İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2013: sömürülen ve yeni ciddi CVE kayıtları

18 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2013-1899
    42Planlayın

    Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to ca

    OrtaCVSS 6,5SilahlaştırılmışEPSS %54

    postgresql · postgresql4 Nis 2013

  • CVE-2013-0680
    40Planlayın

    Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade Da

    YüksekCVSS 7,5SilahlaştırılmışEPSS %18

    cogentdatahub · cogent datahub5 Nis 2013

  • CVE-2013-0109
    40Planlayın

    The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exc

    YüksekCVSS 7,2SilahlaştırılmışEPSS %4

    nvidia · display driver8 Nis 2013

  • CVE-2013-1282
    28İzleyin

    The LDAP service in Microsoft Active Directory, Active Directory Application Mode (ADAM), Active Directory Lightweight Directory Service (AD

    OrtaCVSS 5,0İstismar yokEPSS %27

    microsoft · active directory9 Nis 2013

  • CVE-2013-1289
    22İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, an

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · groove server9 Nis 2013

  • CVE-2013-1290
    19İzleyin

    Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access controls f

    DüşükCVSS 3,5İstismar yokEPSS %16

    microsoft · sharepoint server9 Nis 2013

  • CVE-2013-1296
    43Planlayın

    The Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6.1 and 7.0 does not properly handle objects

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · remote desktop connection9 Nis 2013

  • CVE-2013-1303
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer9 Nis 2013

  • CVE-2013-1304
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer9 Nis 2013

  • CVE-2013-2596
    62Bu hafta

    Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of A

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %3

    linux · linux kernel12 Nis 2013

  • CVE-2013-1559
    40Planlayın

    Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote auth

    OrtaCVSS 4,0SilahlaştırılmışEPSS %58

    oracle · fusion middleware17 Nis 2013

  • CVE-2013-2419
    27İzleyin

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier

    OrtaCVSS 5,0Kavram kanıtıEPSS %22

    oracle · jre17 Nis 2013

  • CVE-2013-2423
    70Bu hafta

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows r

    DüşükCVSS 3,7KEVSilahlaştırılmışEPSS %85

    oracle · jre17 Nis 2013

  • CVE-2013-3075
    43Planlayın

    Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScad

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    mitsubishi-automation · mitsubishi mx component19 Nis 2013

  • CVE-2013-0233
    40Planlayın

    Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does n

    OrtaCVSS 6,8SilahlaştırılmışEPSS %14

    plataformatec · devise25 Nis 2013

  • CVE-2013-3238
    40Planlayın

    phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, wh

    OrtaCVSS 6,0SilahlaştırılmışEPSS %28

    phpmyadmin · phpmyadmin25 Nis 2013

  • CVE-2013-1428
    44Planlayın

    Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote aut

    OrtaCVSS 6,5SilahlaştırılmışEPSS %60

    tinc-vpn · tinc26 Nis 2013

  • CVE-2012-5946
    47Planlayın

    Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attackers to execute arbi

    KritikCVSS 9,3SilahlaştırılmışEPSS %33

    ibm · spss samplepower29 Nis 2013