İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2011: sömürülen ve yeni ciddi CVE kayıtları

68 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-4669
    40Planlayın

    The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows S

    YüksekCVSS 7,8Kavram kanıtıEPSS %29

    microsoft · windows 2003 server7 Oca 2011

  • CVE-2010-2642
    34İzleyin

    Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possi

    YüksekCVSS 7,6İstismar yokEPSS %14

    t1lib · t1lib7 Oca 2011

  • CVE-2010-3847
    40Planlayın

    elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value

    OrtaCVSS 6,9SilahlaştırılmışEPSS %9

    gnu · glibc7 Oca 2011

  • CVE-2010-3856
    40Planlayın

    ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT envi

    YüksekCVSS 7,2SilahlaştırılmışEPSS %11

    gnu · glibc7 Oca 2011

  • CVE-2010-4538
    46Planlayın

    Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a

    KritikCVSS 9,3Kavram kanıtıEPSS %28

    wireshark · wireshark7 Oca 2011

  • CVE-2010-4543
    35İzleyin

    Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote a

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    gimp · gimp7 Oca 2011

  • CVE-2011-0346
    41Planlayın

    Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attacke

    YüksekCVSS 8,1İstismar yokEPSS %31

    microsoft · internet explorer7 Oca 2011

  • CVE-2011-0347
    44Planlayın

    Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecified other impact via

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · internet explorer7 Oca 2011

  • CVE-2010-4645
    25İzleyin

    strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent at

    OrtaCVSS 5,0Kavram kanıtıEPSS %15

    php · php10 Oca 2011

  • CVE-2011-0404
    49Planlayın

    Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to

    YüksekCVSS 7,5SilahlaştırılmışEPSS %64

    netsupport · netsupport manager agent10 Oca 2011

  • CVE-2011-0406
    46Planlayın

    Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long reques

    KritikCVSS 10,0Kavram kanıtıEPSS %21

    wellintech · kingview10 Oca 2011

  • CVE-2010-3678
    20İzleyin

    Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with

    OrtaCVSS 4,0Kavram kanıtıEPSS %12

    mysql · mysql11 Oca 2011

  • CVE-2010-3679
    20İzleyin

    Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to

    OrtaCVSS 4,0Kavram kanıtıEPSS %12

    mysql · mysql11 Oca 2011

  • CVE-2010-3680
    20İzleyin

    Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary ta

    OrtaCVSS 4,0Kavram kanıtıEPSS %12

    mysql · mysql11 Oca 2011

  • CVE-2010-3681
    20İzleyin

    Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by

    OrtaCVSS 4,0Kavram kanıtıEPSS %12

    mysql · mysql11 Oca 2011

  • CVE-2010-3682
    19İzleyin

    Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by

    OrtaCVSS 4,0Kavram kanıtıEPSS %11

    mysql · mysql11 Oca 2011

  • CVE-2010-3683
    20İzleyin

    Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows re

    OrtaCVSS 4,0Kavram kanıtıEPSS %12

    mysql · mysql11 Oca 2011

  • CVE-2011-0026
    47Planlayın

    Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2,

    KritikCVSS 9,3İstismar yokEPSS %34

    microsoft · data access components11 Oca 2011

  • CVE-2011-0027
    53Planlayın

    Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory al

    KritikCVSS 9,3Kavram kanıtıEPSS %54

    microsoft · data access components11 Oca 2011

  • CVE-2010-4051
    32İzleyin

    The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent att

    OrtaCVSS 5,0Kavram kanıtıEPSS %39

    gnu · glibc13 Oca 2011

  • CVE-2010-4052
    35İzleyin

    Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2

    OrtaCVSS 5,0Kavram kanıtıEPSS %51

    gnu · glibc13 Oca 2011

  • CVE-2011-0261
    45Planlayın

    Unspecified vulnerability in jovgraph.exe in jovgraph in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to

    KritikCVSS 10,0İstismar yokEPSS %15

    hp · openview network node manager13 Oca 2011

  • CVE-2011-0262
    45Planlayın

    Buffer overflow in the stringToSeconds function in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53

