İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2011: sömürülen ve yeni ciddi CVE kayıtları

48 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2011-0951
    40Planlayın

    The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote

    OrtaCVSS 5,0SilahlaştırılmışEPSS %14

    cisco · secure access control system4 Nis 2011

  • CVE-2011-1563
    62Bu hafta

    Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attack

    KritikCVSS 10,0SilahlaştırılmışEPSS %74

    realflex · realwin5 Nis 2011

  • CVE-2011-1564
    46Planlayın

    Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to exec

    KritikCVSS 10,0Kavram kanıtıEPSS %18

    realflex · realwin5 Nis 2011

  • CVE-2011-1565
    59Planlayın

    Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS

    KritikCVSS 10,0SilahlaştırılmışEPSS %64

    7t · igss5 Nis 2011

  • CVE-2011-1566
    60Bu hafta

    Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows rem

    KritikCVSS 10,0SilahlaştırılmışEPSS %66

    7t · igss5 Nis 2011

  • CVE-2011-1567
    61Bu hafta

    Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (

    KritikCVSS 10,0SilahlaştırılmışEPSS %69

    7t · igss5 Nis 2011

  • CVE-2011-1568
    46Planlayın

    Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    7t · igss5 Nis 2011

  • CVE-2011-1525
    41Planlayın

    Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 thr

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    realnetworks · realplayer6 Nis 2011

  • CVE-2011-1652
    24İzleyin

    The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and DHCPv6 service over a currently used IPv4 and DHCPv4 ser

    OrtaCVSS 5,0İstismar yokEPSS %12

    microsoft · windows 76 Nis 2011

  • CVE-2011-0997
    55Planlayın

    dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers t

    YüksekCVSS 7,5İstismar yokEPSS %84

    isc · dhcp8 Nis 2011

  • CVE-2011-1071
    24İzleyin

    The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code

    OrtaCVSS 5,1Kavram kanıtıEPSS %14

    gnu · eglibc8 Nis 2011

  • CVE-2011-1669
    27İzleyin

    Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arb

    OrtaCVSS 5,0Kavram kanıtıEPSS %22

    wordpress · wordpress9 Nis 2011

  • CVE-2011-0994
    45Planlayın

    Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via

    KritikCVSS 10,0İstismar yokEPSS %17

    novell · file reporter9 Nis 2011

  • CVE-2011-1487
    23İzleyin

    The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    perl · perl11 Nis 2011

  • CVE-2011-0611
    95Hemen

    Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %99

    adobe · flash player13 Nis 2011

  • CVE-2010-3958
    44Planlayın

    The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows rem

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · .net framework13 Nis 2011

  • CVE-2010-3974
    36İzleyin

    fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows S

    YüksekCVSS 7,6İstismar yokEPSS %18

    microsoft · windows 2003 server13 Nis 2011

  • CVE-2011-0028
    44Planlayın

    WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents, which allows remote attack

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · windows server 200313 Nis 2011

  • CVE-2011-0034
    45Planlayın

    Stack-based buffer overflow in the OpenType Compact Font Format (aka OTF or CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · windows 2003 server13 Nis 2011

  • CVE-2011-0041
    45Planlayın

    Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Ser

    KritikCVSS 9,3Kavram kanıtıEPSS %28

    microsoft · windows 2003 server13 Nis 2011

  • CVE-2011-0094
    44Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code by accessing an object

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · internet explorer13 Nis 2011

