İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2010: sömürülen ve yeni ciddi CVE kayıtları

21 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-2883
    83Hemen

    Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows

    YüksekCVSS 7,3KEVSilahlaştırılmışEPSS %81

    adobe · acrobat9 Eyl 2010

  • CVE-2010-3007
    40Planlayın

    Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4

    YüksekCVSS 7,2SilahlaştırılmışEPSS %5

    hp · data protector express9 Eyl 2010

  • CVE-2010-1807
    55Planlayın

    WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate flo

    KritikCVSS 9,3Kavram kanıtıEPSS %61

    apple · safari10 Eyl 2010

  • CVE-2010-2884
    42Planlayın

    Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader a

    KritikCVSS 9,3İstismar yokEPSS %15

    adobe · flash player15 Eyl 2010

  • CVE-2010-3069
    33İzleyin

    Stack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba before 3.5.5 allows remote attackers to cause a de

    YüksekCVSS 7,5İstismar yokEPSS %10

    samba · samba15 Eyl 2010

  • CVE-2010-0818
    41Planlayın

    The MPEG-4 codec in the Windows Media codecs in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold a

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · windows server 200315 Eyl 2010

  • CVE-2010-0820
    39İzleyin

    Heap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in Active Directory in Microsoft Windows Serve

    YüksekCVSS 8,8İstismar yokEPSS %14

    microsoft · windows 715 Eyl 2010

  • CVE-2010-1899
    40Planlayın

    Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows rem

    OrtaCVSS 4,3SilahlaştırılmışEPSS %57

    microsoft · internet information server15 Eyl 2010

  • CVE-2010-2563
    42Planlayın

    The Word 97 text converter in the WordPad Text Converters in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse ma

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · windows server 200315 Eyl 2010

  • CVE-2010-2728
    42Planlayın

    Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · outlook15 Eyl 2010

  • CVE-2010-2729
    60Bu hafta

    The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold,

    KritikCVSS 9,3SilahlaştırılmışEPSS %75

    microsoft · windows 715 Eyl 2010

  • CVE-2010-2730
    47Planlayın

    Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · internet information services15 Eyl 2010

  • CVE-2010-2731
    40Planlayın

    Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 on Windows XP SP3, when directory-based Basic Authentication

    OrtaCVSS 6,8SilahlaştırılmışEPSS %31

    microsoft · windows xp15 Eyl 2010

  • CVE-2010-2738
    43Planlayın

    The Uniscribe (aka new Unicode Script Processor) implementation in USP10.DLL in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1

    KritikCVSS 9,3Kavram kanıtıEPSS %18

    microsoft · windows server 200315 Eyl 2010

  • CVE-2010-3407
    49Planlayın

    Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8

    KritikCVSS 9,3SilahlaştırılmışEPSS %41

    ibm · lotus domino16 Eyl 2010

  • CVE-2010-3426
    34İzleyin

    Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remote attackers to incl

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    joomla · joomla\!16 Eyl 2010

  • CVE-2010-3324
    25İzleyin

    The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, Shar

    OrtaCVSS 4,3Kavram kanıtıEPSS %25

    microsoft · groove server17 Eyl 2010

  • CVE-2010-3072
    38İzleyin

    The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of

    OrtaCVSS 5,0İstismar yokEPSS %59

    squid-cache · squid20 Eyl 2010

  • CVE-2010-3200
    20İzleyin

    MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and multip

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · word20 Eyl 2010

  • CVE-2010-3332
    45Planlayın

    Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Servi

    OrtaCVSS 6,4Kavram kanıtıEPSS %68

    microsoft · .net framework22 Eyl 2010

  • CVE-2010-2943
    37İzleyin

    The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows

    YüksekCVSS 8,1Kavram kanıtıEPSS %17

    linux · linux kernel30 Eyl 2010