İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2011: sömürülen ve yeni ciddi CVE kayıtları

20 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2010-4977
    35İzleyin

    SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers to execute arbitrary

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    joomla · joomla\!1 Kas 2011

  • CVE-2011-3165
    44Planlayın

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via u

    KritikCVSS 10,0İstismar yokEPSS %12

    hp · openview network node manager2 Kas 2011

  • CVE-2011-3166
    44Planlayın

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via u

    KritikCVSS 10,0İstismar yokEPSS %12

    hp · openview network node manager2 Kas 2011

  • CVE-2011-3167
    59Planlayın

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via u

    KritikCVSS 10,0SilahlaştırılmışEPSS %64

    hp · openview network node manager2 Kas 2011

  • CVE-2011-4075
    46Planlayın

    The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the or

    YüksekCVSS 7,5SilahlaştırılmışEPSS %51

    phpldapadmin project · phpldapadmin2 Kas 2011

  • CVE-2011-3402
    88Hemen

    Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3,

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %78

    microsoft · windows 74 Kas 2011

  • CVE-2011-2004
    35İzleyin

    Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows

    YüksekCVSS 7,1İstismar yokEPSS %24

    microsoft · windows 78 Kas 2011

  • CVE-2011-2013
    49Planlayın

    Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold an

    KritikCVSS 9,8Kavram kanıtıEPSS %32

    microsoft · windows 78 Kas 2011

  • CVE-2011-2014
    39İzleyin

    The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight

    KritikCVSS 9,0İstismar yokEPSS %10

    microsoft · windows 78 Kas 2011

  • CVE-2011-4157
    44Planlayın

    Stack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000 Virtual SAN Appliance allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · centralized management console software16 Kas 2011

  • CVE-2011-4096
    31İzleyin

    The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service

    OrtaCVSS 5,0İstismar yokEPSS %37

    squid-cache · squid17 Kas 2011

  • CVE-2011-4107
    30İzleyin

    The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before

    OrtaCVSS 6,5Kavram kanıtıEPSS %12

    phpmyadmin · phpmyadmin17 Kas 2011

  • CVE-2011-4404
    40Planlayın

    The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1

    OrtaCVSS 5,0SilahlaştırılmışEPSS %58

    vmware · vcenter update manager18 Kas 2011

  • CVE-2011-4040
    60Bu hafta

    Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet.

    KritikCVSS 10,0SilahlaştırılmışEPSS %65

    njstar · njstar communicator21 Kas 2011

  • CVE-2011-4496
    40Planlayın

    Buffer overflow in Aviosoft DTV Player 1.0.1.2 allows remote attackers to execute arbitrary code via a crafted .plf (aka playlist) file.

    KritikCVSS 9,3SilahlaştırılmışEPSS %11

    aviosoft · dtv player21 Kas 2011

  • CVE-2011-4313
    25İzleyin

    query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, a

    OrtaCVSS 5,0İstismar yokEPSS %16

    isc · bind29 Kas 2011

  • CVE-2011-3639
    32İzleyin

    The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, do

    OrtaCVSS 4,3Kavram kanıtıEPSS %50

    apache · http server30 Kas 2011

  • CVE-2011-4191
    33İzleyin

    Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitra

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    novell · netware30 Kas 2011

  • CVE-2011-4317
    35İzleyin

    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 11792

    OrtaCVSS 4,3Kavram kanıtıEPSS %59

    apache · http server30 Kas 2011

  • CVE-2011-4542
    40Planlayın

    Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] parameter in a mailbox Draf

    YüksekCVSS 7,5SilahlaştırılmışEPSS %24

    hastymail · hastymail230 Kas 2011