İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2011: sömürülen ve yeni ciddi CVE kayıtları

35 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2011-1944
    41Planlayın

    Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    xmlsoft · libxml22 Eyl 2011

  • CVE-2011-2763
    41Planlayın

    The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a mo

    YüksekCVSS 7,5SilahlaştırılmışEPSS %36

    lifesize · lifesize room appliance2 Eyl 2011

  • CVE-2011-3205
    35İzleyin

    Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, an

    OrtaCVSS 6,8İstismar yokEPSS %27

    squid-cache · squid6 Eyl 2011

  • CVE-2011-3200
    40Planlayın

    Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 thro

    OrtaCVSS 5,0SilahlaştırılmışEPSS %20

    rsyslog · rsyslog6 Eyl 2011

  • CVE-2011-3389
    40Planlayın

    The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Op

    OrtaCVSS 4,3SilahlaştırılmışEPSS %73

    google · chrome6 Eyl 2011

  • CVE-2009-5092
    21İzleyin

    Cross-site scripting (XSS) vulnerability in the management interface in Microsoft FAST ESP 5.1.5 and earlier allows remote attackers to inje

    OrtaCVSS 4,3İstismar yokEPSS %12

    microsoft · fast esp12 Eyl 2011

  • CVE-2011-2595
    58Planlayın

    Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id param

    KritikCVSS 10,0SilahlaştırılmışEPSS %59

    acdsee · fotoslate14 Eyl 2011

  • CVE-2011-0653
    22İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows rem

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · sharepoint foundation15 Eyl 2011

  • CVE-2011-1890
    23İzleyin

    Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows r

    OrtaCVSS 4,3İstismar yokEPSS %19

    microsoft · sharepoint foundation15 Eyl 2011

  • CVE-2011-1891
    22İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allo

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · sharepoint foundation15 Eyl 2011

  • CVE-2011-1892
    28İzleyin

    Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, O

    OrtaCVSS 4,0Kavram kanıtıEPSS %41

    microsoft · forms server15 Eyl 2011

  • CVE-2011-1893
    22İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and ShareP

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · sharepoint foundation15 Eyl 2011

  • CVE-2011-1980
    40Planlayın

    Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL i

    KritikCVSS 9,3İstismar yokEPSS %10

    microsoft · office15 Eyl 2011

  • CVE-2011-1982
    45Planlayın

    Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, wh

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · office15 Eyl 2011

  • CVE-2011-1986
    43Planlayın

    Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "E

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel15 Eyl 2011

  • CVE-2011-1987
    43Planlayın

    Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · excel15 Eyl 2011

  • CVE-2011-1988
    43Planlayın

    Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · excel15 Eyl 2011

  • CVE-2011-1989
    45Planlayın

    Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 20

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · excel15 Eyl 2011

  • CVE-2011-1990
    43Planlayın

    Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Fo

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · excel15 Eyl 2011

  • CVE-2011-1991
    41Planlayın

    Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Serv

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · windows 2003 server15 Eyl 2011

  • CVE-2011-3322
    59Planlayın

    Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to

    KritikCVSS 10,0SilahlaştırılmışEPSS %64

    scadatec · procyon scada15 Eyl 2011

  • CVE-2011-3486
    40Planlayın

    Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which

    OrtaCVSS 5,0SilahlaştırılmışEPSS %49

    beckhoff · twincat16 Eyl 2011

  • CVE-2011-3490
    51Planlayın

    Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of s

    KritikCVSS 10,0Kavram kanıtıEPSS %36

    measuresoft · scadapro16 Eyl 2011

  • CVE-2011-3491
    45Planlayın

    Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) a

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    progea · movicon powerhmi16 Eyl 2011

  • CVE-2011-3492
    61Bu hafta

    Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash)

    KritikCVSS 10,0SilahlaştırılmışEPSS %70

    azeotech · daqfactory16 Eyl 2011

  • CVE-2011-3494
    57Planlayın

    WinSig.exe in eSignal 10.6.2425 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code

    KritikCVSS 10,0SilahlaştırılmışEPSS %55

    interactivedata · esignal16 Eyl 2011

  • CVE-2011-3495
    43Planlayın

    Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    measuresoft · scadapro16 Eyl 2011

  • CVE-2011-3496
    44Planlayın

    service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    measuresoft · scadapro16 Eyl 2011

  • CVE-2011-3497
    57Planlayın

    service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possib

    KritikCVSS 10,0SilahlaştırılmışEPSS %57

    measuresoft · scadapro16 Eyl 2011

  • CVE-2011-3499
    45Planlayın

    Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possi

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    progea · movicon powerhmi16 Eyl 2011

  • CVE-2011-2738
    43Planlayın

    Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and Cisco

    KritikCVSS 10,0İstismar yokEPSS %10

    cisco · unified service monitor19 Eyl 2011

  • CVE-2011-3575
    39İzleyin

    Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users

    KritikCVSS 9,0Kavram kanıtıEPSS %10

    ibm · lotus domino19 Eyl 2011

  • CVE-2011-3348
    24İzleyin

    The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote

    OrtaCVSS 4,3İstismar yokEPSS %22

    apache · http server20 Eyl 2011

  • CVE-2011-3360
    47Planlayın

    Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Troja

    KritikCVSS 9,3SilahlaştırılmışEPSS %34

    wireshark · wireshark20 Eyl 2011

  • CVE-2011-2543
    39İzleyin

    Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users

    KritikCVSS 9,0Kavram kanıtıEPSS %11

    cisco · telepresence codec c4023 Eyl 2011