İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2013: sömürülen ve yeni ciddi CVE kayıtları

57 kayıt · 4 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2012-1541
    43Planlayın

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allo

    KritikCVSS 10,0İstismar yokEPSS %10

    oracle · jre1 Şub 2013

  • CVE-2012-0874
    32İzleyin

    The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Pl

    OrtaCVSS 6,8Kavram kanıtıEPSS %15

    redhat · jboss enterprise application platform5 Şub 2013

  • CVE-2012-3282
    45Planlayın

    Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitr

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    hp · san\/iq6 Şub 2013

  • CVE-2012-3283
    43Planlayın

    Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitr

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · san\/iq6 Şub 2013

  • CVE-2013-0633
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x b

    KritikCVSS 9,3Kavram kanıtıEPSS %20

    adobe · flash player8 Şub 2013

  • CVE-2013-0634
    60Bu hafta

    Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262

    KritikCVSS 9,3SilahlaştırılmışEPSS %77

    adobe · flash player8 Şub 2013

  • CVE-2012-2686
    40Planlayın

    crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows re

    OrtaCVSS 5,0SilahlaştırılmışEPSS %39

    openssl · openssl8 Şub 2013

  • CVE-2013-0166
    26İzleyin

    OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, whi

    OrtaCVSS 5,0İstismar yokEPSS %19

    openssl · openssl8 Şub 2013

  • CVE-2013-0169
    21İzleyin

    The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly c

    DüşükCVSS 2,6Kavram kanıtıEPSS %35

    openssl · openssl8 Şub 2013

  • CVE-2013-0189
    27İzleyin

    cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a denial of service (res

    OrtaCVSS 5,0İstismar yokEPSS %23

    squid-cache · squid8 Şub 2013

  • CVE-2013-0639
    44Planlayın

    Integer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.6

    KritikCVSS 10,0İstismar yokEPSS %12

    adobe · flash player12 Şub 2013

  • CVE-2013-0642
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player12 Şub 2013

  • CVE-2013-0645
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player12 Şub 2013

  • CVE-2013-1365
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player12 Şub 2013

  • CVE-2013-1366
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player12 Şub 2013

  • CVE-2013-1367
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player12 Şub 2013

  • CVE-2013-1368
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player12 Şub 2013

  • CVE-2013-1369
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player12 Şub 2013

  • CVE-2013-1370
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player12 Şub 2013

  • CVE-2013-1372
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player12 Şub 2013

  • CVE-2013-1373
    43Planlayın

    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player12 Şub 2013

  • CVE-2013-0269
    34İzleyin

    The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resourc

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    rubygems · json gem12 Şub 2013

  • CVE-2013-0015
    22İzleyin

    Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0018
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0019
    47Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3Kavram kanıtıEPSS %34

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0020
    45Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0021
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0022
    41Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that

    KritikCVSS 9,0İstismar yokEPSS %16

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0023
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web sit

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0024
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0025
    54Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that

    KritikCVSS 9,3SilahlaştırılmışEPSS %55

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0026
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0027
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0028
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0029
    39İzleyin

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web

    YüksekCVSS 7,5İstismar yokEPSS %30

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0030
    45Planlayın

    The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate buffers, which allows

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · internet explorer13 Şub 2013

  • CVE-2013-0073
    49Planlayın

    The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privil

    KritikCVSS 10,0İstismar yokEPSS %29

    microsoft · .net framework13 Şub 2013

  • CVE-2013-0075
    52Planlayın

    The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Window

    YüksekCVSS 7,8İstismar yokEPSS %69

    microsoft · windows vista13 Şub 2013

  • CVE-2013-0077
    46Planlayın

    Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to exe

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · windows server 200313 Şub 2013

  • CVE-2013-1281
    35İzleyin

    The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service (NULL poi

    YüksekCVSS 7,1İstismar yokEPSS %23

    microsoft · windows server 200813 Şub 2013

  • CVE-2013-1313
    44Planlayın

    Object Linking and Embedding (OLE) Automation in Microsoft Windows XP SP3 does not properly allocate memory, which allows remote attackers t

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · windows xp13 Şub 2013

  • CVE-2012-3363
    51Planlayın

    Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows re

    KritikCVSS 9,1Kavram kanıtıEPSS %49

    zend · zend framework13 Şub 2013

  • CVE-2013-1114
    20İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    cisco · unity express software13 Şub 2013

  • CVE-2013-0640
    87Hemen

    Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or c

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %86

    adobe · acrobat13 Şub 2013

  • CVE-2013-0641
    71Bu hafta

    Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %32

    adobe · acrobat13 Şub 2013

  • CVE-2012-4711
    58Planlayın

    Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.e

    KritikCVSS 10,0SilahlaştırılmışEPSS %60

    wellintech · kingview15 Şub 2013

  • CVE-2013-0658
    46Planlayın

    Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to exec

    KritikCVSS 10,0Kavram kanıtıEPSS %21

    schneider-electric · accutech manager15 Şub 2013

  • CVE-2012-0439
    49Planlayın

    An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to e

    KritikCVSS 9,3SilahlaştırılmışEPSS %39

    novell · groupwise24 Şub 2013

  • CVE-2013-0804
    44Planlayın

    The client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code or cause a den

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    novell · groupwise24 Şub 2013

  • CVE-2012-4705
    59Planlayın

    Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors

    KritikCVSS 10,0SilahlaştırılmışEPSS %64

    3s-software · codesys gateway-server24 Şub 2013

  • CVE-2012-6274
    40Planlayın

    BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary fi

    OrtaCVSS 5,0SilahlaştırılmışEPSS %46

    bigantsoft · bigant im message server24 Şub 2013

  • CVE-2012-6275
    54Planlayın

    Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impa

    KritikCVSS 10,0SilahlaştırılmışEPSS %46

    bigantsoft · bigant im message server24 Şub 2013

  • CVE-2013-0108
    40Planlayın

    An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310

    OrtaCVSS 6,8SilahlaştırılmışEPSS %26

    honeywell · enterprise buildings integrator24 Şub 2013

  • CVE-2012-3499
    24İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote at

    OrtaCVSS 4,3İstismar yokEPSS %22

    apache · http server26 Şub 2013

  • CVE-2012-4558
    24İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the manager interface in mod_proxy_balancer.c in the

    OrtaCVSS 4,3İstismar yokEPSS %22

    apache · http server26 Şub 2013

  • CVE-2013-0643
    68Bu hafta

    The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 an

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %10

    adobe · flash player26 Şub 2013

  • CVE-2013-0648
    68Bu hafta

    Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %11

    adobe · flash player26 Şub 2013