İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2011: sömürülen ve yeni ciddi CVE kayıtları

50 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-4719
    35İzleyin

    Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to read arbitrary files

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    joomla · joomla\!1 Şub 2011

  • CVE-2010-3719
    38İzleyin

    Eval injection vulnerability in IMAdminSchedTask.asp in the administrative interface for Symantec IM Manager 8.4.16 and earlier allows remot

    YüksekCVSS 8,5İstismar yokEPSS %12

    symantec · im manager1 Şub 2011

  • CVE-2010-4652
    30İzleyin

    Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled, allows r

    OrtaCVSS 6,8İstismar yokEPSS %11

    proftpd · proftpd1 Şub 2011

  • CVE-2011-0276
    65Bu hafta

    HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager

    KritikCVSS 10,0SilahlaştırılmışEPSS %82

    hp · openview performance insight1 Şub 2011

  • CVE-2010-3269
    40Planlayın

    Multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP2

    KritikCVSS 9,3İstismar yokEPSS %11

    cisco · webex recording format player2 Şub 2011

  • CVE-2011-0354
    44Planlayın

    The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    cisco · tandberg endpoint3 Şub 2011

  • CVE-2011-0049
    49Planlayın

    Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers

    OrtaCVSS 5,0SilahlaştırılmışEPSS %95

    mj2 · majordomo 23 Şub 2011

  • CVE-2011-0522
    42Planlayın

    The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.

    OrtaCVSS 6,8Kavram kanıtıEPSS %51

    videolan · vlc media player7 Şub 2011

  • CVE-2011-0531
    50Planlayın

    demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of se

    KritikCVSS 9,3SilahlaştırılmışEPSS %41

    videolan · vlc media player7 Şub 2011

  • CVE-2011-0885
    43Planlayın

    A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    smc networks · smcd3g-ccr8 Şub 2011

  • CVE-2011-0915
    43Planlayın

    Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long nam

    KritikCVSS 10,0İstismar yokEPSS %11

    ibm · lotus domino8 Şub 2011

  • CVE-2011-0917
    44Planlayın

    Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operati

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    ibm · lotus domino8 Şub 2011

  • CVE-2011-0920
    40Planlayın

    The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attack

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    ibm · lotus domino8 Şub 2011

  • CVE-2011-0031
    22İzleyin

    The (1) JScript 5.8 and (2) VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded sc

    OrtaCVSS 4,3İstismar yokEPSS %17

    microsoft · windows 78 Şub 2011

  • CVE-2011-0040
    27İzleyin

    The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name

    OrtaCVSS 5,0İstismar yokEPSS %22

    microsoft · windows 2003 server8 Şub 2011

  • CVE-2011-0921
    43Planlayın

    crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname,

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · data protector8 Şub 2011

  • CVE-2011-0922
    59Planlayın

    The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share

    KritikCVSS 10,0SilahlaştırılmışEPSS %64

    hp · data protector8 Şub 2011

  • CVE-2011-0923
    64Bu hafta

    The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code

    KritikCVSS 10,0SilahlaştırılmışEPSS %81

    hp · data protector8 Şub 2011

  • CVE-2011-0033
    43Planlayın

    The OpenType Compact Font Format (CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windo

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 2003 server10 Şub 2011

  • CVE-2011-0035
    43Planlayın

    Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer10 Şub 2011

  • CVE-2011-0036
    43Planlayın

    Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer10 Şub 2011

  • CVE-2011-0038
    40Planlayın

    Untrusted search path vulnerability in Microsoft Internet Explorer 8 might allow local users to gain privileges via a Trojan horse IEShims.d

