İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2012: sömürülen ve yeni ciddi CVE kayıtları

52 kayıt · 4 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2012-1667
    38İzleyin

    ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly h

    YüksekCVSS 8,5İstismar yokEPSS %13

    isc · bind5 Haz 2012

  • CVE-2012-1185
    39İzleyin

    Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause

    YüksekCVSS 7,8İstismar yokEPSS %27

    imagemagick · imagemagick5 Haz 2012

  • CVE-2011-1761
    30İzleyin

    Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8

    OrtaCVSS 6,8Kavram kanıtıEPSS %10

    konstanty bialkowski · libmodplug7 Haz 2012

  • CVE-2012-0985
    41Planlayın

    Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wirel

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    sony · smartwi connection utillity7 Haz 2012

  • CVE-2012-0507
    98Hemen

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier,

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    oracle · jre7 Haz 2012

  • CVE-2012-2034
    62Bu hafta

    Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %7

    adobe · flash player8 Haz 2012

  • CVE-2012-0677
    42Planlayın

    Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (app

    KritikCVSS 9,3Kavram kanıtıEPSS %15

    apple · itunes12 Haz 2012

  • CVE-2012-0173
    43Planlayın

    The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Se

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 712 Haz 2012

  • CVE-2012-0217
    40Planlayın

    The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Orac

    YüksekCVSS 7,2SilahlaştırılmışEPSS %39

    xen · xen12 Haz 2012

  • CVE-2012-1523
    44Planlayın

    Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · internet explorer12 Haz 2012

  • CVE-2012-1849
    43Planlayın

    Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Tr

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · lync12 Haz 2012

  • CVE-2012-1855
    43Planlayın

    Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execut

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · .net framework12 Haz 2012

  • CVE-2012-1857
    20İzleyin

    Cross-site scripting (XSS) vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · dynamics ax12 Haz 2012

  • CVE-2012-1858
    24İzleyin

    The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Atten

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · lync12 Haz 2012

  • CVE-2012-1873
    22İzleyin

    Microsoft Internet Explorer 7 through 9 does not properly create and initialize string data, which allows remote attackers to obtain sensiti

    OrtaCVSS 4,3İstismar yokEPSS %18

    microsoft · internet explorer12 Haz 2012

  • CVE-2012-1874
    44Planlayın

    Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows user-assisted remote attackers to execute arbit

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer12 Haz 2012

  • CVE-2012-1875
    55Planlayın

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3SilahlaştırılmışEPSS %61

    microsoft · internet explorer12 Haz 2012

  • CVE-2012-1876
    56Planlayın

    Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers

    KritikCVSS 9,3SilahlaştırılmışEPSS %64

    microsoft · internet explorer12 Haz 2012

  • CVE-2012-1877
    44Planlayın

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer12 Haz 2012

  • CVE-2012-1878
    44Planlayın

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · internet explorer12 Haz 2012

  • CVE-2012-1879
    38İzleyin

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    YüksekCVSS 8,1İstismar yokEPSS %19

    microsoft · internet explorer12 Haz 2012

  • CVE-2012-1880
    44Planlayın

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer12 Haz 2012

  • CVE-2012-1881
    44Planlayın

    Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by a

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer12 Haz 2012

  • CVE-2012-1882
    21İzleyin

    Microsoft Internet Explorer 6 through 9 does not block cross-domain scrolling events, which allows remote attackers to read content from a d

    OrtaCVSS 4,3İstismar yokEPSS %13

    microsoft · internet explorer12 Haz 2012

  • CVE-2012-1889
    90Hemen

    Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitra

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %83

    microsoft · xml core services13 Haz 2012

  • CVE-2012-1502
    34İzleyin

    Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    pypam · pypam15 Haz 2012

  • CVE-2012-3574
    33İzleyin

    Unrestricted file upload vulnerability in includes/doajaxfileupload.php in the MM Forms Community plugin 2.2.5 and 2.2.6 for WordPress allow

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    wordpress · wordpress15 Haz 2012

