    34İzleyin

    The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remot

    YüksekCVSS 7,1Kavram kanıtıEPSS %21

    linux · linux kernel7 May 2010

  • CVE-2010-1858
    24İzleyin

    Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote attackers to read arbitr

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    joomla · joomla\!7 May 2010

  • CVE-2010-1875
    35İzleyin

    Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to re

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    joomla · joomla\!12 May 2010

  • CVE-2010-1878
    33İzleyin

    Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    joomla · joomla\!12 May 2010

  • CVE-2010-0815
    44Planlayın

    VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications (VBA), and VBA

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · visual basic for applications12 May 2010

  • CVE-2010-0816
    43Planlayın

    Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vi

    KritikCVSS 9,3Kavram kanıtıEPSS %20

    microsoft · outlook express12 May 2010

  • CVE-2010-0987
    38İzleyin

    Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted em

    YüksekCVSS 8,8İstismar yokEPSS %11

    adobe · shockwave player13 May 2010

  • CVE-2010-1280
    40Planlayın

    Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    adobe · shockwave player13 May 2010

  • CVE-2010-1550
    44Planlayın

    Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · openview network node manager13 May 2010

  • CVE-2010-1551
    44Planlayın

    Stack-based buffer overflow in the _OVParseLLA function in ov.dll in netmon.exe in Network Monitor in HP OpenView Network Node Manager (OV N

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · openview network node manager13 May 2010

  • CVE-2010-1552
    60Bu hafta

    Stack-based buffer overflow in the doLoad function in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow

    KritikCVSS 10,0SilahlaştırılmışEPSS %67

    hp · openview network node manager13 May 2010

  • CVE-2010-1553
    61Bu hafta

    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to e

    KritikCVSS 10,0SilahlaştırılmışEPSS %70

    hp · openview network node manager13 May 2010

  • CVE-2010-1554
    60Bu hafta

    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to e

    KritikCVSS 10,0SilahlaştırılmışEPSS %65

    hp · openview network node manager13 May 2010

  • CVE-2010-1555
    59Planlayın

    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to e

    KritikCVSS 10,0SilahlaştırılmışEPSS %62

    hp · openview network node manager13 May 2010

  • CVE-2010-1939
    34İzleyin

    Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by using window.open to crea

    YüksekCVSS 7,6Kavram kanıtıEPSS %14

    apple · safari13 May 2010

  • CVE-2009-3678
    41Planlayın

    Integer overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, whe

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · windows 714 May 2010

  • CVE-2010-1952
    34İzleyin

    Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for Joomla! allows remot

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    joomla · joomla\!19 May 2010

  • CVE-2010-1953
    35İzleyin

    Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) component 1.0 for Joomla! allows remote attackers to read arb

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    joomla · joomla\!19 May 2010

  • CVE-2010-1954
    35İzleyin

    Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allows remote attackers t

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    joomla · joomla\!19 May 2010

  • CVE-2010-1955
    35İzleyin

    Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote attackers to read a

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    joomla · joomla\!19 May 2010

  • CVE-2010-1956
    35İzleyin

    Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    joomla · joomla\!19 May 2010

  • CVE-2010-1957
    34İzleyin

    Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attackers to read arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    joomla · joomla\!19 May 2010

  • CVE-2010-1979
    30İzleyin

    Directory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) component build 880 for Joomla! allows remote attackers to read

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    joomla · joomla\!19 May 2010

  • CVE-2010-1980
    36İzleyin

    Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla! allows remote atta

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    joomla · joomla\!19 May 2010

  • CVE-2010-1981
    31İzleyin

    Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read arbitrary files via a

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    fabrikar · fabrik19 May 2010

  • CVE-2010-1983
    36İzleyin

    Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows remote attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    joomla · joomla\!19 May 2010

  • CVE-2010-1039
    46Planlayın

    Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCp

    KritikCVSS 10,0Kavram kanıtıEPSS %20

    ibm · aix20 May 2010

  • CVE-2010-1991
    23İzleyin

    Microsoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in situations where an IFRAME element has a mai

    OrtaCVSS 5,0İstismar yokEPSS %10

    microsoft · ie20 May 2010

  • CVE-2010-2011
    19İzleyin

    Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier fo

    OrtaCVSS 4,0İstismar yokEPSS %10

    microsoft · dynamics gp21 May 2010

  • CVE-2010-1688
    42Planlayın

    Stack-based buffer overflow in 2BrightSparks SyncBack Freeware 3.2.20.0, and possibly other versions before 3.2.21, allows user-assisted rem

    KritikCVSS 9,3Kavram kanıtıEPSS %15

    2brightsparks · syncback24 May 2010

  • CVE-2010-2028
    44Planlayın

    Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service (crash) and possibly

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    mgenti · tftputil gui24 May 2010

  • CVE-2010-2033
    35İzleyin

    Directory traversal vulnerability in the Percha Multicategory Article (com_perchacategoriestree) component 0.6 for Joomla! allows remote att

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    percha · com perchacategoriestree25 May 2010

  • CVE-2010-2034
    33İzleyin

    Directory traversal vulnerability in the Percha Image Attach (com_perchaimageattach) component 1.1 for Joomla! allows remote attackers to re

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    percha · com perchaimageattach25 May 2010

  • CVE-2010-2035
    35İzleyin

    Directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remote attackers to read a

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    percha · com perchagallery25 May 2010

  • CVE-2010-2036
    34İzleyin

    Directory traversal vulnerability in the Percha Fields Attach (com_perchafieldsattach) component 1.x for Joomla! allows remote attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    percha · com perchafieldsattach25 May 2010

  • CVE-2010-2037
    33İzleyin

    Directory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach) component 1.1 for Joomla! allows remote attacke

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    percha · com perchadownloadsattach25 May 2010

  • CVE-2010-2050
    34İzleyin

    Directory traversal vulnerability in the Moron Solutions MS Comment (com_mscomment) component 0.8.0b for Joomla! allows remote attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    joomla · joomla\!25 May 2010

  • CVE-2009-4873
    46Planlayın

    Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of serv

    KritikCVSS 10,0Kavram kanıtıEPSS %20

    rhinosoft · serv-u26 May 2010

  • CVE-2010-2084
    21İzleyin

    Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows rem

    OrtaCVSS 4,3İstismar yokEPSS %12

    microsoft · asp.net27 May 2010

  • CVE-2010-1296
    43Planlayın

    Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary code via a crafted

    KritikCVSS 9,3Kavram kanıtıEPSS %19

    adobe · photoshop cs427 May 2010

  • CVE-2010-2089
    24İzleyin

    The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows cont

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    python · python27 May 2010

  • CVE-2010-2091
    22İzleyin

    Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id param

    OrtaCVSS 4,3Kavram kanıtıEPSS %17

    microsoft · exchange server27 May 2010

  • CVE-2010-2094
    31İzleyin

    Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive i

    OrtaCVSS 6,8Kavram kanıtıEPSS %12

    php · php27 May 2010

  • CVE-2010-2103
    27İzleyin

    Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.

    OrtaCVSS 4,3Kavram kanıtıEPSS %34

    apache · axis227 May 2010

  • CVE-2010-1938
    44Planlayın

    Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-P

    KritikCVSS 9,3Kavram kanıtıEPSS %21

    freebsd · freebsd28 May 2010

  • CVE-2010-2115
    40Planlayın

    SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request.

    OrtaCVSS 5,0SilahlaştırılmışEPSS %55

    solarwinds · tftp server28 May 2010