  • CVE-2011-0097
    46Planlayın

    Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter fo

    KritikCVSS 9,3İstismar yokEPSS %31

    microsoft · excel13 Nis 2011

  • CVE-2011-0098
    46Planlayın

    Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Conve

    KritikCVSS 9,3İstismar yokEPSS %30

    microsoft · excel13 Nis 2011

  • CVE-2011-0101
    46Planlayın

    Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Re

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · excel13 Nis 2011

  • CVE-2011-0103
    45Planlayın

    Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to ex

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · excel13 Nis 2011

  • CVE-2011-0104
    53Planlayın

    Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to ex

    KritikCVSS 9,3Kavram kanıtıEPSS %53

    microsoft · excel13 Nis 2011

  • CVE-2011-0105
    58Planlayın

    Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uni

    KritikCVSS 9,3SilahlaştırılmışEPSS %70

    microsoft · excel13 Nis 2011

  • CVE-2011-0107
    40Planlayın

    Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges v

    KritikCVSS 9,3İstismar yokEPSS %11

    microsoft · office13 Nis 2011

  • CVE-2011-0655
    44Planlayın

    Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pa

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · office13 Nis 2011

  • CVE-2011-0656
    46Planlayın

    Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Of

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · office13 Nis 2011

  • CVE-2011-0657
    60Bu hafta

    DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Go

    KritikCVSS 9,8SilahlaştırılmışEPSS %62

    microsoft · windows 2003 server13 Nis 2011

  • CVE-2011-0660
    42Planlayın

    The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, a

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · windows 713 Nis 2011

  • CVE-2011-0661
    53Planlayın

    The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP

    KritikCVSS 10,0İstismar yokEPSS %44

    microsoft · windows 2003 server13 Nis 2011

  • CVE-2011-0663
    43Planlayın

    Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote atta

    YüksekCVSS 8,8İstismar yokEPSS %26

    microsoft · jscript13 Nis 2011

  • CVE-2011-1243
    46Planlayın

    The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · windows xp13 Nis 2011

  • CVE-2011-1244
    28İzleyin

    Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to ob

    OrtaCVSS 5,8İstismar yokEPSS %15

    microsoft · internet explorer13 Nis 2011

  • CVE-2011-1245
    22İzleyin

    Microsoft Internet Explorer 6 and 7 does not properly restrict script access to content from a (1) different domain or (2) different zone, w

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · internet explorer13 Nis 2011

  • CVE-2011-0285
    46Planlayın

    The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9

    KritikCVSS 10,0Kavram kanıtıEPSS %20

    mit · kerberos 514 Nis 2011

  • CVE-2011-1713
    20İzleyin

    Microsoft msxml.dll, as used in Internet Explorer 8 on Windows 7, allows remote attackers to obtain potentially sensitive information about

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · internet explorer15 Nis 2011

  • CVE-2011-1653
    67Bu hafta

    Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote atta

    KritikCVSS 10,0SilahlaştırılmışEPSS %88

    broadcom · total defense18 Nis 2011

  • CVE-2011-1654
    33İzleyin

    Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defens

    YüksekCVSS 7,5İstismar yokEPSS %11

    broadcom · total defense18 Nis 2011

  • CVE-2011-1655
    34İzleyin

    The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2

    YüksekCVSS 7,5İstismar yokEPSS %11

    broadcom · total defense18 Nis 2011

  • CVE-2010-4229
    48Planlayın

    Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks

    KritikCVSS 10,0İstismar yokEPSS %25

    novell · zenworks configuration management18 Nis 2011

  • CVE-2011-0807
    58Planlayın

    Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allow

    KritikCVSS 10,0SilahlaştırılmışEPSS %60

    oracle · glassfish server19 Nis 2011

  • CVE-2011-1206
    45Planlayın

    Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    ibm · tivoli directory server21 Nis 2011

  • CVE-2011-1719
    41Planlayın

    Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attac

    KritikCVSS 9,3İstismar yokEPSS %12

    broadcom · output management web viewer26 Nis 2011

  • CVE-2011-1541
    44Planlayın

    Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote attackers to bypass intended access restrictions,

    KritikCVSS 10,0İstismar yokEPSS %12

    hp · system management homepage29 Nis 2011

  • CVE-2011-1591
    50Planlayın

    Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers t

    KritikCVSS 9,3SilahlaştırılmışEPSS %41

    wireshark · wireshark29 Nis 2011