İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2010: sömürülen ve yeni ciddi CVE kayıtları

68 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2009-4880
    23İzleyin

    Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependen

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    gnu · glibc1 Haz 2010

  • CVE-2010-2118
    20İzleyin

    Microsoft Internet Explorer 6.0.2900.2180 and 8.0.7600.16385 allows remote attackers to cause a denial of service (resource consumption) via

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · ie1 Haz 2010

  • CVE-2010-2122
    30İzleyin

    Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows remote attackers to i

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    joomla · joomla\!1 Haz 2010

  • CVE-2010-2128
    35İzleyin

    Directory traversal vulnerability in the JE Quotation Form (com_jequoteform) component 1.0b1 for Joomla! allows remote attackers to read arb

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    joomla · joomla\!1 Haz 2010

  • CVE-2010-1962
    44Planlayın

    Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.2.1.870.0 allows remote attackers to execute arbitrary code via un

    KritikCVSS 10,0İstismar yokEPSS %12

    hp · storageworks storage mirroring7 Haz 2010

  • CVE-2010-2156
    43Planlayın

    ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length cl

    OrtaCVSS 5,0SilahlaştırılmışEPSS %76

    isc · dhcp7 Haz 2010

  • CVE-2010-1850
    31İzleyin

    Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIEL

    OrtaCVSS 6,0İstismar yokEPSS %21

    mysql · mysql7 Haz 2010

  • CVE-2010-1297
    86Hemen

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3,

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %82

    adobe · air8 Haz 2010

  • CVE-2010-0821
    44Planlayın

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · excel8 Haz 2010

  • CVE-2010-0822
    58Planlayın

    Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter

    KritikCVSS 9,3SilahlaştırılmışEPSS %70

    microsoft · excel8 Haz 2010

  • CVE-2010-0823
    43Planlayın

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3, 2003 SP3, 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · excel8 Haz 2010

  • CVE-2010-0824
    44Planlayın

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a

    KritikCVSS 9,3Kavram kanıtıEPSS %22

    microsoft · excel8 Haz 2010

  • CVE-2010-1245
    44Planlayın

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter f

    KritikCVSS 9,3Kavram kanıtıEPSS %22

    microsoft · excel8 Haz 2010

  • CVE-2010-1246
    44Planlayın

    Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a ma

    KritikCVSS 9,3Kavram kanıtıEPSS %24

    microsoft · excel8 Haz 2010

  • CVE-2010-1247
    44Planlayın

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malf

    KritikCVSS 9,3Kavram kanıtıEPSS %22

    microsoft · excel8 Haz 2010

  • CVE-2010-1248
    45Planlayın

    Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel fi

    KritikCVSS 9,3Kavram kanıtıEPSS %27

    microsoft · excel8 Haz 2010

  • CVE-2010-1249
    44Planlayın

    Buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac all

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · excel8 Haz 2010

  • CVE-2010-1250
    44Planlayın

    Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · excel8 Haz 2010

  • CVE-2010-1251
    43Planlayın

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel8 Haz 2010

  • CVE-2010-1252
    43Planlayın

    Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel8 Haz 2010

  • CVE-2010-1253
    45Planlayın

    Microsoft Office Excel 2002 SP3, 2007 SP1, and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; and Of

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · excel8 Haz 2010

  • CVE-2010-1256
    42Planlayın

    Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenti

    YüksekCVSS 8,5İstismar yokEPSS %28

    microsoft · internet information server8 Haz 2010

  • CVE-2010-1257
    24İzleyin

    Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Off

    OrtaCVSS 4,3İstismar yokEPSS %22

    microsoft · office infopath8 Haz 2010

  • CVE-2010-1263
    46Planlayın

    Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold,

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · office8 Haz 2010

  • CVE-2010-1264
    23İzleyin

    Unspecified vulnerability in Microsoft Windows SharePoint Services 3.0 SP1 and SP2 allows remote attackers to cause a denial of service (han

    OrtaCVSS 4,0İstismar yokEPSS %23

    microsoft · sharepoint services8 Haz 2010

  • CVE-2010-0811
    45Planlayın

    Multiple unspecified vulnerabilities in the Microsoft Internet Explorer 8 Developer Tools ActiveX control in Microsoft Windows 2000 SP4, Win

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · windows xp8 Haz 2010

  • CVE-2010-1259
    45Planlayın

    Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was no

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · internet explorer8 Haz 2010

  • CVE-2010-1260
    36İzleyin

    The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · internet explorer8 Haz 2010

  • CVE-2010-1261
    44Planlayın

    The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer8 Haz 2010

  • CVE-2010-1262
    47Planlayın

    Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was no

    KritikCVSS 9,3İstismar yokEPSS %33

    microsoft · internet explorer8 Haz 2010

  • CVE-2010-1879
    43Planlayın

    Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll C

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · directx8 Haz 2010

  • CVE-2010-1880
    43Planlayın

    Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · directx8 Haz 2010

  • CVE-2010-2259
    35İzleyin

    Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to include and execute arbit

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    joomla · joomla\!9 Haz 2010

  • CVE-2010-0395
    40Planlayın

    OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbit

    KritikCVSS 9,3İstismar yokEPSS %10

    canonical · ubuntu linux9 Haz 2010

  • CVE-2010-1573
    45Planlayın

    Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username (Gemtek) and password (gemtekswd) for a debug interface for certain

