İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2011: sömürülen ve yeni ciddi CVE kayıtları

43 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2011-1844
    35İzleyin

    Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service (memory consumption) via an a

    YüksekCVSS 7,8İstismar yokEPSS %12

    microsoft · silverlight3 May 2011

  • CVE-2011-1845
    35İzleyin

    Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a

    YüksekCVSS 7,8İstismar yokEPSS %12

    microsoft · silverlight3 May 2011

  • CVE-2009-5022
    30İzleyin

    Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    libtiff · libtiff3 May 2011

  • CVE-2011-1609
    40Planlayın

    SQL injection vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)

    YüksekCVSS 8,5Kavram kanıtıEPSS %19

    cisco · unified communications manager3 May 2011

  • CVE-2011-1610
    32İzleyin

    Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications

    OrtaCVSS 6,4İstismar yokEPSS %24

    cisco · unified communications manager3 May 2011

  • CVE-2011-1613
    34İzleyin

    Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, and 7.0.1xx before 7.

    YüksekCVSS 7,8Kavram kanıtıEPSS %10

    cisco · wireless lan controller software3 May 2011

  • CVE-2011-0340
    47Planlayın

    Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as d

    KritikCVSS 9,3SilahlaştırılmışEPSS %32

    advantech · advantech studio4 May 2011

  • CVE-2011-1900
    50Planlayın

    Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute ar

    KritikCVSS 10,0SilahlaştırılmışEPSS %32

    indusoft · web studio4 May 2011

  • CVE-2011-0065
    62Bu hafta

    Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers

    KritikCVSS 10,0SilahlaştırılmışEPSS %73

    mozilla · firefox7 May 2011

  • CVE-2011-0073
    61Bu hafta

    Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which

    KritikCVSS 10,0SilahlaştırılmışEPSS %70

    mozilla · firefox7 May 2011

  • CVE-2011-1728
    44Planlayın

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows r

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · openview storage data protector7 May 2011

  • CVE-2011-1729
    44Planlayın

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows r

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · openview storage data protector7 May 2011

  • CVE-2011-1730
    44Planlayın

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows r

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · openview storage data protector7 May 2011

  • CVE-2011-1731
    44Planlayın

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows r

    KritikCVSS 10,0İstismar yokEPSS %14

    hp · openview storage data protector7 May 2011

  • CVE-2011-1732
    47Planlayın

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows r

    KritikCVSS 10,0İstismar yokEPSS %24

    hp · openview storage data protector7 May 2011

  • CVE-2011-1733
    44Planlayın

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows r

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · openview storage data protector7 May 2011

  • CVE-2011-1734
    44Planlayın

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows r

    KritikCVSS 10,0İstismar yokEPSS %14

    hp · openview storage data protector7 May 2011

  • CVE-2011-1735
    44Planlayın

    Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows r

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · openview storage data protector7 May 2011

  • CVE-2011-1574
    40Planlayın

    Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary

    OrtaCVSS 6,8SilahlaştırılmışEPSS %42

    konstanty bialkowski · libmodplug9 May 2011

  • CVE-2011-1271
    36İzleyin

    The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handl

    YüksekCVSS 7,7Kavram kanıtıEPSS %20

    microsoft · .net framework10 May 2011

  • CVE-2011-1248
    51Planlayın

    WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which a

    KritikCVSS 9,3Kavram kanıtıEPSS %47

    microsoft · windows server 200313 May 2011

  • CVE-2011-1269
    41Planlayın

    Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Office Comp

    KritikCVSS 9,3İstismar yokEPSS %14

    microsoft · office13 May 2011

  • CVE-2011-1270
    42Planlayın

    Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint doc

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · powerpoint13 May 2011

  • CVE-2011-1720
    33İzleyin

    The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentic

    OrtaCVSS 6,8İstismar yokEPSS %21

    postfix · postfix13 May 2011

  • CVE-2011-1772
    20İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWo

    DüşükCVSS 2,6Kavram kanıtıEPSS %33

    apache · struts13 May 2011

  • CVE-2011-1848
    44Planlayın

    Stack-based buffer overflow in img.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbi

    KritikCVSS 10,0İstismar yokEPSS %12

    hp · intelligent management center13 May 2011

  • CVE-2011-1849
    43Planlayın

    tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to create or overwrite files, and subse

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · intelligent management center13 May 2011

  • CVE-2011-1850
    44Planlayın

    Stack-based buffer overflow in the logging functionality in dbman.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows r

    KritikCVSS 10,0İstismar yokEPSS %12

    hp · intelligent management center13 May 2011

  • CVE-2011-1851
    44Planlayın

    Stack-based buffer overflow in tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execu

    KritikCVSS 10,0İstismar yokEPSS %12

    hp · intelligent management center13 May 2011

  • CVE-2011-1852
    45Planlayın

    Multiple stack-based buffer overflows in tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allow remote attackers

    KritikCVSS 10,0İstismar yokEPSS %15

    hp · intelligent management center13 May 2011

  • CVE-2011-1853
    43Planlayın

    tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a (1) lar

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · intelligent management center13 May 2011

  • CVE-2011-1854
    43Planlayın

    Use-after-free vulnerability in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · intelligent management center13 May 2011

  • CVE-2011-2089
    48Planlayın

    Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsys

    KritikCVSS 9,3SilahlaştırılmışEPSS %38

    iconics · bizviz13 May 2011

  • CVE-2011-0419
    26İzleyin

    Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and

    OrtaCVSS 4,3Kavram kanıtıEPSS %30

    apache · portable runtime16 May 2011

  • CVE-2011-0614
    41Planlayın

    Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service (memory corruption and application

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    adobe · audition16 May 2011

  • CVE-2011-0959
    23İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject a

    OrtaCVSS 4,3Kavram kanıtıEPSS %21

    cisco · unified operations manager20 May 2011

  • CVE-2011-0966
    39İzleyin

    Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier

    OrtaCVSS 6,8Kavram kanıtıEPSS %41

    cisco · ciscoworks common services20 May 2011

  • CVE-2011-1575
    33İzleyin

    The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-mid

    OrtaCVSS 5,8Kavram kanıtıEPSS %33

    pureftpd · pure-ftpd23 May 2011

  • CVE-2011-1928
    20İzleyin

    The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18,

    OrtaCVSS 4,3İstismar yokEPSS %10

    apache · apr-util24 May 2011

  • CVE-2011-1213
    47Planlayın

    Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrar

    KritikCVSS 9,3SilahlaştırılmışEPSS %32

    ibm · lotus notes31 May 2011

  • CVE-2011-1485
    40Planlayın

    Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a

    OrtaCVSS 6,9SilahlaştırılmışEPSS %5

    redhat · policykit31 May 2011

  • CVE-2011-1910
    27İzleyin

    Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R

    OrtaCVSS 5,0İstismar yokEPSS %24

    isc · bind31 May 2011

  • CVE-2011-1938
    37İzleyin

    Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    php · php31 May 2011