İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2012: sömürülen ve yeni ciddi CVE kayıtları

36 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2011-3659
    48Planlayın

    Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMon

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    mozilla · firefox1 Şub 2012

  • CVE-2010-4562
    21İzleyin

    Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the n

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · windows 20002 Şub 2012

  • CVE-2011-4875
    41Planlayın

    Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    siemens · wincc flexible3 Şub 2012

  • CVE-2011-4878
    34İzleyin

    Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinC

    YüksekCVSS 7,8Kavram kanıtıEPSS %11

    siemens · wincc flexible3 Şub 2012

  • CVE-2011-4879
    38İzleyin

    miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Upd

    YüksekCVSS 8,5Kavram kanıtıEPSS %12

    siemens · wincc flexible3 Şub 2012

  • CVE-2011-4041
    45Planlayın

    webvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or obtain a security-code value via a long st

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    broadwin · webaccess6 Şub 2012

  • CVE-2012-0830
    39İzleyin

    The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request contai

    YüksekCVSS 7,5Kavram kanıtıEPSS %29

    php · php6 Şub 2012

  • CVE-2012-1006
    34İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script

    OrtaCVSS 4,3Kavram kanıtıEPSS %56

    apache · struts7 Şub 2012

  • CVE-2012-1007
    27İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML vi

    OrtaCVSS 4,3Kavram kanıtıEPSS %32

    apache · struts7 Şub 2012

  • CVE-2012-1008
    23İzleyin

    OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message.

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    officesip · officesip server8 Şub 2012

  • CVE-2012-1033
    24İzleyin

    The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response

    OrtaCVSS 5,0İstismar yokEPSS %13

    isc · bind8 Şub 2012

  • CVE-2012-0840
    33İzleyin

    tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger

    OrtaCVSS 5,0Kavram kanıtıEPSS %42

    apache · portable runtime10 Şub 2012

  • CVE-2012-0010
    21İzleyin

    Microsoft Internet Explorer 6 through 9 does not properly perform copy-and-paste operations, which allows user-assisted remote attackers to

    OrtaCVSS 4,3İstismar yokEPSS %13

    microsoft · internet explorer14 Şub 2012

  • CVE-2012-0011
    45Planlayın

    Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · internet explorer14 Şub 2012

  • CVE-2012-0012
    22İzleyin

    Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to r

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · internet explorer14 Şub 2012

  • CVE-2012-0014
    39İzleyin

    Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated w

    YüksekCVSS 7,8İstismar yokEPSS %27

    microsoft · .net framework14 Şub 2012

  • CVE-2012-0015
    44Planlayın

    Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · .net framework14 Şub 2012

  • CVE-2012-0017
    22İzleyin

    Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to in

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · sharepoint foundation14 Şub 2012

  • CVE-2012-0019
    43Planlayın

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execu

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · visio viewer14 Şub 2012

  • CVE-2012-0020
    43Planlayın

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execu

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · visio viewer14 Şub 2012

  • CVE-2012-0136
    43Planlayın

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execu

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · visio viewer14 Şub 2012

  • CVE-2012-0137
    43Planlayın

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execu

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · visio viewer14 Şub 2012

  • CVE-2012-0138
    43Planlayın

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execu

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · visio viewer14 Şub 2012

  • CVE-2012-0144
    22İzleyin

    Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · sharepoint server14 Şub 2012

  • CVE-2012-0145
    22İzleyin

    Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundatio

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · sharepoint server14 Şub 2012

  • CVE-2012-0150
    44Planlayın

    Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows rem

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · windows 714 Şub 2012

  • CVE-2012-0155
    57Planlayın

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %65

    microsoft · internet explorer14 Şub 2012

  • CVE-2012-0500
    57Planlayın

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier,

    KritikCVSS 10,0SilahlaştırılmışEPSS %58

    oracle · jre15 Şub 2012

  • CVE-2012-0754
    89Hemen

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %91

    adobe · flash player16 Şub 2012

  • CVE-2012-0756
    41Planlayın

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x

    KritikCVSS 9,3İstismar yokEPSS %14

    adobe · flash player16 Şub 2012

  • CVE-2012-0767
    60Bu hafta

    Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, a

    OrtaCVSS 6,1KEVSilahlaştırılmışEPSS %6

    adobe · flash player16 Şub 2012

  • CVE-2011-3026
    49Planlayın

    Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly ha

    OrtaCVSS 6,8Kavram kanıtıEPSS %72

    google · chrome16 Şub 2012

  • CVE-2012-1195
    51Planlayın

    Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Leno

    YüksekCVSS 7,5SilahlaştırılmışEPSS %68

    landesk · lenovo thinkmanagement console17 Şub 2012

  • CVE-2012-1196
    40Planlayın

    Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allo

    OrtaCVSS 5,0SilahlaştırılmışEPSS %51

    landesk · lenovo thinkmanagement console17 Şub 2012

  • CVE-2012-1226
    37İzleyin

    Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    dolibarr · dolibarr erp\/crm21 Şub 2012

  • CVE-2012-1205
    37İzleyin

    PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers t

    YüksekCVSS 7,5Kavram kanıtıEPSS %24

    wordpress · wordpress24 Şub 2012