İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2012: sömürülen ve yeni ciddi CVE kayıtları

35 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2012-2288
    47Planlayın

    Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote a

    KritikCVSS 9,3SilahlaştırılmışEPSS %33

    emc · networker4 Eyl 2012

  • CVE-2011-4451
    40Planlayın

    libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to write arbitrary PHP c

    OrtaCVSS 4,3SilahlaştırılmışEPSS %14

    wikkawiki · wikkawiki5 Eyl 2012

  • CVE-2012-4869
    51Planlayın

    The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitr

    YüksekCVSS 7,5SilahlaştırılmışEPSS %70

    sangoma · freepbx6 Eyl 2012

  • CVE-2012-4876
    61Bu hafta

    Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attack

    KritikCVSS 10,0SilahlaştırılmışEPSS %71

    trendnet · securview wireless internet camera activex control6 Eyl 2012

  • CVE-2012-1892
    22İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitr

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · visual studio team foundation server11 Eyl 2012

  • CVE-2012-2536
    22İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 al

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · system center configuration manager11 Eyl 2012

  • CVE-2012-2982
    45Planlayın

    file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a path

    OrtaCVSS 6,5SilahlaştırılmışEPSS %62

    gentoo · webmin11 Eyl 2012

  • CVE-2012-2983
    40Planlayın

    file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allo

    OrtaCVSS 5,0SilahlaştırılmışEPSS %20

    gentoo · webmin11 Eyl 2012

  • CVE-2012-3955
    34İzleyin

    ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunis

    YüksekCVSS 7,1İstismar yokEPSS %21

    isc · dhcp14 Eyl 2012

  • CVE-2012-4244
    42Planlayın

    ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attac

    YüksekCVSS 7,8İstismar yokEPSS %36

    isc · bind14 Eyl 2012

  • CVE-2011-5164
    46Planlayın

    Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a c

    KritikCVSS 9,3SilahlaştırılmışEPSS %28

    vandyke · absoluteftp15 Eyl 2012

  • CVE-2011-5165
    48Planlayın

    Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to exe

    KritikCVSS 9,3SilahlaştırılmışEPSS %37

    cleanersoft · free mp3 cd ripper15 Eyl 2012

  • CVE-2011-5170
    47Planlayın

    Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name

    KritikCVSS 9,3SilahlaştırılmışEPSS %31

    castillobueno · ccmplayer15 Eyl 2012

  • CVE-2011-5171
    51Planlayın

    Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to execute arbitrary cod

    KritikCVSS 9,3SilahlaştırılmışEPSS %45

    cyberlink · power2go15 Eyl 2012

  • CVE-2012-4924
    48Planlayın

    Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    asus · ipswcom activex component15 Eyl 2012

  • CVE-2012-4969
    86Hemen

    Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attacker

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %80

    microsoft · internet explorer18 Eyl 2012

  • CVE-2012-1184
    35İzleyin

    Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    digium · asterisk18 Eyl 2012

  • CVE-2012-0271
    45Planlayın

    Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 201

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    novell · groupwise19 Eyl 2012

  • CVE-2012-4992
    41Planlayın

    Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode stri

    KritikCVSS 9,0Kavram kanıtıEPSS %17

    flashfxp · flashfxp19 Eyl 2012

  • CVE-2012-5002
    40Planlayın

    Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabl

    OrtaCVSS 6,8SilahlaştırılmışEPSS %31

    ricoh · dl-1019 Eyl 2012

  • CVE-2011-5181
    20İzleyin

    Cross-site scripting (XSS) vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPress allows remote attac

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    clickdesk · clickdesk live support-live chat plugin20 Eyl 2012

  • CVE-2012-1529
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer21 Eyl 2012

  • CVE-2012-2546
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer21 Eyl 2012

  • CVE-2012-2548
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer21 Eyl 2012

  • CVE-2012-2557
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer21 Eyl 2012

  • CVE-2012-3137
    34İzleyin

    The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers

    OrtaCVSS 6,4Kavram kanıtıEPSS %31

    oracle · database server21 Eyl 2012

  • CVE-2012-5054
    71Bu hafta

    Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to exec

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %21

    adobe · flash player24 Eyl 2012

  • CVE-2012-3259
    58Planlayın

    Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknow

    KritikCVSS 10,0İstismar yokEPSS %60

    hp · sitescope25 Eyl 2012

  • CVE-2012-3260
    52Planlayın

    Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknow

    KritikCVSS 10,0SilahlaştırılmışEPSS %40

    hp · sitescope25 Eyl 2012

  • CVE-2012-3261
    52Planlayın

    Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknow

    KritikCVSS 10,0SilahlaştırılmışEPSS %40

    hp · sitescope25 Eyl 2012

  • CVE-2012-0209
    52Planlayın

    Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2

    YüksekCVSS 7,5SilahlaştırılmışEPSS %71

    horde · groupware25 Eyl 2012

  • CVE-2012-5159
    52Planlayın

    phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced

    YüksekCVSS 7,5SilahlaştırılmışEPSS %74

    phpmyadmin · phpmyadmin25 Eyl 2012

  • CVE-2012-2897
    38İzleyin

    The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2

    YüksekCVSS 7,8İstismar yokEPSS %21

    microsoft · windows 726 Eyl 2012

  • CVE-2012-0419
    40Planlayın

    Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1

    OrtaCVSS 5,0SilahlaştırılmışEPSS %42

    novell · groupwise28 Eyl 2012

  • CVE-2012-4415
    34İzleyin

    Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote attackers to cause a

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    fedoraproject · fedora30 Eyl 2012