    KritikCVSS 9,8İstismar yokEPSS %20

    linksys · wap54g firmware9 Haz 2010

  • CVE-2010-1960
    60Bu hafta

    Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows re

    KritikCVSS 10,0SilahlaştırılmışEPSS %67

    hp · openview network node manager9 Haz 2010

  • CVE-2010-1961
    60Bu hafta

    Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to exec

    KritikCVSS 10,0SilahlaştırılmışEPSS %67

    hp · openview network node manager9 Haz 2010

  • CVE-2010-1759
    42Planlayın

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4

    KritikCVSS 9,3Kavram kanıtıEPSS %15

    apple · safari11 Haz 2010

  • CVE-2010-1885
    58Planlayın

    The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not proper

    KritikCVSS 9,3SilahlaştırılmışEPSS %71

    microsoft · windows 2003 server15 Haz 2010

  • CVE-2010-2263
    42Planlayın

    nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of

    OrtaCVSS 5,0SilahlaştırılmışEPSS %71

    f5 · nginx15 Haz 2010

  • CVE-2010-2265
    23İzleyin

    Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center

    OrtaCVSS 4,3Kavram kanıtıEPSS %20

    microsoft · windows 2003 server15 Haz 2010

  • CVE-2010-2266
    26İzleyin

    nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger mem

    OrtaCVSS 5,0Kavram kanıtıEPSS %21

    f5 · nginx15 Haz 2010

  • CVE-2010-2075
    55Planlayın

    UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modificat

    YüksekCVSS 7,5SilahlaştırılmışEPSS %83

    unrealircd · unrealircd15 Haz 2010

  • CVE-2010-2171
    39İzleyin

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of serv

    KritikCVSS 9,3İstismar yokEPSS %6

    adobe · flash player15 Haz 2010

  • CVE-2010-1932
    40Planlayın

    Heap-based buffer overflow in XnView 1.97.4 and possibly earlier allows remote attackers to execute arbitrary code via a MultiBitMap (MBM) f

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    xnview · xnview16 Haz 2010

  • CVE-2010-2305
    43Planlayın

    Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execut

    KritikCVSS 9,3Kavram kanıtıEPSS %19

    symantec · sygate personal firewall16 Haz 2010

  • CVE-2010-2309
    45Planlayın

    Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary code via a long GET req

    YüksekCVSS 7,5SilahlaştırılmışEPSS %50

    evological · evocam16 Haz 2010

  • CVE-2010-2310
    23İzleyin

    SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request.

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    solarwinds · tftp server16 Haz 2010

  • CVE-2010-1411
    31İzleyin

    Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in A

    OrtaCVSS 6,8Kavram kanıtıEPSS %12

    apple · mac os x17 Haz 2010

  • CVE-2010-1964
    50Planlayın

    Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary

    YüksekCVSS 7,5SilahlaştırılmışEPSS %66

    hp · openview network node manager17 Haz 2010

  • CVE-2010-2063
    54Planlayın

    Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 all

    YüksekCVSS 7,5SilahlaştırılmışEPSS %78

    samba · samba17 Haz 2010

  • CVE-2010-2068
    25İzleyin

    mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/

    OrtaCVSS 5,0İstismar yokEPSS %16

    apache · http server18 Haz 2010

  • CVE-2010-2321
    43Planlayın

    Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file.

    KritikCVSS 9,3Kavram kanıtıEPSS %20

    adobe · indesign cs318 Haz 2010

  • CVE-2010-2330
    45Planlayın

    Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly e

    KritikCVSS 9,3Kavram kanıtıEPSS %27

    upredsun · isharer file sharing wizard18 Haz 2010

  • CVE-2010-2333
    40Planlayın

    LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP reque

    OrtaCVSS 5,0SilahlaştırılmışEPSS %60

    litespeedtech · litespeed web server18 Haz 2010

  • CVE-2010-2343
    48Planlayın

    Stack-based buffer overflow in D.R.

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    dennisre · audio converter21 Haz 2010

  • CVE-2010-1622
    40Planlayın

    SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute a

    OrtaCVSS 6,0Kavram kanıtıEPSS %52

    springsource · spring framework21 Haz 2010

  • CVE-2010-2351
    45Planlayın

    Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to exec

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    novell · netware21 Haz 2010

  • CVE-2010-1632
    37İzleyin

    Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9

    YüksekCVSS 7,5İstismar yokEPSS %22

    ibm · websphere application server22 Haz 2010

  • CVE-2010-2426
    40Planlayın

    Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows

    OrtaCVSS 4,0SilahlaştırılmışEPSS %12

    southrivertech · titan ftp server24 Haz 2010

  • CVE-2010-1199
    40Planlayın

    Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    mozilla · firefox24 Haz 2010

  • CVE-2010-2442
    20İzleyin

    Microsoft Internet Explorer, possibly 8, does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cro

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · internet explorer24 Haz 2010

  • CVE-2010-1929
    41Planlayın

    Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web s

    KritikCVSS 9,0Kavram kanıtıEPSS %16

    novell · imanager28 Haz 2010

  • CVE-2008-7257
    20İzleyin

    CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software

    OrtaCVSS 4,3Kavram kanıtıEPSS %11

    cisco · asa 558029 Haz 2010

  • CVE-2010-1205
    52Planlayın

    Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attack

    KritikCVSS 9,8Kavram kanıtıEPSS %43

    libpng · libpng30 Haz 2010

  • CVE-2010-2168
    41Planlayın

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF

    KritikCVSS 9,3Kavram kanıtıEPSS %14

    adobe · acrobat30 Haz 2010

  • CVE-2010-2201
    41Planlayın

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF

    KritikCVSS 9,3Kavram kanıtıEPSS %14

    adobe · acrobat30 Haz 2010

  • CVE-2010-2204
    41Planlayın

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to ca

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    adobe · acrobat30 Haz 2010