  • CVE-2012-3575
    45Planlayın

    Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitr

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    rbx gallery · rbx gallery15 Haz 2012

  • CVE-2012-3576
    45Planlayın

    Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to ex

    KritikCVSS 10,0Kavram kanıtıEPSS %18

    wordpress · wordpress15 Haz 2012

  • CVE-2011-1473
    40Planlayın

    OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, w

    OrtaCVSS 5,0Kavram kanıtıEPSS %66

    openssl · openssl16 Haz 2012

  • CVE-2012-1723
    97Hemen

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier,

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %93

    oracle · jdk16 Haz 2012

  • CVE-2012-0037
    30İzleyin

    Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and ot

    OrtaCVSS 6,5İstismar yokEPSS %13

    libreoffice · libreoffice16 Haz 2012

  • CVE-2012-3577
    34İzleyin

    Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attac

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    nmedia · member conversation16 Haz 2012

  • CVE-2009-0693
    34İzleyin

    Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP he

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    dell · wyse device manager19 Haz 2012

  • CVE-2009-0695
    51Planlayın

    hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain manageme

    YüksekCVSS 7,5SilahlaştırılmışEPSS %68

    dell · wyse device manager19 Haz 2012

  • CVE-2012-2334
    31İzleyin

    Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before

    OrtaCVSS 6,8İstismar yokEPSS %13

    libreoffice · libreoffice19 Haz 2012

  • CVE-2012-3588
    23İzleyin

    Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    wordpress · plugin newsletter plugin19 Haz 2012

  • CVE-2012-2174
    49Planlayın

    The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL.

    KritikCVSS 9,3SilahlaştırılmışEPSS %38

    ibm · lotus notes20 Haz 2012

  • CVE-2012-2175
    46Planlayın

    Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows

    KritikCVSS 9,3SilahlaştırılmışEPSS %29

    ibm · lotus inotes20 Haz 2012

  • CVE-2012-1149
    34İzleyin

    Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows r

    YüksekCVSS 7,5İstismar yokEPSS %14

    libreoffice · libreoffice21 Haz 2012

  • CVE-2012-2149
    34İzleyin

    The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allow

    YüksekCVSS 7,5İstismar yokEPSS %13

    libwpd · libwpd21 Haz 2012

  • CVE-2012-3792
    23İzleyin

    Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to ca

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    pro-face · pro-server ex25 Haz 2012

  • CVE-2012-3793
    24İzleyin

    Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows re

    OrtaCVSS 5,0Kavram kanıtıEPSS %11

    pro-face · pro-server ex25 Haz 2012

  • CVE-2012-3794
    26İzleyin

    Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to ca

    OrtaCVSS 5,0Kavram kanıtıEPSS %21

    pro-face · pro-server ex25 Haz 2012

  • CVE-2012-3795
    23İzleyin

    Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to ca

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    pro-face · pro-server ex25 Haz 2012

  • CVE-2012-3796
    23İzleyin

    Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to ob

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    pro-face · pro-server ex25 Haz 2012

  • CVE-2012-3797
    44Planlayın

    Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packe

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    pro-face · pro-server ex25 Haz 2012

  • CVE-2012-2122
    49Planlayın

    sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x befo

    OrtaCVSS 5,1SilahlaştırılmışEPSS %96

    oracle · mysql26 Haz 2012

  • CVE-2012-3814
    33İzleyin

    Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    wordpress · wordpress27 Haz 2012

  • CVE-2012-3815
    50Planlayın

    Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attacker

    KritikCVSS 9,3SilahlaştırılmışEPSS %44

    sielcosistemi · winlog lite27 Haz 2012

  • CVE-2012-2098
    24İzleyin

    Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons C

    OrtaCVSS 5,0İstismar yokEPSS %12

    apache · commons compress29 Haz 2012

  • CVE-2012-2385
    19İzleyin

    The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption)

    OrtaCVSS 4,0Kavram kanıtıEPSS %10

    keith winstein · mosh29 Haz 2012