İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2011: sömürülen ve yeni ciddi CVE kayıtları

38 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2011-3271
    43Planlayın

    Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code or

    KritikCVSS 10,0İstismar yokEPSS %10

    cisco · ios3 Eki 2011

  • CVE-2011-3976
    40Planlayın

    Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response t

    OrtaCVSS 6,8SilahlaştırılmışEPSS %30

    ammsoft · scriptftp4 Eki 2011

  • CVE-2011-3981
    33İzleyin

    PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbi

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    wordpress · wordpress4 Eki 2011

  • CVE-2011-2443
    41Planlayın

    Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service (memory corruption

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    adobe · photoshop elements4 Eki 2011

  • CVE-2011-3368
    47Planlayın

    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly intera

    OrtaCVSS 5,0SilahlaştırılmışEPSS %90

    apache · http server5 Eki 2011

  • CVE-2011-3305
    40Planlayın

    Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via

    YüksekCVSS 7,8SilahlaştırılmışEPSS %21

    cisco · nac manager6 Eki 2011

  • CVE-2010-4931
    45Planlayın

    Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    php-fusion · php-fusion9 Eki 2011

  • CVE-2011-2189
    35İzleyin

    net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network name

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    linux · linux kernel10 Eki 2011

  • CVE-2011-3587
    60Bu hafta

    Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attacke

    KritikCVSS 9,3SilahlaştırılmışEPSS %78

    plone · plone10 Eki 2011

  • CVE-2011-1247
    40Planlayın

    Untrusted search path vulnerability in the Microsoft Active Accessibility component in Microsoft Windows XP SP2 and SP3, Windows Server 2003

    KritikCVSS 9,3İstismar yokEPSS %11

    microsoft · windows 2003 server11 Eki 2011

  • CVE-2011-1253
    41Planlayın

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.0.60831, does not properly restrict inheritance

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · .net framework11 Eki 2011

  • CVE-2011-1895
    20İzleyin

    CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attack

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · forefront unified access gateway11 Eki 2011

  • CVE-2011-1969
    42Planlayın

    Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a s

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · forefront unified access gateway11 Eki 2011

  • CVE-2011-1993
    42Planlayın

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · internet explorer11 Eki 2011

  • CVE-2011-1995
    46Planlayın

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · internet explorer11 Eki 2011

  • CVE-2011-1996
    55Planlayın

    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3SilahlaştırılmışEPSS %58

    microsoft · internet explorer11 Eki 2011

  • CVE-2011-1997
    41Planlayın

    Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %14

    microsoft · internet explorer11 Eki 2011

  • CVE-2011-1998
    43Planlayın

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · internet explorer11 Eki 2011

  • CVE-2011-1999
    45Planlayın

    Microsoft Internet Explorer 8 does not properly allocate and access memory, which allows remote attackers to execute arbitrary code via vect

    KritikCVSS 9,3Kavram kanıtıEPSS %26

    microsoft · internet explorer11 Eki 2011

  • CVE-2011-2000
    43Planlayın

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer11 Eki 2011

  • CVE-2011-2001
    50Planlayın

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %43

    microsoft · internet explorer11 Eki 2011

  • CVE-2011-2003
    45Planlayın

    Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Wi

    KritikCVSS 9,3Kavram kanıtıEPSS %26

    microsoft · windows 2003 server11 Eki 2011

  • CVE-2011-2005
    71Bu hafta

    afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %31

    microsoft · windows server 200311 Eki 2011

  • CVE-2011-2007
    27İzleyin

    Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server

    OrtaCVSS 5,0Kavram kanıtıEPSS %23

    microsoft · host integration server11 Eki 2011

  • CVE-2011-2008
    26İzleyin

    Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server

    OrtaCVSS 5,0İstismar yokEPSS %21

    microsoft · host integration server11 Eki 2011

  • CVE-2011-2012
    25İzleyin

    Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which al

    OrtaCVSS 5,0İstismar yokEPSS %16

    microsoft · forefront unified access gateway11 Eki 2011

  • CVE-2011-3230
    42Planlayın

    Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary

    OrtaCVSS 6,8SilahlaştırılmışEPSS %49

    apple · safari14 Eki 2011

  • CVE-2011-3156
    44Planlayın

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · data protector for personal computers19 Eki 2011

  • CVE-2011-3157
    44Planlayın

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · data protector for personal computers19 Eki 2011

  • CVE-2011-3158
    44Planlayın

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · data protector for personal computers19 Eki 2011

  • CVE-2011-3159
    44Planlayın

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · data protector for personal computers19 Eki 2011

  • CVE-2011-3160
    44Planlayın

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · data protector for personal computers19 Eki 2011

  • CVE-2011-3161
    44Planlayın

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · data protector for personal computers19 Eki 2011

  • CVE-2011-3162
    44Planlayın

    Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %11

    hp · data protector for personal computers19 Eki 2011

  • CVE-2011-3544
    98Hemen

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remot

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %96

    oracle · jdk19 Eki 2011

  • CVE-2011-3556
    53Planlayın

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31

    YüksekCVSS 7,5SilahlaştırılmışEPSS %76

    oracle · jrockit19 Eki 2011

  • CVE-2011-3310
    41Planlayın

    The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Secu

    KritikCVSS 9,0İstismar yokEPSS %15

    cisco · ciscoworks common services19 Eki 2011

  • CVE-2011-3315
    39İzleyin

    Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.

    YüksekCVSS 7,8Kavram kanıtıEPSS %25

    cisco · unified ip interactive voice response27 Eki 2011