İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2011: sömürülen ve yeni ciddi CVE kayıtları

25 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2011-0762
    40Planlayın

    The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU c

    OrtaCVSS 4,0SilahlaştırılmışEPSS %73

    vsftpd project · vsftpd2 Mar 2011

  • CVE-2011-1140
    40Planlayın

    Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.

    OrtaCVSS 4,3SilahlaştırılmışEPSS %13

    wireshark · wireshark2 Mar 2011

  • CVE-2009-3028
    40Planlayın

    The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification

    OrtaCVSS 6,8SilahlaştırılmışEPSS %42

    symantec · altiris deployment solution7 Mar 2011

  • CVE-2011-0032
    40Planlayın

    Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and

    KritikCVSS 9,3İstismar yokEPSS %10

    microsoft · windows 79 Mar 2011

  • CVE-2011-0042
    41Planlayın

    SBE.dll in the Stream Buffer Engine in Windows Media Player and Windows Media Center in Microsoft Windows XP SP2 and SP3, Windows XP Media C

    YüksekCVSS 7,8İstismar yokEPSS %33

    microsoft · windows xp media center9 Mar 2011

  • CVE-2011-1345
    49Planlayın

    Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %40

    microsoft · internet explorer10 Mar 2011

  • CVE-2011-1346
    45Planlayın

    Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vector

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · internet explorer10 Mar 2011

  • CVE-2011-1347
    43Planlayın

    Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrar

    YüksekCVSS 8,8İstismar yokEPSS %27

    microsoft · internet explorer10 Mar 2011

  • CVE-2010-3609
    25İzleyin

    The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol

    OrtaCVSS 5,0Kavram kanıtıEPSS %17

    openslp · openslp11 Mar 2011

  • CVE-2011-1137
    28İzleyin

    Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memor

    OrtaCVSS 5,0Kavram kanıtıEPSS %28

    proftpd · proftpd11 Mar 2011

  • CVE-2011-0063
    46Planlayın

    The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal a

    OrtaCVSS 5,0SilahlaştırılmışEPSS %85

    mj2 · majordomo 215 Mar 2011

  • CVE-2011-0609
    80Hemen

    Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %63

    adobe · flash player15 Mar 2011

  • CVE-2011-1092
    35İzleyin

    Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possib

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    php · php15 Mar 2011

  • CVE-2011-0411
    32İzleyin

    The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properl

    OrtaCVSS 6,8İstismar yokEPSS %16

    postfix · postfix16 Mar 2011

  • CVE-2011-0889
    44Planlayın

    Unspecified vulnerability in HP Client Automation Enterprise (aka HPCA or Radia Notify) 5.11, 7.2, 7.5, 7.8, and 7.9 allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · client automation enterprise16 Mar 2011

  • CVE-2011-0421
    21İzleyin

    The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHAN

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    php · php19 Mar 2011

  • CVE-2011-1081
    24İzleyin

    modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Disting

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    openldap · openldap19 Mar 2011

  • CVE-2011-1467
    24İzleyin

    Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allow

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    php · php19 Mar 2011

  • CVE-2011-1468
    21İzleyin

    Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consump

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    php · php19 Mar 2011

  • CVE-2011-1471
    21İzleyin

    Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of se

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    php · php19 Mar 2011

  • CVE-2010-4228
    40Planlayın

    Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute ar

    KritikCVSS 9,0Kavram kanıtıEPSS %14

    novell · netware22 Mar 2011

  • CVE-2010-3275
    60Bu hafta

    libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an

    KritikCVSS 9,3SilahlaştırılmışEPSS %75

    videolan · vlc media player28 Mar 2011

  • CVE-2010-1674
    24İzleyin

    The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereferenc

    OrtaCVSS 5,0İstismar yokEPSS %13

    quagga · quagga29 Mar 2011

  • CVE-2011-0764
    31İzleyin

    t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereferenc

    OrtaCVSS 6,8İstismar yokEPSS %13

    t1lib · t1lib31 Mar 2011

  • CVE-2011-1552
    20İzleyin

    t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote

    OrtaCVSS 4,3İstismar yokEPSS %10

    t1lib · t1lib31 Mar 2011