İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2012: sömürülen ve yeni ciddi CVE kayıtları

32 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2012-5611
    33İzleyin

    Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions

    OrtaCVSS 6,5Kavram kanıtıEPSS %23

    oracle · mysql3 Ara 2012

  • CVE-2012-5612
    32İzleyin

    Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows

    OrtaCVSS 6,5Kavram kanıtıEPSS %20

    mariadb · mariadb3 Ara 2012

  • CVE-2012-5613
    40Planlayın

    MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to u

    OrtaCVSS 6,0SilahlaştırılmışEPSS %31

    mariadb · mariadb3 Ara 2012

  • CVE-2012-5614
    20İzleyin

    Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users t

    OrtaCVSS 4,0Kavram kanıtıEPSS %13

    oracle · mysql3 Ara 2012

  • CVE-2012-5615
    24İzleyin

    Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates dif

    OrtaCVSS 5,0Kavram kanıtıEPSS %14

    mariadb · mariadb3 Ara 2012

  • CVE-2012-5975
    48Planlayın

    The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 thro

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    ssh · tectia server4 Ara 2012

  • CVE-2012-6066
    49Planlayın

    freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH

    KritikCVSS 9,3SilahlaştırılmışEPSS %39

    freesshd · freesshd4 Ara 2012

  • CVE-2012-4347
    40Planlayın

    Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated

    OrtaCVSS 5,0SilahlaştırılmışEPSS %58

    symantec · messaging gateway5 Ara 2012

  • CVE-2011-2730
    34İzleyin

    VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (E

    YüksekCVSS 7,5İstismar yokEPSS %11

    springsource · spring framework5 Ara 2012

  • CVE-2012-3274
    59Planlayın

    Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101

    KritikCVSS 10,0SilahlaştırılmışEPSS %63

    hp · intelligent management center6 Ara 2012

  • CVE-2012-3275
    43Planlayın

    Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.1x and 9.20 allows remote attackers to execute arbitrary code via unknown ve

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · network node manager i6 Ara 2012

  • CVE-2012-5688
    34İzleyin

    ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (asser

    YüksekCVSS 7,8İstismar yokEPSS %10

    isc · bind6 Ara 2012

  • CVE-2012-6301
    40Planlayın

    The Browser application in Android 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted market: URI

    OrtaCVSS 5,0SilahlaştırılmışEPSS %6

    google · android10 Ara 2012

  • CVE-2012-1537
    44Planlayın

    Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · directx11 Ara 2012

  • CVE-2012-2539
    77Bu hafta

    Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 al

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %53

    microsoft · office compatibility pack11 Ara 2012

  • CVE-2012-2556
    43Planlayın

    The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, W

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 2003 server11 Ara 2012

  • CVE-2012-4774
    43Planlayın

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold an

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 711 Ara 2012

  • CVE-2012-4781
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer11 Ara 2012

  • CVE-2012-4782
    45Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web sit

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · internet explorer11 Ara 2012

  • CVE-2012-4786
    47Planlayın

    The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2

    KritikCVSS 10,0İstismar yokEPSS %24

    microsoft · windows 711 Ara 2012

  • CVE-2012-4787
    41Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web sit

    KritikCVSS 9,0İstismar yokEPSS %17

    microsoft · internet explorer11 Ara 2012

  • CVE-2012-4791
    18İzleyin

    Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store se

    DüşükCVSS 3,5İstismar yokEPSS %13

    microsoft · exchange server11 Ara 2012

  • CVE-2012-5525
    40Planlayın

    The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a craft

    OrtaCVSS 4,7SilahlaştırılmışEPSS %1

    xen · xen13 Ara 2012

  • CVE-2012-6422
    42Planlayın

    The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor,

    KritikCVSS 9,3Kavram kanıtıEPSS %15

    meizu · mx17 Ara 2012

  • CVE-2012-3546
    21İzleyin

    org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows

    OrtaCVSS 4,3İstismar yokEPSS %11

    apache · tomcat19 Ara 2012

  • CVE-2012-5691
    53Planlayın

    Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrar

    KritikCVSS 9,3SilahlaştırılmışEPSS %52

    realnetworks · realplayer19 Ara 2012

  • CVE-2012-5469
    37İzleyin

    The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console acc

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    phpmyadmin · phpmyadmin20 Ara 2012

  • CVE-2012-5643
    27İzleyin

    Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2

    OrtaCVSS 5,0İstismar yokEPSS %23

    squid-cache · squid20 Ara 2012

  • CVE-2012-5932
    59Planlayın

    Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1

    KritikCVSS 10,0SilahlaştırılmışEPSS %62

    microfocus · privileged user manager24 Ara 2012

  • CVE-2012-0432
    58Planlayın

    Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an u

    KritikCVSS 10,0SilahlaştırılmışEPSS %58

    microfocus · edirectory25 Ara 2012

  • CVE-2012-4528
    24İzleyin

    The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    trustwave · modsecurity28 Ara 2012

  • CVE-2012-4792
    89Hemen

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %78

    microsoft · internet explorer30 Ara 2012