İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2010: sömürülen ve yeni ciddi CVE kayıtları

27 kayıt · 3 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-4142
    59Planlayın

    Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (c

    KritikCVSS 10,0SilahlaştırılmışEPSS %62

    realflex · realwin1 Kas 2010

  • CVE-2010-4182
    44Planlayın

    Untrusted search path vulnerability in the Data Access Objects (DAO) library (dao360.dll) in Microsoft Windows XP Professional SP3, Windows

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · windows 74 Kas 2010

  • CVE-2010-3863
    36İzleyin

    Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the shiro.ini file, whic

    OrtaCVSS 5,0Kavram kanıtıEPSS %54

    apache · shiro5 Kas 2010

  • CVE-2010-3962
    91Hemen

    Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors relate

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %96

    microsoft · internet explorer5 Kas 2010

  • CVE-2010-3639
    43Planlayın

    Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 1

    KritikCVSS 9,3Kavram kanıtıEPSS %21

    adobe · flash player7 Kas 2010

  • CVE-2010-4091
    43Planlayın

    The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows

    KritikCVSS 9,3Kavram kanıtıEPSS %18

    adobe · acrobat reader7 Kas 2010

  • CVE-2010-3709
    21İzleyin

    The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    php · php8 Kas 2010

  • CVE-2010-4221
    67Bu hafta

    Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to exe

    KritikCVSS 10,0SilahlaştırılmışEPSS %91

    proftpd · proftpd9 Kas 2010

  • CVE-2010-2572
    79Bu hafta

    Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %58

    microsoft · powerpoint9 Kas 2010

  • CVE-2010-2573
    43Planlayın

    Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to e

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office9 Kas 2010

  • CVE-2010-2732
    27İzleyin

    Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Upda

    OrtaCVSS 5,8İstismar yokEPSS %13

    microsoft · forefront unified access gateway9 Kas 2010

  • CVE-2010-2733
    21İzleyin

    Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, an

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · forefront unified access gateway9 Kas 2010

  • CVE-2010-2734
    21İzleyin

    Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1,

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · forefront unified access gateway9 Kas 2010

  • CVE-2010-3333
    88Hemen

    Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %89

    microsoft · office9 Kas 2010

  • CVE-2010-3334
    45Planlayın

    Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · office9 Kas 2010

  • CVE-2010-3335
    44Planlayın

    Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · office9 Kas 2010

  • CVE-2010-3336
    44Planlayın

    Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attacker

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · office9 Kas 2010

  • CVE-2010-3337
    40Planlayın

    Untrusted search path vulnerability in Microsoft Office 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in th

    KritikCVSS 9,3İstismar yokEPSS %10

    microsoft · office9 Kas 2010

  • CVE-2010-3936
    23İzleyin

    Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 20

    OrtaCVSS 4,3İstismar yokEPSS %18

    microsoft · forefront unified access gateway9 Kas 2010

  • CVE-2010-4156
    24İzleyin

    The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensit

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    php · php9 Kas 2010

  • CVE-2010-3870
    30İzleyin

    The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    php · php12 Kas 2010

  • CVE-2010-3894
    41Planlayın

    Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryptionjni.so in the log

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    ibm · omnifind12 Kas 2010

  • CVE-2010-4231
    36İzleyin

    Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Me

    YüksekCVSS 7,8Kavram kanıtıEPSS %16

    camtron · cmnc-200 firmware16 Kas 2010

  • CVE-2010-3864
    37İzleyin

    Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are

    YüksekCVSS 7,6İstismar yokEPSS %22

    openssl · openssl17 Kas 2010

  • CVE-2010-4107
    35İzleyin

    The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MF

    YüksekCVSS 7,8Kavram kanıtıEPSS %13

    hp · 900017 Kas 2010

  • CVE-2010-4300
    34İzleyin

    Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector in Wireshark 1.2.0 th

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    wireshark · wireshark26 Kas 2010

  • CVE-2010-4172
    30İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.

    OrtaCVSS 4,3Kavram kanıtıEPSS %42

    apache · tomcat26 Kas 2010