İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2012: sömürülen ve yeni ciddi CVE kayıtları

37 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2012-3811
    59Planlayın

    Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before

    KritikCVSS 10,0SilahlaştırılmışEPSS %62

    avaya · ip office customer call reporter3 Tem 2012

  • CVE-2012-1831
    45Planlayın

    Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 55

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    wellintech · kingview4 Tem 2012

  • CVE-2012-2515
    45Planlayın

    Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HT

    KritikCVSS 9,3SilahlaştırılmışEPSS %27

    emc · captiva quickscan pro4 Tem 2012

  • CVE-2012-2516
    49Planlayın

    An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Hist

    KritikCVSS 9,3SilahlaştırılmışEPSS %39

    ge · intelligent platforms proficy batch execution4 Tem 2012

  • CVE-2012-2386
    43Planlayın

    Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote

    YüksekCVSS 7,5Kavram kanıtıEPSS %42

    php · php7 Tem 2012

  • CVE-2012-1493
    50Planlayın

    F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manage

    YüksekCVSS 7,8SilahlaştırılmışEPSS %63

    f5 · big-ip application security manager9 Tem 2012

  • CVE-2012-2138
    24İzleyin

    The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attem

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    apache · org.apache.sling.servlets.post9 Tem 2012

  • CVE-2012-0175
    43Planlayın

    The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Wind

    YüksekCVSS 8,8İstismar yokEPSS %26

    microsoft · windows 2003 server10 Tem 2012

  • CVE-2012-1522
    43Planlayın

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer10 Tem 2012

  • CVE-2012-1524
    43Planlayın

    Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · internet explorer10 Tem 2012

  • CVE-2012-1854
    67Bu hafta

    Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basi

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %20

    microsoft · office10 Tem 2012

  • CVE-2012-1859
    24İzleyin

    Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gol

    OrtaCVSS 4,3İstismar yokEPSS %23

    microsoft · office web apps10 Tem 2012

  • CVE-2012-1860
    26İzleyin

    Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not prope

    OrtaCVSS 5,5İstismar yokEPSS %12

    microsoft · office web apps10 Tem 2012

  • CVE-2012-1861
    22İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Offi

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · office web apps10 Tem 2012

  • CVE-2012-1862
    30İzleyin

    Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary we

    OrtaCVSS 6,8İstismar yokEPSS %10

    microsoft · sharepoint server10 Tem 2012

  • CVE-2012-1863
    24İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and Sha

    OrtaCVSS 4,3İstismar yokEPSS %23

    microsoft · office sharepoint server10 Tem 2012

  • CVE-2012-1891
    48Planlayın

    Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows r

    KritikCVSS 9,8İstismar yokEPSS %29

    microsoft · data access components10 Tem 2012

  • CVE-2012-2019
    59Planlayın

    Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka

    KritikCVSS 10,0SilahlaştırılmışEPSS %63

    hp · operations agent11 Tem 2012

  • CVE-2012-2020
    59Planlayın

    Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka

    KritikCVSS 10,0SilahlaştırılmışEPSS %64

    hp · operations agent11 Tem 2012

  • CVE-2012-0911
    60Bu hafta

    TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object i

    KritikCVSS 9,8SilahlaştırılmışEPSS %62

    tiki · tikiwiki cms\/groupware12 Tem 2012

  • CVE-2012-2763
    55Planlayın

    Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allo

    YüksekCVSS 7,5SilahlaştırılmışEPSS %81

    gimp · gimp12 Tem 2012

  • CVE-2012-3399
    50Planlayın

    Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %65

    artis.imag · basilic12 Tem 2012

  • CVE-2012-1661
    44Planlayın

    ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assi

    KritikCVSS 9,3Kavram kanıtıEPSS %23

    esri · arcmap12 Tem 2012

  • CVE-2012-3236
    20İzleyin

    fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a m

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    gimp · gimp12 Tem 2012

  • CVE-2012-4031
    40Planlayın

    Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary

    OrtaCVSS 5,0SilahlaştırılmışEPSS %52

    wangkongbao · cns-100017 Tem 2012

  • CVE-2012-4032
    26İzleyin

    Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users to arbitrary web site

    OrtaCVSS 5,8Kavram kanıtıEPSS %10

    websitepanel · websitepanel17 Tem 2012

  • CVE-2012-0284
    48Planlayın

    Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC2

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    cisco · linksys playerpt activex control19 Tem 2012

  • CVE-2012-2688
    43Planlayın

    Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has u

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    php · php20 Tem 2012

  • CVE-2012-2738
    19İzleyin

    The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (long loop and CPU cons

    OrtaCVSS 4,0Kavram kanıtıEPSS %11

    nalin dahyabhai · vte22 Tem 2012

  • CVE-2012-2953
    60Bu hafta

    The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input

    KritikCVSS 10,0SilahlaştırılmışEPSS %67

    symantec · web gateway23 Tem 2012

  • CVE-2012-2957
    46Planlayın

    The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a

    YüksekCVSS 7,2Kavram kanıtıEPSS %59

    symantec · web gateway23 Tem 2012

  • CVE-2012-3571
    28İzleyin

    ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consu

    OrtaCVSS 6,1Kavram kanıtıEPSS %12

    isc · dhcp25 Tem 2012

  • CVE-2012-3817
    38İzleyin

    ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, whe

    YüksekCVSS 7,8İstismar yokEPSS %23

    isc · bind25 Tem 2012

  • CVE-2011-2657
    42Planlayın

    Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminS

    OrtaCVSS 6,8SilahlaştırılmışEPSS %48

    novell · zenworks configuration management26 Tem 2012

  • CVE-2012-2962
    46Planlayın

    SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authen

    OrtaCVSS 6,5SilahlaştırılmışEPSS %66

    sonicwall · scrutinizer30 Tem 2012

  • CVE-2012-2626
    40Planlayın

    cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authenticati

    OrtaCVSS 5,0SilahlaştırılmışEPSS %44

    sonicwall · scrutinizer31 Tem 2012

  • CVE-2012-3951
    46Planlayın

    The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (

    YüksekCVSS 7,5SilahlaştırılmışEPSS %51

    sonicwall · scrutinizer31 Tem 2012