    KritikCVSS 9,3İstismar yokEPSS %11

    microsoft · internet explorer10 Şub 2011

  • CVE-2011-0092
    44Planlayın

    The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to ex

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · visio10 Şub 2011

  • CVE-2011-0093
    43Planlayın

    ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, whic

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · visio10 Şub 2011

  • CVE-2011-0567
    49Planlayın

    AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote att

    KritikCVSS 9,3İstismar yokEPSS %40

    adobe · acrobat reader10 Şub 2011

  • CVE-2011-0591
    51Planlayın

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execut

    KritikCVSS 9,3İstismar yokEPSS %47

    adobe · acrobat reader10 Şub 2011

  • CVE-2011-0592
    51Planlayın

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execut

    KritikCVSS 9,3İstismar yokEPSS %47

    adobe · acrobat reader10 Şub 2011

  • CVE-2011-0593
    52Planlayın

    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execut

    KritikCVSS 9,3İstismar yokEPSS %49

    adobe · acrobat reader10 Şub 2011

  • CVE-2011-0600
    49Planlayın

    The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remot

    KritikCVSS 9,3İstismar yokEPSS %40

    adobe · acrobat reader10 Şub 2011

  • CVE-2011-0647
    59Planlayın

    The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows re

    KritikCVSS 10,0SilahlaştırılmışEPSS %63

    emc · replication manager10 Şub 2011

  • CVE-2011-0976
    45Planlayın

    Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatib

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · powerpoint10 Şub 2011

  • CVE-2011-0977
    47Planlayın

    Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File F

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · excel10 Şub 2011

  • CVE-2011-0978
    50Planlayın

    Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibi

    KritikCVSS 9,3Kavram kanıtıEPSS %42

    microsoft · excel10 Şub 2011

  • CVE-2011-0979
    45Planlayın

    Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; and Exc

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · excel10 Şub 2011

  • CVE-2011-0980
    45Planlayın

    Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · excel10 Şub 2011

  • CVE-2011-0654
    60Bu hafta

    Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser

    KritikCVSS 10,0SilahlaştırılmışEPSS %68

    microsoft · windows 2003 server15 Şub 2011

  • CVE-2010-4740
    49Planlayın

    Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute

    KritikCVSS 9,3SilahlaştırılmışEPSS %41

    scadaengine · bacnet opc client15 Şub 2011

  • CVE-2010-3274
    23İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Pl

    OrtaCVSS 4,3Kavram kanıtıEPSS %21

    zohocorp · manageengine adselfservice plus17 Şub 2011

  • CVE-2010-4452
    65Bu hafta

    Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23

    KritikCVSS 10,0SilahlaştırılmışEPSS %83

    sun · jre17 Şub 2011

  • CVE-2010-4476
    27İzleyin

    The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update

    OrtaCVSS 5,0Kavram kanıtıEPSS %23

    sun · jre17 Şub 2011

  • CVE-2010-4741
    45Planlayın

    Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execut

    KritikCVSS 9,3SilahlaştırılmışEPSS %27

    moxa · device manager18 Şub 2011

  • CVE-2010-4742
    57Planlayın

    Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to e

    KritikCVSS 10,0SilahlaştırılmışEPSS %56

    moxa · activex sdk18 Şub 2011

  • CVE-2010-4328
    35İzleyin

    Multiple stack-based buffer overflows in opt/novell/iprint/bin/ipsmd in Novell iPrint for Linux Open Enterprise Server 2 SP2 and SP3 allow r

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    novell · iprint open enterprise server18 Şub 2011

  • CVE-2011-0013
    20İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and

    OrtaCVSS 4,3İstismar yokEPSS %10

    apache · tomcat18 Şub 2011

  • CVE-2011-0364
    46Planlayın

    The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    cisco · security agent18 Şub 2011

  • CVE-2011-0420
    24İzleyin

    The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    php · php18 Şub 2011

  • CVE-2011-1002
    29İzleyin

    avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty

    OrtaCVSS 5,0İstismar yokEPSS %29

    avahi · avahi22 Şub 2011

  • CVE-2011-0414
    32İzleyin

    ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock

    YüksekCVSS 7,1İstismar yokEPSS %13

    isc · bind23 Şub 2011

  • CVE-2010-4227
    45Planlayın

    The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or ex

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    novell · netware25 Şub 2011

  • CVE-2011-1018
    45Planlayın

    logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstr

    KritikCVSS 10,0Kavram kanıtıEPSS %18

    logwatch · logwatch25 Şub 2011