İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2012: sömürülen ve yeni ciddi CVE kayıtları

41 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2012-0549
    48Planlayın

    Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows remote attackers to aff

    YüksekCVSS 7,5SilahlaştırılmışEPSS %59

    oracle · supply chain products suite3 May 2012

  • CVE-2012-0551
    26İzleyin

    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and th

    OrtaCVSS 5,8Kavram kanıtıEPSS %11

    oracle · glassfish server3 May 2012

  • CVE-2012-1710
    71Bu hafta

    Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers t

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %7

    oracle · fusion middleware3 May 2012

  • CVE-2012-0202
    56Planlayın

    Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote at

    KritikCVSS 10,0SilahlaştırılmışEPSS %54

    ibm · cognos tm14 May 2012

  • CVE-2012-0779
    63Bu hafta

    Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x

    KritikCVSS 9,3SilahlaştırılmışEPSS %87

    adobe · flash player4 May 2012

  • CVE-2012-1675
    53Planlayın

    The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Orac

    YüksekCVSS 7,5SilahlaştırılmışEPSS %77

    oracle · database server8 May 2012

  • CVE-2012-0018
    45Planlayın

    Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbi

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · visio viewer8 May 2012

  • CVE-2012-0141
    44Planlayın

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel8 May 2012

  • CVE-2012-0142
    43Planlayın

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel8 May 2012

  • CVE-2012-0143
    44Planlayın

    Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · excel8 May 2012

  • CVE-2012-0159
    45Planlayın

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · office8 May 2012

  • CVE-2012-0160
    44Planlayın

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remo

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · .net framework8 May 2012

  • CVE-2012-0161
    44Planlayın

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · .net framework8 May 2012

  • CVE-2012-0162
    44Planlayın

    Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via (1) a crafted XAM

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · .net framework8 May 2012

  • CVE-2012-0164
    25İzleyin

    Microsoft .NET Framework 4 does not properly compare index values, which allows remote attackers to cause a denial of service (application h

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · .net framework8 May 2012

  • CVE-2012-0165
    45Planlayın

    GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly valid

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · office8 May 2012

  • CVE-2012-0167
    46Planlayın

    Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute a

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · office8 May 2012

  • CVE-2012-0176
    44Planlayın

    Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vecto

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · silverlight8 May 2012

  • CVE-2012-0183
    44Planlayın

    Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · office8 May 2012

  • CVE-2012-0184
    44Planlayın

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · excel8 May 2012

  • CVE-2012-0185
    44Planlayın

    Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · excel8 May 2012

  • CVE-2012-1847
    45Planlayın

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · excel8 May 2012

  • CVE-2012-0778
    43Planlayın

    Buffer overflow in Adobe Flash Professional before CS6 allows attackers to execute arbitrary code via unspecified vectors.

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash cs39 May 2012

  • CVE-2012-0780
    45Planlayın

    Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vec

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    adobe · illustrator9 May 2012

  • CVE-2012-2027
    41Planlayın

    Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arb

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    adobe · photoshop9 May 2012

  • CVE-2012-2031
    45Planlayın

    Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns

    KritikCVSS 10,0İstismar yokEPSS %18

    adobe · shockwave player9 May 2012

  • CVE-2012-1823
    99Hemen

    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle que

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    php · php11 May 2012

  • CVE-2012-2311
    51Planlayın

    sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle que

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    php · php11 May 2012

  • CVE-2012-2329
    40Planlayın

    Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a d

    OrtaCVSS 5,0SilahlaştırılmışEPSS %61

    php · php11 May 2012

  • CVE-2012-2335
    40Planlayın

    php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.

    YüksekCVSS 7,5İstismar yokEPSS %32

    php · php11 May 2012

  • CVE-2012-2336
    35İzleyin

    sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle que

    OrtaCVSS 5,0Kavram kanıtıEPSS %50

    php · php11 May 2012

  • CVE-2012-2333
    35İzleyin

    Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC en

    OrtaCVSS 6,8İstismar yokEPSS %27

    openssl · openssl14 May 2012

  • CVE-2012-2611
    50Planlayın

    The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeav

    KritikCVSS 9,3SilahlaştırılmışEPSS %44

    sap · netweaver15 May 2012

  • CVE-2012-0663
    46Planlayın

    Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a

    KritikCVSS 9,3SilahlaştırılmışEPSS %28

    apple · quicktime16 May 2012

  • CVE-2012-0207
    36İzleyin

    The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divi

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    linux · linux kernel17 May 2012

  • CVE-2012-2376
    46Planlayın

    Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    php · php21 May 2012

  • CVE-2012-2915
    46Planlayın

    Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long stri

    KritikCVSS 9,3SilahlaştırılmışEPSS %29

    lattice semiconductor · pac-designer21 May 2012

  • CVE-2012-0297
    62Bu hafta

    The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    symantec · web gateway21 May 2012

  • CVE-2012-0299
    59Planlayın

    The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code

    KritikCVSS 10,0SilahlaştırılmışEPSS %63

    symantec · web gateway21 May 2012

  • CVE-2012-2926
    60Bu hafta

    Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 befor

    KritikCVSS 9,1SilahlaştırılmışEPSS %66

    atlassian · bamboo22 May 2012

  • CVE-2012-2176
    46Planlayın

    Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    ibm · lotus quickr25 May 2012