İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2010: sömürülen ve yeni ciddi CVE kayıtları

62 kayıt · 3 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-2965
    53Planlayın

    The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with f

    KritikCVSS 9,8İstismar yokEPSS %47

    rockwellautomation · 1756-enbt\/a firmware5 Ağu 2010

  • CVE-2010-1871
    90Hemen

    JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %83

    redhat · jboss enterprise application platform5 Ağu 2010

  • CVE-2010-2709
    50Planlayın

    Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute a

    KritikCVSS 9,3SilahlaştırılmışEPSS %42

    hp · openview network node manager5 Ağu 2010

  • CVE-2010-2862
    42Planlayın

    Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    adobe · acrobat reader5 Ağu 2010

  • CVE-2010-0019
    41Planlayın

    Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows r

    KritikCVSS 9,3İstismar yokEPSS %14

    microsoft · silverlight11 Ağu 2010

  • CVE-2010-1258
    22İzleyin

    Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute scri

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · internet explorer11 Ağu 2010

  • CVE-2010-1882
    44Planlayın

    Multiple buffer overflows in the MPEG Layer-3 Audio Codec for Microsoft DirectShow in l3codecx.ax in Microsoft Windows XP SP2 and SP3 and Se

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · windows 2003 server11 Ağu 2010

  • CVE-2010-1892
    50Planlayın

    The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malfo

    YüksekCVSS 7,8İstismar yokEPSS %61

    microsoft · windows 711 Ağu 2010

  • CVE-2010-1898
    45Planlayın

    The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 b

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · .net framework11 Ağu 2010

  • CVE-2010-1900
    49Planlayın

    Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offi

    KritikCVSS 9,3Kavram kanıtıEPSS %39

    microsoft · word11 Ağu 2010

  • CVE-2010-1901
    43Planlayın

    Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offi

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · word11 Ağu 2010

  • CVE-2010-1902
    44Planlayın

    Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Conv

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · word11 Ağu 2010

  • CVE-2010-1903
    43Planlayın

    Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · word11 Ağu 2010

  • CVE-2010-2550
    63Bu hafta

    The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R

    KritikCVSS 10,0SilahlaştırılmışEPSS %75

    microsoft · windows 2003 server11 Ağu 2010

  • CVE-2010-2551
    51Planlayın

    The SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate an in

    YüksekCVSS 7,8İstismar yokEPSS %66

    microsoft · windows 711 Ağu 2010

  • CVE-2010-2552
    41Planlayın

    Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows

    YüksekCVSS 7,8İstismar yokEPSS %32

    microsoft · windows 711 Ağu 2010

  • CVE-2010-2553
    46Planlayın

    The Cinepak codec in Microsoft Windows XP SP2 and SP3, Windows Vista SP1 and SP2, and Windows 7 does not properly decompress media files, wh

    KritikCVSS 9,3Kavram kanıtıEPSS %30

    microsoft · windows 711 Ağu 2010

  • CVE-2010-2556
    45Planlayın

    Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · internet explorer11 Ağu 2010

  • CVE-2010-2557
    45Planlayın

    Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · internet explorer11 Ağu 2010

  • CVE-2010-2558
    43Planlayın

    Race condition in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (me

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · internet explorer11 Ağu 2010

  • CVE-2010-2559
    45Planlayın

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · internet explorer11 Ağu 2010

  • CVE-2010-2560
    44Planlayın

    Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer11 Ağu 2010

  • CVE-2010-2561
    44Planlayın

    Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3Kavram kanıtıEPSS %24

    microsoft · xml core services11 Ağu 2010

  • CVE-2010-2562
    42Planlayın

    Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · excel11 Ağu 2010

  • CVE-2010-2564
    44Planlayın

    Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · windows movie maker11 Ağu 2010

  • CVE-2010-2566
    42Planlayın

    The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, does not properly valid

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · windows 2003 server11 Ağu 2010

  • CVE-2010-2861
    99Hemen

    Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to re

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    adobe · coldfusion11 Ağu 2010

  • CVE-2010-1797
    46Planlayın

    Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload

    KritikCVSS 9,3Kavram kanıtıEPSS %30

    apple · iphone os16 Ağu 2010

  • CVE-2010-1799
    47Planlayın

    Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote attackers to execute

    KritikCVSS 9,3SilahlaştırılmışEPSS %33

    apple · quicktime16 Ağu 2010

  • CVE-2010-1870
    48Planlayın

    The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and po

    OrtaCVSS 5,0SilahlaştırılmışEPSS %92

    apache · struts17 Ağu 2010

  • CVE-2010-2710
    43Planlayın

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via u

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · openview network node manager20 Ağu 2010

  • CVE-2010-1527
    48Planlayın

    Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url p

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    novell · iprint23 Ağu 2010

