İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2011: sömürülen ve yeni ciddi CVE kayıtları

46 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2011-2039
    51Planlayın

    The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows

    YüksekCVSS 7,6SilahlaştırılmışEPSS %69

    cisco · anyconnect secure mobility client2 Haz 2011

  • CVE-2011-2040
    40Planlayın

    The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629

    KritikCVSS 9,3İstismar yokEPSS %10

    cisco · anyconnect secure mobility client2 Haz 2011

  • CVE-2011-1220
    55Planlayın

    Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote aut

    KritikCVSS 9,0SilahlaştırılmışEPSS %62

    ibm · tivoli management framework2 Haz 2011

  • CVE-2011-2331
    44Planlayın

    Integer overflow in img.exe in HP Intelligent Management Center (IMC) allows remote attackers to execute arbitrary code via a crafted length

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · intelligent management center2 Haz 2011

  • CVE-2011-2382
    23İzleyin

    Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which

    OrtaCVSS 4,3İstismar yokEPSS %19

    microsoft · ie3 Haz 2011

  • CVE-2011-2383
    23İzleyin

    Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote att

    OrtaCVSS 4,3İstismar yokEPSS %20

    microsoft · ie3 Haz 2011

  • CVE-2011-2217
    50Planlayın

    Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Cl

    KritikCVSS 9,3SilahlaştırılmışEPSS %41

    tomsawyer · get extension factory6 Haz 2011

  • CVE-2011-2386
    51Planlayın

    VisiWaveReport.exe in AZO Technologies, Inc.

    KritikCVSS 9,3SilahlaştırılmışEPSS %45

    visiwave · site survey8 Haz 2011

  • CVE-2010-4804
    40Planlayın

    The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) B

    OrtaCVSS 4,3SilahlaştırılmışEPSS %26

    google · android9 Haz 2011

  • CVE-2011-1823
    73Bu hafta

    The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %41

    google · android9 Haz 2011

  • CVE-2011-2474
    40Planlayın

    Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary fi

    OrtaCVSS 5,0SilahlaştırılmışEPSS %63

    sybase · easerver9 Haz 2011

  • CVE-2011-2179
    25İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote a

    OrtaCVSS 4,3Kavram kanıtıEPSS %26

    icinga · icinga14 Haz 2011

  • CVE-2011-0658
    43Planlayın

    Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · windows 2003 server16 Haz 2011

  • CVE-2011-0664
    42Planlayın

    Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · .net framework16 Haz 2011

  • CVE-2011-1250
    43Planlayın

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · internet explorer16 Haz 2011

  • CVE-2011-1251
    42Planlayın

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · internet explorer16 Haz 2011

  • CVE-2011-1252
    28İzleyin

    Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office Sha

    OrtaCVSS 6,1İstismar yokEPSS %13

    microsoft · internet explorer16 Haz 2011

  • CVE-2011-1254
    42Planlayın

    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · internet explorer16 Haz 2011

  • CVE-2011-1255
    50Planlayın

    The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly hand

    KritikCVSS 9,3Kavram kanıtıEPSS %42

    microsoft · internet explorer16 Haz 2011

  • CVE-2011-1256
    43Planlayın

    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer16 Haz 2011

  • CVE-2011-1258
    21İzleyin

    Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensiti

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · internet explorer16 Haz 2011

  • CVE-2011-1260
    55Planlayın

    Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by a

    KritikCVSS 9,3SilahlaştırılmışEPSS %60

    microsoft · internet explorer16 Haz 2011

  • CVE-2011-1261
    42Planlayın

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer16 Haz 2011

  • CVE-2011-1262
    42Planlayın

    Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer16 Haz 2011

  • CVE-2011-1266
    42Planlayın

    The Vector Markup Language (VML) implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in me

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · internet explorer16 Haz 2011

  • CVE-2011-1267
    38İzleyin

    The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remo

    YüksekCVSS 7,8İstismar yokEPSS %24

    microsoft · windows 716 Haz 2011

  • CVE-2011-1268
    43Planlayın

    The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, a

    KritikCVSS 10,0İstismar yokEPSS %10

    microsoft · windows 2003 server16 Haz 2011

  • CVE-2011-1272
    42Planlayın

    Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; an

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · excel16 Haz 2011

  • CVE-2011-1273
    42Planlayın

    Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel V

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · excel16 Haz 2011

  • CVE-2011-1274
    41Planlayın

    Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; an

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · excel16 Haz 2011

  • CVE-2011-1275
    41Planlayın

    Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record in

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · excel16 Haz 2011

  • CVE-2011-1276
    45Planlayın

    Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; E

    KritikCVSS 9,3Kavram kanıtıEPSS %28

    microsoft · excel16 Haz 2011

  • CVE-2011-1277
    42Planlayın

    Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · excel16 Haz 2011

  • CVE-2011-1278
    42Planlayın

    Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which all

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · excel16 Haz 2011

  • CVE-2011-1279
    42Planlayın

    Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate rec

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · excel16 Haz 2011

  • CVE-2011-1280
    22İzleyin

    The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · office infopath16 Haz 2011

  • CVE-2011-1868
    44Planlayın

    The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields i

    KritikCVSS 10,0İstismar yokEPSS %14

    microsoft · windows 2003 server16 Haz 2011

  • CVE-2011-1869
    34İzleyin

    The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Wi

    YüksekCVSS 7,8İstismar yokEPSS %10

    microsoft · windows 2003 server16 Haz 2011

  • CVE-2011-1873
    43Planlayın

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 G

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · windows 716 Haz 2011

  • CVE-2011-1889
    84Hemen

    The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execu

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %49

    microsoft · forefront threat management gateway16 Haz 2011

  • CVE-2011-1894
    20İzleyin

    The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · windows 2003 server16 Haz 2011

  • CVE-2011-2095
    42Planlayın

    Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers

    KritikCVSS 9,3İstismar yokEPSS %15

    adobe · acrobat reader16 Haz 2011

  • CVE-2011-2110
    66Bu hafta

    Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attack

    KritikCVSS 10,0SilahlaştırılmışEPSS %86

    adobe · flash player16 Haz 2011

  • CVE-2011-2202
    31İzleyin

    The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST req

    OrtaCVSS 6,4Kavram kanıtıEPSS %19

    php · php16 Haz 2011

  • CVE-2011-2600
    32İzleyin

    The GPU support functionality in Windows XP does not properly restrict rendering time, which allows remote attackers to cause a denial of se

    YüksekCVSS 7,1İstismar yokEPSS %11

    microsoft · windows xp30 Haz 2011

  • CVE-2011-2371
    63Bu hafta

    Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaM

    KritikCVSS 10,0SilahlaştırılmışEPSS %75

    mozilla · seamonkey30 Haz 2011