İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2013: sömürülen ve yeni ciddi CVE kayıtları

46 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2013-1775
    40Planlayın

    sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time rest

    OrtaCVSS 6,9SilahlaştırılmışEPSS %3

    todd miller · sudo5 Mar 2013

  • CVE-2013-0809
    43Planlayın

    Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 U

    KritikCVSS 10,0İstismar yokEPSS %10

    oracle · jre5 Mar 2013

  • CVE-2013-1493
    66Bu hafta

    The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Upd

    KritikCVSS 10,0SilahlaştırılmışEPSS %86

    oracle · jre5 Mar 2013

  • CVE-2013-1643
    23İzleyin

    The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing

    OrtaCVSS 5,0İstismar yokEPSS %10

    php · php6 Mar 2013

  • CVE-2010-5107
    35İzleyin

    The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, w

    YüksekCVSS 7,5İstismar yokEPSS %16

    openbsd · openssh7 Mar 2013

  • CVE-2013-0401
    43Planlayın

    The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earli

    KritikCVSS 10,0İstismar yokEPSS %10

    oracle · jdk8 Mar 2013

  • CVE-2013-1488
    66Bu hafta

    The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to exec

    KritikCVSS 10,0SilahlaştırılmışEPSS %87

    oracle · jdk8 Mar 2013

  • CVE-2013-1491
    45Planlayın

    The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier,

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    oracle · jdk8 Mar 2013

  • CVE-2011-4969
    23İzleyin

    Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inj

    OrtaCVSS 4,3İstismar yokEPSS %19

    jquery · jquery8 Mar 2013

  • CVE-2013-0249
    36İzleyin

    Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1

    YüksekCVSS 7,5Kavram kanıtıEPSS %21

    haxx · curl8 Mar 2013

  • CVE-2012-5201
    59Planlayın

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) be

    KritikCVSS 10,0SilahlaştırılmışEPSS %63

    hp · intelligent management center9 Mar 2013

  • CVE-2012-5202
    40Planlayın

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) be

    YüksekCVSS 7,5SilahlaştırılmışEPSS %21

    hp · intelligent management center9 Mar 2013

  • CVE-2012-5203
    40Planlayın

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) be

    YüksekCVSS 7,5SilahlaştırılmışEPSS %21

    hp · intelligent management center for automated network manager9 Mar 2013

  • CVE-2012-5204
    40Planlayın

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) be

    YüksekCVSS 7,5SilahlaştırılmışEPSS %18

    hp · intelligent management center9 Mar 2013

  • CVE-2013-2551
    87Hemen

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %73

    microsoft · internet explorer11 Mar 2013

  • CVE-2013-2552
    34İzleyin

    Unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 allows remote attackers to bypass the sandbox protection mechanism

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · internet explorer11 Mar 2013

  • CVE-2013-2557
    33İzleyin

    The sandbox protection mechanism in Microsoft Internet Explorer 9 allows remote attackers to cause a denial of service (memory corruption) o

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · internet explorer11 Mar 2013

  • CVE-2013-1081
    50Planlayın

    Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include a

    YüksekCVSS 7,5SilahlaştırılmışEPSS %68

    novell · zenworks mobile management11 Mar 2013

  • CVE-2013-0074
    85Hemen

    Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %78

    microsoft · silverlight12 Mar 2013

  • CVE-2013-0079
    45Planlayın

    Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory al

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · office filter pack12 Mar 2013

  • CVE-2013-0080
    36İzleyin

    Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for cont

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · sharepoint foundation12 Mar 2013

  • CVE-2013-0083
    21İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or H

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · sharepoint foundation12 Mar 2013

  • CVE-2013-0084
    36İzleyin

    Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypa

    YüksekCVSS 7,5İstismar yokEPSS %21

    microsoft · sharepoint foundation12 Mar 2013

  • CVE-2013-0085
    41Planlayın

    Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of serv

    YüksekCVSS 7,8İstismar yokEPSS %33

    microsoft · sharepoint foundation12 Mar 2013

  • CVE-2013-0086
    27İzleyin

    Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensit

    OrtaCVSS 5,0İstismar yokEPSS %23

    microsoft · sharepoint foundation12 Mar 2013

  • CVE-2013-0087
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer12 Mar 2013

  • CVE-2013-0088
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer12 Mar 2013

  • CVE-2013-0089
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer12 Mar 2013

  • CVE-2013-0090
    46Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    YüksekCVSS 8,8Kavram kanıtıEPSS %38

    microsoft · internet explorer12 Mar 2013

  • CVE-2013-0091
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer12 Mar 2013

  • CVE-2013-0092
    45Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · internet explorer12 Mar 2013

  • CVE-2013-0093
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer12 Mar 2013

  • CVE-2013-0094
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer12 Mar 2013

  • CVE-2013-0095
    26İzleyin

    Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a

    OrtaCVSS 5,0İstismar yokEPSS %20

    microsoft · office12 Mar 2013

  • CVE-2013-1288
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer12 Mar 2013

  • CVE-2013-2558
    44Planlayın

    Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to cause a denial of service (reboot) or possibly have unknown othe

    KritikCVSS 10,0İstismar yokEPSS %14

    microsoft · windows 812 Mar 2013

  • CVE-2013-1469
    33İzleyin

    Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a ..

    OrtaCVSS 4,0Kavram kanıtıEPSS %56

    piwigo · piwigo13 Mar 2013

  • CVE-2013-1814
    40Planlayın

    The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information

    OrtaCVSS 4,0SilahlaştırılmışEPSS %73

    apache · rave13 Mar 2013

  • CVE-2013-2566
    60Bu hafta

    The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to

    OrtaCVSS 5,9SilahlaştırılmışEPSS %84

    oracle · communications application session controller15 Mar 2013

  • CVE-2013-2492
    40Planlayın

    Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote att

    OrtaCVSS 6,8SilahlaştırılmışEPSS %42

    firebirdsql · firebird15 Mar 2013

  • CVE-2013-0232
    44Planlayın

    includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shel

    YüksekCVSS 7,5SilahlaştırılmışEPSS %47

    zoneminder · zoneminder20 Mar 2013

  • CVE-2013-0332
    23İzleyin

    Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    zoneminder · zoneminder20 Mar 2013

  • CVE-2013-2266
    44Planlayın

    libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms

    YüksekCVSS 7,8İstismar yokEPSS %42

    isc · bind28 Mar 2013

  • CVE-2013-1861
    26İzleyin

    MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    mariadb · mariadb28 Mar 2013

  • CVE-2013-1080
    63Bu hafta

    The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for ze

    KritikCVSS 10,0SilahlaştırılmışEPSS %77

    novell · zenworks configuration management29 Mar 2013

  • CVE-2013-1082
    34İzleyin

    Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attackers to include and exec

    YüksekCVSS 7,5İstismar yokEPSS %12

    novell · zenworks mobile management29 Mar 2013