  • CVE-2010-3106
    48Planlayın

    The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, whi

    KritikCVSS 9,3SilahlaştırılmışEPSS %37

    novell · iprint23 Ağu 2010

  • CVE-2010-3055
    34İzleyin

    The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its out

    YüksekCVSS 7,5İstismar yokEPSS %14

    phpmyadmin · phpmyadmin24 Ağu 2010

  • CVE-2009-4988
    60Bu hafta

    Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arb

    KritikCVSS 10,0SilahlaştırılmışEPSS %65

    sap · business one 2005-a25 Ağu 2010

  • CVE-2010-3124
    41Planlayın

    Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers,

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    videolan · vlc media player26 Ağu 2010

  • CVE-2010-3127
    41Planlayın

    Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitra

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    adobe · photoshop26 Ağu 2010

  • CVE-2010-3131
    44Planlayın

    Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3

    KritikCVSS 9,3Kavram kanıtıEPSS %22

    mozilla · firefox26 Ağu 2010

  • CVE-2010-3132
    41Planlayın

    Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, a

    KritikCVSS 9,3Kavram kanıtıEPSS %14

    adobe · dreamweaver26 Ağu 2010

  • CVE-2010-2866
    41Planlayın

    Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of servi

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    adobe · shockwave player26 Ağu 2010

  • CVE-2010-3138
    45Planlayın

    Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via

    KritikCVSS 9,3Kavram kanıtıEPSS %27

    microsoft · windows media player27 Ağu 2010

  • CVE-2010-3139
    44Planlayın

    Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attac

    KritikCVSS 9,3Kavram kanıtıEPSS %23

    microsoft · windows27 Ağu 2010

  • CVE-2010-3140
    42Planlayın

    Untrusted search path vulnerability in Microsoft Windows Internet Communication Settings on Windows XP SP3 allows local users, and possibly

    KritikCVSS 9,3Kavram kanıtıEPSS %15

    microsoft · windows xp27 Ağu 2010

  • CVE-2010-3141
    42Planlayın

    Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary cod

    KritikCVSS 9,3Kavram kanıtıEPSS %15

    microsoft · powerpoint27 Ağu 2010

  • CVE-2010-3142
    42Planlayın

    Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitr

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    microsoft · powerpoint27 Ağu 2010

  • CVE-2010-3143
    43Planlayın

    Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary co

    KritikCVSS 9,3Kavram kanıtıEPSS %20

    microsoft · windows27 Ağu 2010

  • CVE-2010-3144
    41Planlayın

    Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    microsoft · windows server 200327 Ağu 2010

  • CVE-2010-3145
    40Planlayın

    Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Microsoft Windows Vista

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    microsoft · windows vista27 Ağu 2010

  • CVE-2010-3146
    41Planlayın

    Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse (1) mso.

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    microsoft · groove27 Ağu 2010

  • CVE-2010-3147
    43Planlayın

    Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 20

    KritikCVSS 9,3Kavram kanıtıEPSS %18

    microsoft · outlook express27 Ağu 2010

  • CVE-2010-3148
    41Planlayın

    Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file i

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    microsoft · visio27 Ağu 2010

  • CVE-2010-3149
    41Planlayın

    Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0(376), 3.0.1.0 (3027), and probably other versions allows local users,

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    adobe · device central cs527 Ağu 2010

  • CVE-2010-3150
    42Planlayın

    Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 (314 (MC: 160820)) allows local users, and possibly remote attackers, to

    KritikCVSS 9,3Kavram kanıtıEPSS %15

    adobe · premier pro cs427 Ağu 2010

  • CVE-2010-3151
    42Planlayın

    Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitra

    KritikCVSS 9,3Kavram kanıtıEPSS %15

    adobe · onlocation cs427 Ağu 2010

  • CVE-2010-3152
    42Planlayın

    Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users,

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    adobe · illustrator27 Ağu 2010

  • CVE-2010-3153
    41Planlayın

    Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier,

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    adobe · indesign cs427 Ağu 2010

  • CVE-2010-3154
    40Planlayın

    Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arb

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    adobe · extension manager cs527 Ağu 2010

  • CVE-2010-3155
    41Planlayın

    Untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52 allows local users, and possibly remote attackers, to

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    adobe · extendedscript toolkit cs527 Ağu 2010

  • CVE-2010-3187
    46Planlayın

    Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command.

    KritikCVSS 10,0Kavram kanıtıEPSS %20

    ibm · aix30 Ağu 2010

  • CVE-2010-3035
    62Bu hafta

    Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote atta

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %5

    cisco · ios xr30 Ağu 2010

  • CVE-2010-1818
    50Planlayın

    The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers

    KritikCVSS 9,3SilahlaştırılmışEPSS %42

    apple · quicktime31 Ağu 2010

  • CVE-2010-3189
    49Planlayın

    The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote at

    KritikCVSS 9,3SilahlaştırılmışEPSS %39

    trendmicro · internet security31 Ağu 2010