İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2010: sömürülen ve yeni ciddi CVE kayıtları

60 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-1623
    26İzleyin

    Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) be

    OrtaCVSS 5,0İstismar yokEPSS %20

    apache · apr-util4 Eki 2010

  • CVE-2010-2889
    45Planlayın

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to exec

    KritikCVSS 9,3İstismar yokEPSS %27

    adobe · acrobat6 Eki 2010

  • CVE-2010-3631
    41Planlayın

    Array index error in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execute arbitrary code via

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    adobe · acrobat6 Eki 2010

  • CVE-2010-3886
    22İzleyin

    The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID val

    OrtaCVSS 4,3Kavram kanıtıEPSS %16

    microsoft · internet explorer8 Eki 2010

  • CVE-2010-2951
    29İzleyin

    dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allo

    OrtaCVSS 5,0İstismar yokEPSS %31

    squid-cache · squid12 Eki 2010

  • CVE-2010-1883
    38İzleyin

    Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1

    YüksekCVSS 7,8İstismar yokEPSS %23

    microsoft · windows 2003 server13 Eki 2010

  • CVE-2010-2745
    44Planlayın

    Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, which allows user-ass

    KritikCVSS 9,3Kavram kanıtıEPSS %23

    microsoft · windows media player13 Eki 2010

  • CVE-2010-2746
    41Planlayın

    Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Wi

    YüksekCVSS 7,6Kavram kanıtıEPSS %35

    microsoft · windows 2003 server13 Eki 2010

  • CVE-2010-2747
    43Planlayın

    Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which all

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office13 Eki 2010

  • CVE-2010-2748
    43Planlayın

    Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allow

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · office13 Eki 2010

  • CVE-2010-2750
    43Planlayın

    Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word do

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office13 Eki 2010

  • CVE-2010-3214
    44Planlayın

    Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Con

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · office13 Eki 2010

  • CVE-2010-3215
    43Planlayın

    Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which al

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office13 Eki 2010

  • CVE-2010-3216
    43Planlayın

    Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing book

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office13 Eki 2010

  • CVE-2010-3217
    49Planlayın

    Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List

    KritikCVSS 9,3İstismar yokEPSS %40

    microsoft · word13 Eki 2010

  • CVE-2010-3218
    44Planlayın

    Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word docu

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · word13 Eki 2010

  • CVE-2010-3219
    43Planlayın

    Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that trig

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · word13 Eki 2010

  • CVE-2010-3220
    43Planlayın

    Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · office13 Eki 2010

  • CVE-2010-3221
    43Planlayın

    Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Wor

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · office13 Eki 2010

  • CVE-2010-3223
    34İzleyin

    The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permis

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · windows server 200813 Eki 2010

  • CVE-2010-3225
    35İzleyin

    Use-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows Vista SP1 and SP2 and Windows 7 allows remote

    YüksekCVSS 7,6İstismar yokEPSS %16

    microsoft · windows vista13 Eki 2010

  • CVE-2010-3228
    43Planlayın

    The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · .net framework13 Eki 2010

  • CVE-2010-3229
    43Planlayın

    The Secure Channel (aka SChannel) security package in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Window

    YüksekCVSS 7,1İstismar yokEPSS %50

    microsoft · windows 713 Eki 2010

  • CVE-2010-3230
    43Planlayın

    Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record inf

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · excel13 Eki 2010

  • CVE-2010-3231
    43Planlayın

    Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record informati

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · excel13 Eki 2010

  • CVE-2010-3232
    43Planlayın

    Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Co

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel13 Eki 2010

  • CVE-2010-3233
    43Planlayın

    Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel13 Eki 2010

  • CVE-2010-3234
    43Planlayın

    Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a craft

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · excel13 Eki 2010

  • CVE-2010-3235
    43Planlayın

    Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a craft

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel13 Eki 2010

  • CVE-2010-3236
    43Planlayın

    Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate rec

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel13 Eki 2010

  • CVE-2010-3237
    43Planlayın

    Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbit

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel13 Eki 2010

  • CVE-2010-3238
    43Planlayın

    Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remo

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel13 Eki 2010

  • CVE-2010-3239
    43Planlayın

    Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafte

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel13 Eki 2010

  • CVE-2010-3240
    43Planlayın

    Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel13 Eki 2010

  • CVE-2010-3241
    43Planlayın

    Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-form

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel13 Eki 2010

  • CVE-2010-3242
    43Planlayın

    Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record informati

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel13 Eki 2010

  • CVE-2010-3243
    22İzleyin

    Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microso

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · sharepoint server13 Eki 2010

