İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2012: sömürülen ve yeni ciddi CVE kayıtları

47 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2012-5409
    45Planlayın

    AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an Ethe

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    siemens · sipass integrated1 Kas 2012

  • CVE-2012-5687
    52Planlayın

    Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %68

    tp-link · tl-wr841n1 Kas 2012

  • CVE-2012-3748
    25İzleyin

    Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a deni

    OrtaCVSS 5,1Kavram kanıtıEPSS %16

    apple · safari3 Kas 2012

  • CVE-2012-5274
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x b

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player7 Kas 2012

  • CVE-2012-5275
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x b

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player7 Kas 2012

  • CVE-2012-5276
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x b

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player7 Kas 2012

  • CVE-2012-5277
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x b

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player7 Kas 2012

  • CVE-2012-5280
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x b

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player7 Kas 2012

  • CVE-2012-3752
    48Planlayın

    Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (app

    KritikCVSS 9,3SilahlaştırılmışEPSS %36

    apple · quicktime9 Kas 2012

  • CVE-2012-3753
    48Planlayın

    Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    apple · quicktime9 Kas 2012

  • CVE-2012-3755
    40Planlayın

    Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    apple · quicktime9 Kas 2012

  • CVE-2012-4513
    29İzleyin

    khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read mem

    OrtaCVSS 6,4Kavram kanıtıEPSS %12

    kde · kde11 Kas 2012

  • CVE-2012-4554
    40Planlayın

    The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE declaration in an XRD

    OrtaCVSS 5,0SilahlaştırılmışEPSS %15

    drupal · drupal11 Kas 2012

  • CVE-2012-4564
    31İzleyin

    ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash

    OrtaCVSS 6,8İstismar yokEPSS %13

    libtiff · libtiff11 Kas 2012

  • CVE-2012-1527
    43Planlayın

    Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2,

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 713 Kas 2012

  • CVE-2012-1528
    43Planlayın

    Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2,

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 713 Kas 2012

  • CVE-2012-1538
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · internet explorer13 Kas 2012

  • CVE-2012-1539
    40Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka

    YüksekCVSS 8,1İstismar yokEPSS %25

    microsoft · internet explorer13 Kas 2012

  • CVE-2012-1885
    46Planlayın

    Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibili

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · excel13 Kas 2012

  • CVE-2012-1886
    44Planlayın

    Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow remote attackers to

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · excel13 Kas 2012

  • CVE-2012-1887
    45Planlayın

    Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote at

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · excel13 Kas 2012

  • CVE-2012-1895
    44Planlayın

    The reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4 does not properly enforce object permissio

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · .net framework13 Kas 2012

  • CVE-2012-1896
    27İzleyin

    Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote a

    OrtaCVSS 5,0İstismar yokEPSS %23

    microsoft · .net framework13 Kas 2012

  • CVE-2012-2532
    33İzleyin

    Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session

    OrtaCVSS 5,0İstismar yokEPSS %41

    microsoft · ftp service13 Kas 2012

  • CVE-2012-2543
    45Planlayın

    Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pa

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · excel13 Kas 2012

  • CVE-2012-4775
    42Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka

    YüksekCVSS 8,8İstismar yokEPSS %22

    microsoft · internet explorer13 Kas 2012

  • CVE-2012-4776
    44Planlayın

    The Web Proxy Auto-Discovery (WPAD) functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not validate configuratio

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · .net framework13 Kas 2012

  • CVE-2012-4777
    44Planlayın

    The code-optimization feature in the reflection implementation in Microsoft .NET Framework 4 and 4.5 does not properly enforce object permis

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · .net framework13 Kas 2012

  • CVE-2012-2619
    35İzleyin

    The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    broadcom · bcm432514 Kas 2012

  • CVE-2012-3569
    51Planlayın

    Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.

    KritikCVSS 9,3SilahlaştırılmışEPSS %47

    vmware · ovf tool14 Kas 2012

  • CVE-2012-5896
    61Bu hafta

    The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Ad

    KritikCVSS 10,0SilahlaştırılmışEPSS %68

    quest · intrust17 Kas 2012

  • CVE-2012-5887
    24İzleyin

    The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not

    OrtaCVSS 5,0İstismar yokEPSS %12

    apache · tomcat17 Kas 2012

  • CVE-2012-4956
    51Planlayın

    Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large numbe

    KritikCVSS 10,0SilahlaştırılmışEPSS %37

    novell · file reporter18 Kas 2012

  • CVE-2012-4957
    51Planlayın

    Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /F

    YüksekCVSS 7,8SilahlaştırılmışEPSS %67

    novell · file reporter18 Kas 2012

  • CVE-2012-4958
    53Planlayın

    Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /F

    YüksekCVSS 7,8SilahlaştırılmışEPSS %73

    novell · file reporter18 Kas 2012

  • CVE-2012-4959
    61Bu hafta

    Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 13

    KritikCVSS 10,0SilahlaştırılmışEPSS %71

    novell · file reporter18 Kas 2012

  • CVE-2012-4433
    34İzleyin

    Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a deni

    YüksekCVSS 7,5İstismar yokEPSS %13

    gegl · gegl18 Kas 2012

  • CVE-2012-5519
    40Planlayın

    CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cup

    YüksekCVSS 7,2SilahlaştırılmışEPSS %2

    debian · debian linux19 Kas 2012

  • CVE-2012-4202
    40Planlayın

    Heap-based buffer overflow in the image::RasterImage::DrawFrameTo function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11,

    KritikCVSS 9,3İstismar yokEPSS %11

    mozilla · firefox21 Kas 2012

  • CVE-2012-4409
    32İzleyin

    Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to

    OrtaCVSS 6,8Kavram kanıtıEPSS %15

    mcrypt · mcrypt21 Kas 2012

  • CVE-2012-5862
    44Planlayın

    Sinapsi eSolar Hard-Coded Password

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    sinapsitech · sinapsi firmware23 Kas 2012

  • CVE-2012-5863
    47Planlayın

    Sinapsi eSolar OS Command Injection

    KritikCVSS 10,0Kavram kanıtıEPSS %24

    sinapsitech · sinapsi firmware23 Kas 2012

  • CVE-2012-5533
    24İzleyin

    The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    lighttpd · lighttpd24 Kas 2012

  • CVE-2012-0698
    23İzleyin

    tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_offset value in a TCP

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    trustedcomputinggroup · trousers26 Kas 2012

  • CVE-2010-5286
    44Planlayın

    Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrary files and possibly

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    joomla · joomla\!26 Kas 2012

  • CVE-2012-4557
    25İzleyin

    The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long r

    OrtaCVSS 5,0İstismar yokEPSS %17

    apache · http server30 Kas 2012

  • CVE-2012-4562
    34İzleyin

    Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly

    YüksekCVSS 7,5İstismar yokEPSS %12

    libssh · libssh30 Kas 2012