İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2011: sömürülen ve yeni ciddi CVE kayıtları

38 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2011-2900
    34İzleyin

    Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    yassl · yasslews5 Ağu 2011

  • CVE-2011-1257
    35İzleyin

    Race condition in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (me

    YüksekCVSS 7,6İstismar yokEPSS %15

    microsoft · internet explorer10 Ağu 2011

  • CVE-2011-1263
    22İzleyin

    Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · windows server 200810 Ağu 2011

  • CVE-2011-1871
    43Planlayın

    Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows rem

    YüksekCVSS 7,8İstismar yokEPSS %38

    microsoft · windows 710 Ağu 2011

  • CVE-2011-1960
    22İzleyin

    Microsoft Internet Explorer 6 through 9 does not properly implement JavaScript event handlers, which allows remote attackers to access conte

    OrtaCVSS 4,3İstismar yokEPSS %17

    microsoft · internet explorer10 Ağu 2011

  • CVE-2011-1961
    47Planlayın

    The telnet URI handler in Microsoft Internet Explorer 6 through 9 does not properly launch the handler application, which allows remote atta

    KritikCVSS 9,3İstismar yokEPSS %34

    microsoft · internet explorer10 Ağu 2011

  • CVE-2011-1962
    21İzleyin

    Microsoft Internet Explorer 6 through 9 does not properly handle unspecified character sequences, which allows remote attackers to read cont

    OrtaCVSS 4,3İstismar yokEPSS %13

    microsoft · internet explorer10 Ağu 2011

  • CVE-2011-1963
    44Planlayın

    Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer10 Ağu 2011

  • CVE-2011-1964
    44Planlayın

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer10 Ağu 2011

  • CVE-2011-1965
    35İzleyin

    Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-base

    YüksekCVSS 7,1Kavram kanıtıEPSS %24

    microsoft · windows 710 Ağu 2011

  • CVE-2011-1966
    57Planlayın

    The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing

    KritikCVSS 10,0İstismar yokEPSS %55

    microsoft · windows server 200810 Ağu 2011

  • CVE-2011-1968
    36İzleyin

    The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process p

    YüksekCVSS 7,1İstismar yokEPSS %25

    microsoft · windows 2003 server10 Ağu 2011

  • CVE-2011-1970
    27İzleyin

    The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which a

    OrtaCVSS 5,0İstismar yokEPSS %23

    microsoft · windows 2003 server10 Ağu 2011

  • CVE-2011-1972
    44Planlayın

    Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allo

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · visio10 Ağu 2011

  • CVE-2011-1975
    50Planlayın

    Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Wi

    KritikCVSS 9,3İstismar yokEPSS %42

    microsoft · windows 710 Ağu 2011

  • CVE-2011-1976
    23İzleyin

    Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows

    OrtaCVSS 4,3Kavram kanıtıEPSS %20

    microsoft · report viewer10 Ağu 2011

  • CVE-2011-1977
    23İzleyin

    The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify fun

    OrtaCVSS 4,3İstismar yokEPSS %21

    microsoft · .net framework10 Ağu 2011

  • CVE-2011-1978
    23İzleyin

    Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers

    OrtaCVSS 4,3İstismar yokEPSS %20

    microsoft · .net framework10 Ağu 2011

  • CVE-2011-1979
    44Planlayın

    Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · visio10 Ağu 2011

  • CVE-2011-2130
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe

    KritikCVSS 10,0İstismar yokEPSS %11

    adobe · flash player10 Ağu 2011

  • CVE-2011-2134
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe

    KritikCVSS 10,0İstismar yokEPSS %11

    adobe · flash player10 Ağu 2011

  • CVE-2011-2137
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe

    KritikCVSS 10,0İstismar yokEPSS %11

    adobe · flash player10 Ağu 2011

  • CVE-2011-2140
    65Bu hafta

    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 o

    KritikCVSS 10,0SilahlaştırılmışEPSS %82

    adobe · flash player10 Ağu 2011

  • CVE-2011-2414
    44Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe

    KritikCVSS 10,0İstismar yokEPSS %11

    adobe · flash player10 Ağu 2011

  • CVE-2011-2415
    44Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe

    KritikCVSS 10,0İstismar yokEPSS %11

    adobe · flash player10 Ağu 2011

  • CVE-2011-2131
    44Planlayın

    Adobe Photoshop 12.0 in Creative Suite 5 (CS5) and 12.1 in Creative Suite 5.1 (CS5.1) allows remote attackers to execute arbitrary code or c

    KritikCVSS 9,3Kavram kanıtıEPSS %22

    adobe · creative suite11 Ağu 2011

  • CVE-2011-2404
    52Planlayın

    A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitra

    YüksekCVSS 7,5SilahlaştırılmışEPSS %73

    hp · easy printer care software11 Ağu 2011

  • CVE-2011-3011
    41Planlayın

    BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and con

    OrtaCVSS 5,0SilahlaştırılmışEPSS %71

    ca · arcserve d2d15 Ağu 2011

  • CVE-2011-0257
    55Planlayın

    Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (appli

    KritikCVSS 9,3SilahlaştırılmışEPSS %60

    apple · quicktime15 Ağu 2011

  • CVE-2011-2748
    43Planlayın

    The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a

    YüksekCVSS 7,8İstismar yokEPSS %38

    isc · dhcp15 Ağu 2011

  • CVE-2011-2749
    43Planlayın

    The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a

    YüksekCVSS 7,8İstismar yokEPSS %38

    isc · dhcp15 Ağu 2011

  • CVE-2011-3142
    52Planlayın

    Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute ar

    KritikCVSS 10,0Kavram kanıtıEPSS %38

    wellintech · kingview16 Ağu 2011

  • CVE-2011-2950
    46Planlayın

    Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 th

    KritikCVSS 9,3SilahlaştırılmışEPSS %28

    realnetworks · realplayer18 Ağu 2011

  • CVE-2011-2896
    24İzleyin

    The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw funct

    OrtaCVSS 5,1İstismar yokEPSS %11

    swi-prolog · swi-prolog19 Ağu 2011

  • CVE-2011-3182
    26İzleyin

    PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-depend

    OrtaCVSS 5,0Kavram kanıtıEPSS %19

    php · php25 Ağu 2011

  • CVE-2011-3192
    61Bu hafta

    The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a deni

    YüksekCVSS 7,8SilahlaştırılmışEPSS %98

    apache · http server29 Ağu 2011

  • CVE-2011-2577
    35İzleyin

    Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software ve

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    cisco · telepresence codec c4031 Ağu 2011

  • CVE-2011-3190
    35İzleyin

    Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possib

    YüksekCVSS 7,5İstismar yokEPSS %15

    apache · tomcat31 Ağu 2011