    KritikCVSS 10,0İstismar yokEPSS %17

    hp · openview network node manager13 Oca 2011

  • CVE-2011-0263
    45Planlayın

    Multiple stack-based buffer overflows in ovas.exe in the OVAS service in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remot

    KritikCVSS 10,0İstismar yokEPSS %17

    hp · openview network node manager13 Oca 2011

  • CVE-2011-0264
    45Planlayın

    Stack-based buffer overflow in ovutil.dll in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbi

    KritikCVSS 10,0İstismar yokEPSS %17

    hp · openview network node manager13 Oca 2011

  • CVE-2011-0265
    45Planlayın

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary

    KritikCVSS 10,0İstismar yokEPSS %16

    hp · openview network node manager13 Oca 2011

  • CVE-2011-0266
    61Bu hafta

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary

    KritikCVSS 10,0SilahlaştırılmışEPSS %70

    hp · openview network node manager13 Oca 2011

  • CVE-2011-0267
    61Bu hafta

    Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute a

    KritikCVSS 10,0SilahlaştırılmışEPSS %71

    hp · openview network node manager13 Oca 2011

  • CVE-2011-0268
    45Planlayın

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary

    KritikCVSS 10,0İstismar yokEPSS %15

    hp · openview network node manager13 Oca 2011

  • CVE-2011-0269
    45Planlayın

    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary

    KritikCVSS 10,0İstismar yokEPSS %16

    hp · openview network node manager13 Oca 2011

  • CVE-2011-0270
    45Planlayın

    Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execut

    KritikCVSS 10,0İstismar yokEPSS %16

    hp · openview network node manager13 Oca 2011

  • CVE-2009-5018
    30İzleyin

    Stack-based buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to execute arbitrary code via

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    catb · gif2png14 Oca 2011

  • CVE-2010-4335
    47Planlayın

    The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to mo

    YüksekCVSS 7,5SilahlaştırılmışEPSS %55

    cakephp · cakephp14 Oca 2011

  • CVE-2010-4566
    45Planlayın

    The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NT

    KritikCVSS 9,3SilahlaştırılmışEPSS %27

    citrix · access gateway14 Oca 2011

  • CVE-2011-0272
    44Planlayın

    Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code via network traffic to TCP port 5001 or 50

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · loadrunner18 Oca 2011

  • CVE-2011-0489
    34İzleyin

    The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to mod

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    objectivity · objectivity\/db18 Oca 2011

  • CVE-2010-2632
    42Planlayın

    Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability.

    YüksekCVSS 7,8Kavram kanıtıEPSS %35

    sun · sunos19 Oca 2011

  • CVE-2010-3591
    41Planlayın

    Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    oracle · fusion middleware19 Oca 2011

  • CVE-2010-3595
    35İzleyin

    Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers

    YüksekCVSS 7,8Kavram kanıtıEPSS %11

    oracle · fusion middleware19 Oca 2011

  • CVE-2010-3599
    42Planlayın

    Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers

    KritikCVSS 9,4Kavram kanıtıEPSS %16

    oracle · fusion middleware19 Oca 2011

  • CVE-2010-3600
    53Planlayın

    Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Gri

    YüksekCVSS 7,5SilahlaştırılmışEPSS %76

    oracle · database server19 Oca 2011

  • CVE-2010-4417
    53Planlayın

    Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %76

    oracle · beehive19 Oca 2011

  • CVE-2010-4435
    44Planlayın

    Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, rel

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    sun · sunos19 Oca 2011

  • CVE-2010-4267
    33İzleyin

    Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9

    YüksekCVSS 7,5İstismar yokEPSS %10

    hp · linux imaging and printing project20 Oca 2011

  • CVE-2010-4701
    44Planlayın

    Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 i

    YüksekCVSS 7,6Kavram kanıtıEPSS %47

    microsoft · windows 2003 server20 Oca 2011

  • CVE-2011-0499
    46Planlayın

    Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows u

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    verytools · videospirit lite20 Oca 2011

