İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2010: sömürülen ve yeni ciddi CVE kayıtları

50 kayıt · 4 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-4367
    38İzleyin

    awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via

    YüksekCVSS 7,5Kavram kanıtıEPSS %27

    awstats · awstats2 Ara 2010

  • CVE-2010-4278
    39İzleyin

    operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metac

    KritikCVSS 9,0Kavram kanıtıEPSS %11

    artica · pandora fms2 Ara 2010

  • CVE-2010-4279
    60Bu hafta

    The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attacker

    KritikCVSS 10,0SilahlaştırılmışEPSS %65

    artica · pandora fms2 Ara 2010

  • CVE-2010-4282
    36İzleyin

    Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    artica · pandora fms2 Ara 2010

  • CVE-2010-3614
    29İzleyin

    named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly det

    OrtaCVSS 6,4İstismar yokEPSS %14

    isc · bind6 Ara 2010

  • CVE-2010-4254
    34İzleyin

    Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allow

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    mono · mono6 Ara 2010

  • CVE-2010-4398
    64Bu hafta

    Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %8

    microsoft · windows 76 Ara 2010

  • CVE-2010-3904
    66Bu hafta

    The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %15

    linux · linux kernel6 Ara 2010

  • CVE-2010-4409
    26İzleyin

    Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attack

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    php · php6 Ara 2010

  • CVE-2010-4259
    30İzleyin

    Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execu

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    alexej kryukov · fontforge7 Ara 2010

  • CVE-2010-4170
    40Planlayın

    The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gai

    YüksekCVSS 7,2SilahlaştırılmışEPSS %5

    systemtap · systemtap7 Ara 2010

  • CVE-2010-4344
    91Hemen

    Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %71

    exim · exim14 Ara 2010

  • CVE-2010-4345
    66Bu hafta

    Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate confi

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %17

    exim · exim14 Ara 2010

  • CVE-2010-2569
    43Planlayın

    pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecifie

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · publisher16 Ara 2010

  • CVE-2010-2570
    44Planlayın

    Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 al

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · publisher16 Ara 2010

  • CVE-2010-2571
    43Planlayın

    Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to e

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · publisher16 Ara 2010

  • CVE-2010-2742
    30İzleyin

    The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled,

    OrtaCVSS 5,4İstismar yokEPSS %29

    microsoft · windows 2003 server16 Ara 2010

  • CVE-2010-3338
    40Planlayın

    The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly de

    YüksekCVSS 7,2SilahlaştırılmışEPSS %23

    microsoft · windows 716 Ara 2010

  • CVE-2010-3340
    44Planlayın

    Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by a

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer16 Ara 2010

  • CVE-2010-3342
    21İzleyin

    Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access conten

    OrtaCVSS 4,3İstismar yokEPSS %13

    microsoft · internet explorer16 Ara 2010

  • CVE-2010-3343
    46Planlayın

    Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · internet explorer16 Ara 2010

  • CVE-2010-3345
    46Planlayın

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · internet explorer16 Ara 2010

  • CVE-2010-3346
    46Planlayın

    Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · internet explorer16 Ara 2010

  • CVE-2010-3348
    21İzleyin

    Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access conten

    OrtaCVSS 4,3İstismar yokEPSS %13

    microsoft · internet explorer16 Ara 2010

  • CVE-2010-3937
    22İzleyin

    Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSE

    OrtaCVSS 4,0İstismar yokEPSS %18

    microsoft · exchange server16 Ara 2010

  • CVE-2010-3945
    44Planlayın

    Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack al

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · office16 Ara 2010

  • CVE-2010-3946
    43Planlayın

    Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · office16 Ara 2010

  • CVE-2010-3947
    46Planlayın

    Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · office16 Ara 2010

  • CVE-2010-3949
    44Planlayın

    Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attac

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · office16 Ara 2010

  • CVE-2010-3950
    43Planlayın

    The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert da

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office16 Ara 2010

  • CVE-2010-3951
    44Planlayın

    Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote a

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · office16 Ara 2010

  • CVE-2010-3952
    43Planlayın

    The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office16 Ara 2010

  • CVE-2010-3954
    43Planlayın

    Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · publisher16 Ara 2010

  • CVE-2010-3955
    43Planlayın

    pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · publisher16 Ara 2010

  • CVE-2010-3959
    31İzleyin

    The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008

    OrtaCVSS 6,9İstismar yokEPSS %14

    microsoft · windows 2003 server16 Ara 2010

  • CVE-2010-3964
    58Planlayın

    Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the

    YüksekCVSS 7,5SilahlaştırılmışEPSS %94

    microsoft · sharepoint server16 Ara 2010

  • CVE-2010-3965
    40Planlayın

    Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista S

    KritikCVSS 9,3İstismar yokEPSS %11

    microsoft · windows media encoder16 Ara 2010

  • CVE-2010-3966
    41Planlayın

    Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · windows 716 Ara 2010

  • CVE-2010-3967
    43Planlayın

    Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL

    KritikCVSS 9,3Kavram kanıtıEPSS %20

    microsoft · windows movie maker16 Ara 2010

  • CVE-2010-4557
    44Planlayın

    Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possi

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    invensys · wonderware inbatch17 Ara 2010

  • CVE-2010-4116
    44Planlayın

    Unspecified vulnerability in HP StorageWorks Storage Mirroring 5.x before 5.2.2.1771.2 allows remote attackers to execute arbitrary code via

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · storageworks storage mirroring21 Ara 2010

  • CVE-2010-2590
    51Planlayın

    Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Repor

    KritikCVSS 9,3SilahlaştırılmışEPSS %46

    sap · crystal reports21 Ara 2010

  • CVE-2010-3970
    57Planlayın

    Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rende

    KritikCVSS 9,3SilahlaştırılmışEPSS %67

    microsoft · windows server 200322 Ara 2010

  • CVE-2010-3971
    61Bu hafta

    Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in

    KritikCVSS 9,3SilahlaştırılmışEPSS %81

    microsoft · internet explorer22 Ara 2010

  • CVE-2010-3972
    68Bu hafta

    Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet

    KritikCVSS 10,0SilahlaştırılmışEPSS %94

    microsoft · internet information services23 Ara 2010

  • CVE-2010-3973
    59Planlayın

    The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP

    KritikCVSS 9,3SilahlaştırılmışEPSS %71

    microsoft · wmi administrative tools23 Ara 2010

  • CVE-2010-4588
    47Planlayın

    The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute

    KritikCVSS 9,3Kavram kanıtıEPSS %32

    microsoft · wmi administrative tools23 Ara 2010

  • CVE-2010-4597
    46Planlayın

    Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Int

    KritikCVSS 10,0Kavram kanıtıEPSS %18

    ecava · integraxor23 Ara 2010

  • CVE-2010-4598
    28İzleyin

    Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %26

    ecava · integraxor23 Ara 2010

  • CVE-2010-4321
    47Planlayın

    Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to execute arbitrary co

    KritikCVSS 9,3SilahlaştırılmışEPSS %33

    novell · iprint client30 Ara 2010