İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2012: sömürülen ve yeni ciddi CVE kayıtları

43 kayıt · 3 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2012-3450
    13İzleyin

    pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string d

    DüşükCVSS 2,6Kavram kanıtıEPSS %11

    php · php6 Ağu 2012

  • CVE-2012-4177
    57Planlayın

    The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path comma

    KritikCVSS 10,0SilahlaştırılmışEPSS %58

    ubi · uplay pc7 Ağu 2012

  • CVE-2012-2577
    20İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attacke

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    solarwinds · orion network performance monitor12 Ağu 2012

  • CVE-2012-2371
    21İzleyin

    Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitra

    OrtaCVSS 4,3Kavram kanıtıEPSS %12

    wordpress · wordpress13 Ağu 2012

  • CVE-2012-4329
    35İzleyin

    The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart) via a crafted cont

    YüksekCVSS 7,8Kavram kanıtıEPSS %13

    samsung · d6000 firmware14 Ağu 2012

  • CVE-2012-4330
    35İzleyin

    The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long string in certain f

    YüksekCVSS 7,8Kavram kanıtıEPSS %13

    samsung · d6000 firmware14 Ağu 2012

  • CVE-2012-4333
    58Planlayın

    Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in

    KritikCVSS 10,0SilahlaştırılmışEPSS %59

    samsung · net-i viewer14 Ağu 2012

  • CVE-2012-1526
    43Planlayın

    Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by a

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer14 Ağu 2012

  • CVE-2012-1850
    28İzleyin

    The Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3, Windows Server

    OrtaCVSS 5,0İstismar yokEPSS %27

    microsoft · windows 714 Ağu 2012

  • CVE-2012-1851
    60Bu hafta

    Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Wi

    KritikCVSS 10,0İstismar yokEPSS %65

    microsoft · windows 714 Ağu 2012

  • CVE-2012-1852
    49Planlayın

    Heap-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows

    KritikCVSS 10,0İstismar yokEPSS %29

    microsoft · windows xp14 Ağu 2012

  • CVE-2012-1853
    49Planlayın

    Stack-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows

    KritikCVSS 10,0İstismar yokEPSS %29

    microsoft · windows xp14 Ağu 2012

  • CVE-2012-1856
    87Hemen

    The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 200

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %72

    microsoft · commerce server14 Ağu 2012

  • CVE-2012-1888
    44Planlayın

    Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · visio14 Ağu 2012

  • CVE-2012-2521
    43Planlayın

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer14 Ağu 2012

  • CVE-2012-2522
    44Planlayın

    Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer14 Ağu 2012

  • CVE-2012-2523
    44Planlayın

    Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execut

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · internet explorer14 Ağu 2012

  • CVE-2012-2526
    45Planlayın

    The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remot

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · windows xp14 Ağu 2012

  • CVE-2012-2524
    43Planlayın

    Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office15 Ağu 2012

  • CVE-2012-1525
    50Planlayın

    Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to e

    KritikCVSS 10,0İstismar yokEPSS %31

    adobe · acrobat15 Ağu 2012

  • CVE-2012-1535
    82Hemen

    Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote a

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %70

    adobe · flash player15 Ağu 2012

  • CVE-2012-2049
    44Planlayın

    Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to

    KritikCVSS 10,0İstismar yokEPSS %13

    adobe · acrobat15 Ağu 2012

  • CVE-2012-2050
    44Planlayın

    Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbi

    KritikCVSS 10,0İstismar yokEPSS %13

    adobe · acrobat15 Ağu 2012

  • CVE-2012-4149
    44Planlayın

    Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause

    KritikCVSS 10,0İstismar yokEPSS %13

    adobe · acrobat15 Ağu 2012

  • CVE-2012-4157
    54Planlayın

    Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause

    KritikCVSS 10,0İstismar yokEPSS %45

    adobe · acrobat15 Ağu 2012

  • CVE-2012-4353
    44Planlayın

    Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows rem

    KritikCVSS 9,3Kavram kanıtıEPSS %24

    sielcosistemi · winlog pro19 Ağu 2012

  • CVE-2012-4356
    40Planlayın

    Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allow re

    OrtaCVSS 4,3SilahlaştırılmışEPSS %27

    sielcosistemi · winlog pro19 Ağu 2012

  • CVE-2012-3456
    36İzleyin

    Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    calligra · calligra20 Ağu 2012

  • CVE-2012-4361
    44Planlayın

    lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary comma

    YüksekCVSS 7,7SilahlaştırılmışEPSS %47

    hp · san\/iq20 Ağu 2012

  • CVE-2012-4598
    46Planlayın

    An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code

    KritikCVSS 9,3SilahlaştırılmışEPSS %29

    mcafee · mcafee virtual technician22 Ağu 2012

  • CVE-2012-2687
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in

    DüşükCVSS 2,6İstismar yokEPSS %22

    apache · http server22 Ağu 2012

  • CVE-2011-5106
    20İzleyin

    Cross-site scripting (XSS) vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote a

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    wordpress · wordpress23 Ağu 2012

  • CVE-2011-5124
    56Planlayın

    Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows r

    KritikCVSS 10,0SilahlaştırılmışEPSS %54

    bluecoat · proxyone26 Ağu 2012

  • CVE-2011-5127
    44Planlayın

    Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allow

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    bluecoat · reporter26 Ağu 2012

  • CVE-2012-3485
    40Planlayın

    Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable fil

    YüksekCVSS 7,2SilahlaştırılmışEPSS %3

    google · tunnelblick26 Ağu 2012

  • CVE-2012-4681
    99Hemen

    Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    oracle · jdk27 Ağu 2012

  • CVE-2011-4926
    20İzleyin

    Cross-site scripting (XSS) vulnerability in adminimize/adminimize_page.php in the Adminimize plugin before 1.7.22 for WordPress allows remot

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    wordpress · wordpress29 Ağu 2012

  • CVE-2012-3579
    43Planlayın

    Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers t

    YüksekCVSS 7,9SilahlaştırılmışEPSS %40

    symantec · messaging gateway29 Ağu 2012

  • CVE-2011-1398
    20İzleyin

    The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences (aka carriage ret

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    php · php30 Ağu 2012

  • CVE-2011-5130
    40Planlayın

    dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary

    OrtaCVSS 6,8SilahlaştırılmışEPSS %36

    haudenschilt · family connections cms30 Ağu 2012

  • CVE-2012-0547
    4İzleyin

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earl

    CVSS 0,0Kavram kanıtıEPSS %12

    oracle · jdk30 Ağu 2012

  • CVE-2012-4170
    40Planlayın

    Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file.

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    adobe · photoshop cs631 Ağu 2012

  • CVE-2010-5193
    47Planlayın

    Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom I

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    viscomsoft · image viewer cp gold sdk31 Ağu 2012