  • CVE-2011-0500
    46Planlayın

    Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assiste

    KritikCVSS 9,3SilahlaştırılmışEPSS %30

    verytools · videospirit lite20 Oca 2011

  • CVE-2011-0501
    42Planlayın

    Stack-based buffer overflow in Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted re

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    musanim · music animation machine midi player20 Oca 2011

  • CVE-2011-0514
    40Planlayın

    The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash) via a packet with a

    OrtaCVSS 5,0SilahlaştırılmışEPSS %48

    hp · data protector manager20 Oca 2011

  • CVE-2011-0517
    49Planlayın

    Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to

    KritikCVSS 9,3SilahlaştırılmışEPSS %40

    sielcosistemi · winlog pro20 Oca 2011

  • CVE-2011-0518
    40Planlayın

    Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allows remote attackers

    OrtaCVSS 5,1SilahlaştırılmışEPSS %15

    lotuscms · fraise20 Oca 2011

  • CVE-2010-2743
    40Planlayın

    The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keybo

    YüksekCVSS 7,2SilahlaştırılmışEPSS %14

    microsoft · windows 2003 server20 Oca 2011

  • CVE-2011-0020
    36İzleyin

    Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlie

    YüksekCVSS 7,6Kavram kanıtıEPSS %18

    pango · pango24 Oca 2011

  • CVE-2011-0273
    41Planlayın

    Buffer overflow in crs.exe in HP OpenView Storage Data Protector Cell Manager 6.11 allows remote attackers to execute arbitrary code via uns

    KritikCVSS 9,3İstismar yokEPSS %13

    hp · openview storage data protector cell manager24 Oca 2011

  • CVE-2010-4709
    35İzleyin

    Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of ser

    YüksekCVSS 7,6Kavram kanıtıEPSS %16

    automatedsolutions · modbus\/tcp master opc server28 Oca 2011

  • CVE-2010-4326
    43Planlayın

    Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execu

    KritikCVSS 10,0İstismar yokEPSS %10

    novell · groupwise28 Oca 2011

  • CVE-2010-2777
    39İzleyin

    Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF

    KritikCVSS 9,0Kavram kanıtıEPSS %10

    novell · groupwise28 Oca 2011

  • CVE-2010-3450
    40Planlayın

    Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary fi

    KritikCVSS 9,3İstismar yokEPSS %10

    apache · openoffice28 Oca 2011

  • CVE-2010-3451
    40Planlayın

    Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service

    KritikCVSS 9,3İstismar yokEPSS %10

    apache · openoffice28 Oca 2011

  • CVE-2010-3452
    40Planlayın

    Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service

    KritikCVSS 9,3İstismar yokEPSS %10

    apache · openoffice28 Oca 2011

  • CVE-2010-3454
    40Planlayın

    Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow re

    KritikCVSS 9,3İstismar yokEPSS %10

    apache · openoffice28 Oca 2011

  • CVE-2010-4253
    40Planlayın

    Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (a

    KritikCVSS 9,3İstismar yokEPSS %10

    apache · openoffice28 Oca 2011

  • CVE-2010-4643
    40Planlayın

    Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (a

    KritikCVSS 9,3İstismar yokEPSS %10

    apache · openoffice28 Oca 2011

  • CVE-2010-4711
    44Planlayın

    Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote at

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    novell · groupwise31 Oca 2011

  • CVE-2010-4715
    28İzleyin

    Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before

    OrtaCVSS 5,0Kavram kanıtıEPSS %28

    novell · groupwise31 Oca 2011

  • CVE-2011-0096
    38İzleyin

    The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold

    OrtaCVSS 6,1Kavram kanıtıEPSS %46

    microsoft · windows 2003 server31 Oca 2011

  • CVE-2010-0111
    47Planlayın

    HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as

    KritikCVSS 9,3SilahlaştırılmışEPSS %34

    symantec · antivirus31 Oca 2011

  • CVE-2011-0413
    41Planlayın

    The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote

    YüksekCVSS 7,8İstismar yokEPSS %32

    isc · dhcp31 Oca 2011