  • CVE-2010-3325
    24İzleyin

    Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Sheets (CSS) documents, w

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · internet explorer13 Eki 2010

  • CVE-2010-3326
    44Planlayın

    Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer13 Eki 2010

  • CVE-2010-3327
    21İzleyin

    The implementation of HTML content creation in Microsoft Internet Explorer 6 through 8 does not remove the Anchor element during pasting and

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · internet explorer13 Eki 2010

  • CVE-2010-3328
    45Planlayın

    Use-after-free vulnerability in the CAttrArray::PrivateFind function in mshtml.dll in Microsoft Internet Explorer 6 through 8 allows remote

    YüksekCVSS 8,8İstismar yokEPSS %31

    microsoft · internet explorer13 Eki 2010

  • CVE-2010-3329
    46Planlayın

    mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office documen

    KritikCVSS 9,3Kavram kanıtıEPSS %28

    microsoft · internet explorer13 Eki 2010

  • CVE-2010-3330
    33İzleyin

    Microsoft Internet Explorer 6 through 8 does not properly restrict script access to content from a different (1) domain or (2) zone, which a

    OrtaCVSS 6,5İstismar yokEPSS %22

    microsoft · internet explorer13 Eki 2010

  • CVE-2010-3331
    44Planlayın

    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory in certain circumstances involving use of Microsoft Word

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer13 Eki 2010

  • CVE-2010-2415
    40Planlayın

    Unspecified vulnerability in the Change Data Capture component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows r

    OrtaCVSS 4,9SilahlaştırılmışEPSS %9

    oracle · database server13 Eki 2010

  • CVE-2010-3585
    52Planlayın

    Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrit

    KritikCVSS 9,0SilahlaştırılmışEPSS %52

    oracle · vm14 Eki 2010

  • CVE-2010-0219
    67Bu hafta

    Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default pass

    KritikCVSS 10,0SilahlaştırılmışEPSS %90

    apache · axis218 Eki 2010

  • CVE-2010-3747
    47Planlayın

    An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not p

    KritikCVSS 9,3SilahlaştırılmışEPSS %34

    realnetworks · realplayer18 Eki 2010

  • CVE-2010-3749
    45Planlayın

    The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to

    KritikCVSS 9,3Kavram kanıtıEPSS %25

    realnetworks · realplayer18 Eki 2010

  • CVE-2010-3552
    64Bu hafta

    Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to a

    KritikCVSS 10,0SilahlaştırılmışEPSS %80

    sun · jre19 Eki 2010

  • CVE-2010-3563
    65Bu hafta

    Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect

    KritikCVSS 10,0SilahlaştırılmışEPSS %84

    sun · jre19 Eki 2010

  • CVE-2010-3573
    23İzleyin

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote at

    OrtaCVSS 5,1Kavram kanıtıEPSS %10

    sun · jre19 Eki 2010

  • CVE-2010-3179
    40Planlayın

    Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    mozilla · firefox21 Eki 2010

  • CVE-2010-3714
    40Planlayın

    The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x bef

    YüksekCVSS 7,1SilahlaştırılmışEPSS %24

    typo3 · typo325 Eki 2010

  • CVE-2010-3653
    59Planlayın

    The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a de

    KritikCVSS 9,3SilahlaştırılmışEPSS %74

    adobe · shockwave player26 Eki 2010

  • CVE-2010-4094
    40Planlayın

    The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it

    OrtaCVSS 5,0SilahlaştırılmışEPSS %64

    ibm · rational quality manager26 Eki 2010

  • CVE-2010-3227
    43Planlayın

    Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class

    KritikCVSS 9,3Kavram kanıtıEPSS %20

    microsoft · windows 726 Eki 2010

  • CVE-2010-2891
    34İzleyin

    Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    tu-braunschweig · libsmi27 Eki 2010

  • CVE-2010-3765
    94Hemen

    Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x bef

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %83

    mozilla · firefox27 Eki 2010

  • CVE-2010-3654
    58Planlayın

    Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authp

    KritikCVSS 9,3SilahlaştırılmışEPSS %69

    adobe · flash player29 Eki 2010