İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2010: sömürülen ve yeni ciddi CVE kayıtları

16 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-2620
    46Planlayın

    Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST, (2) RETR, (3) STOR

    KritikCVSS 9,3SilahlaştırılmışEPSS %29

    open-ftpd · open-ftpd2 Tem 2010

  • CVE-2010-2621
    23İzleyin

    The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allows remote attackers to

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    qt · qt2 Tem 2010

  • CVE-2010-2626
    34İzleyin

    index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    miyabi-seo · cgi tools seo links2 Tem 2010

  • CVE-2010-2682
    34İzleyin

    Directory traversal vulnerability in the Realtyna Translator (com_realtyna) component 1.0.15 for Joomla! allows remote attackers to read arb

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    realtyna · com realtyna12 Tem 2010

  • CVE-2010-2227
    41Planlayın

    Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which

    OrtaCVSS 6,4SilahlaştırılmışEPSS %54

    apache · tomcat13 Tem 2010

  • CVE-2010-0904
    40Planlayın

    Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vectors.

    OrtaCVSS 5,0SilahlaştırılmışEPSS %50

    oracle · secure backup13 Tem 2010

  • CVE-2010-0266
    52Planlayın

    Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD proper

    KritikCVSS 9,3SilahlaştırılmışEPSS %50

    microsoft · outlook15 Tem 2010

  • CVE-2010-0814
    44Planlayın

    The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with th

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · access15 Tem 2010

  • CVE-2010-1881
    43Planlayın

    The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly in

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · access15 Tem 2010

  • CVE-2010-2568
    88Hemen

    Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or r

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %89

    microsoft · windows 722 Tem 2010

  • CVE-2010-0211
    48Planlayın

    The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which

    KritikCVSS 9,8Kavram kanıtıEPSS %28

    openldap · openldap28 Tem 2010

  • CVE-2010-2703
    61Bu hafta

    Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when

    KritikCVSS 10,0SilahlaştırılmışEPSS %71

    hp · openview network node manager28 Tem 2010

  • CVE-2010-2704
    44Planlayın

    Buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long HTTP

    KritikCVSS 10,0İstismar yokEPSS %14

    hp · openview network node manager28 Tem 2010

  • CVE-2009-4962
    46Planlayın

    Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file.

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    adammo · fat player28 Tem 2010

  • CVE-2010-1452
    27İzleyin

    The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service

    OrtaCVSS 5,0İstismar yokEPSS %21

    apache · http server28 Tem 2010

  • CVE-2010-2918
    34İzleyin

    PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component 1.1 RC2 for Joomla!

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    joomla · joomla\!30 Tem 2010