İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2011: sömürülen ve yeni ciddi CVE kayıtları

20 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2011-1865
    67Bu hafta

    Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to

    KritikCVSS 10,0SilahlaştırılmışEPSS %88

    hp · openview storage data protector1 Tem 2011

  • CVE-2011-1866
    46Planlayın

    Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execu

    KritikCVSS 10,0Kavram kanıtıEPSS %20

    hp · openview storage data protector1 Tem 2011

  • CVE-2011-2628
    44Planlayın

    Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    opera · opera browser1 Tem 2011

  • CVE-2011-2464
    26İzleyin

    Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers

    OrtaCVSS 5,0İstismar yokEPSS %19

    isc · bind8 Tem 2011

  • CVE-2011-1867
    48Planlayın

    Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager (UAM) 5.0 before SP1 E0101P03 and Endpoint Admission Defense (

    KritikCVSS 10,0İstismar yokEPSS %25

    hp · endpoint admission defense11 Tem 2011

  • CVE-2011-2220
    45Planlayın

    Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other produ

    KritikCVSS 10,0İstismar yokEPSS %16

    novell · file reporter engine14 Tem 2011

  • CVE-2011-2505
    29İzleyin

    libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 as

    OrtaCVSS 6,4Kavram kanıtıEPSS %12

    phpmyadmin · phpmyadmin14 Tem 2011

  • CVE-2011-2750
    40Planlayın

    NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPE

    OrtaCVSS 5,0SilahlaştırılmışEPSS %16

    novell · file reporter17 Tem 2011

  • CVE-2011-2755
    29İzleyin

    Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read

    OrtaCVSS 5,0Kavram kanıtıEPSS %30

    manageengine · servicedesk plus17 Tem 2011

  • CVE-2011-2757
    40Planlayın

    Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read

    OrtaCVSS 5,0SilahlaştırılmışEPSS %39

    manageengine · servicedesk plus17 Tem 2011

  • CVE-2011-2780
    24İzleyin

    Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    chyrp · chyrp19 Tem 2011

  • CVE-2011-1511
    29İzleyin

    Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to e

    OrtaCVSS 6,4Kavram kanıtıEPSS %14

    oracle · sun products suite20 Tem 2011

  • CVE-2011-2264
    26İzleyin

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-depen

    OrtaCVSS 4,4İstismar yokEPSS %31

    oracle · fusion middleware20 Tem 2011

  • CVE-2011-0222
    43Planlayın

    WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt

    KritikCVSS 9,3Kavram kanıtıEPSS %21

    apple · safari21 Tem 2011

  • CVE-2011-1774
    48Planlayın

    WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and con

    YüksekCVSS 8,8SilahlaştırılmışEPSS %43

    apple · safari21 Tem 2011

  • CVE-2011-2882
    54Planlayın

    Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1

    KritikCVSS 9,3SilahlaştırılmışEPSS %56

    citrix · access gateway21 Tem 2011

  • CVE-2011-2667
    45Planlayın

    Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly

    KritikCVSS 10,0İstismar yokEPSS %16

    ca · gateway security28 Tem 2011

  • CVE-2011-2960
    45Planlayın

    Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    sunwayland · forcecontrol29 Tem 2011

  • CVE-2011-2522
    30İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remo

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    samba · samba29 Tem 2011

  • CVE-2011-2697
    30İzleyin

    foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *Foomatic

    OrtaCVSS 6,8İstismar yokEPSS %10

    hp · linux imaging and printing project29 Tem 2011