İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2013: sömürülen ve yeni ciddi CVE kayıtları

48 kayıt · 5 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2013-1338
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer1 May 2013

  • CVE-2013-1847
    35İzleyin

    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a den

    OrtaCVSS 5,0Kavram kanıtıEPSS %51

    apache · subversion2 May 2013

  • CVE-2013-1884
    35İzleyin

    The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentat

    OrtaCVSS 5,0Kavram kanıtıEPSS %50

    apache · subversion2 May 2013

  • CVE-2013-0726
    45Planlayın

    Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows rem

    KritikCVSS 9,3SilahlaştırılmışEPSS %27

    hexagon · erdas er viewer5 May 2013

  • CVE-2013-1347
    88Hemen

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %77

    microsoft · internet explorer5 May 2013

  • CVE-2013-3502
    42Planlayın

    monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary comm

    OrtaCVSS 6,5SilahlaştırılmışEPSS %53

    gwos · groundwork monitor8 May 2013

  • CVE-2013-3336
    42Planlayın

    Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors.

    OrtaCVSS 5,0SilahlaştırılmışEPSS %74

    adobe · coldfusion9 May 2013

  • CVE-2013-0946
    46Planlayın

    Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code

    KritikCVSS 9,3Kavram kanıtıEPSS %28

    emc · alphastor10 May 2013

  • CVE-2013-3522
    40Planlayın

    SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authe

    OrtaCVSS 6,5SilahlaştırılmışEPSS %27

    vbulletin · vbulletin10 May 2013

  • CVE-2013-3526
    21İzleyin

    Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earlier, for WordPress al

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    wordpress · wordpress10 May 2013

  • CVE-2013-2094
    77Bu hafta

    The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows lo

    YüksekCVSS 8,4KEVSilahlaştırılmışEPSS %47

    linux · linux kernel14 May 2013

  • CVE-2013-0096
    36İzleyin

    Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via craf

    OrtaCVSS 6,8İstismar yokEPSS %30

    microsoft · windows essentials14 May 2013

  • CVE-2013-0811
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer14 May 2013

  • CVE-2013-1297
    22İzleyin

    Microsoft Internet Explorer 6 through 8 does not properly restrict data access by VBScript, which allows remote attackers to perform cross-d

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · internet explorer14 May 2013

  • CVE-2013-1301
    22İzleyin

    Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external e

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · visio14 May 2013

  • CVE-2013-1302
    44Planlayın

    Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows r

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · lync14 May 2013

  • CVE-2013-1305
    47Planlayın

    HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (infinite loop) vi

    YüksekCVSS 7,8İstismar yokEPSS %54

    microsoft · windows 814 May 2013

  • CVE-2013-1306
    47Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that

    KritikCVSS 9,3Kavram kanıtıEPSS %33

    microsoft · internet explorer14 May 2013

  • CVE-2013-1307
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer14 May 2013

  • CVE-2013-1308
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer14 May 2013

  • CVE-2013-1309
    49Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 9,3Kavram kanıtıEPSS %39

    microsoft · internet explorer14 May 2013

  • CVE-2013-1310
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via a crafted web site

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer14 May 2013

  • CVE-2013-1311
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that

    KritikCVSS 9,3Kavram kanıtıEPSS %20

    microsoft · internet explorer14 May 2013

  • CVE-2013-1312
    43Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web sit

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer14 May 2013

  • CVE-2013-1316
    44Planlayın

    Microsoft Publisher 2003 SP3 does not properly validate the size of an unspecified array, which allows remote attackers to execute arbitrary

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · publisher14 May 2013

  • CVE-2013-1317
    43Planlayın

    Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that trigger

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · publisher14 May 2013

  • CVE-2013-1318
    48Planlayın

    Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an inval

    KritikCVSS 10,0İstismar yokEPSS %26

    microsoft · publisher14 May 2013

  • CVE-2013-1319
    48Planlayın

    Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arb

    KritikCVSS 10,0İstismar yokEPSS %25

    microsoft · publisher14 May 2013

  • CVE-2013-1320
    49Planlayın

    Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publish

    KritikCVSS 10,0İstismar yokEPSS %29

    microsoft · publisher14 May 2013

  • CVE-2013-1321
    44Planlayın

    Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · publisher14 May 2013

  • CVE-2013-1322
    48Planlayın

    Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted

    KritikCVSS 10,0İstismar yokEPSS %25

    microsoft · publisher14 May 2013

  • CVE-2013-1323
    43Planlayın

    Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbit

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · publisher14 May 2013

  • CVE-2013-1327
    43Planlayın

    Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · publisher14 May 2013

  • CVE-2013-1328
    43Planlayın

    Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that tri

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · publisher14 May 2013

  • CVE-2013-1329
    43Planlayın

    Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · publisher14 May 2013

  • CVE-2013-1335
    43Planlayın

    Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Wor

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · word14 May 2013

  • CVE-2013-1336
    26İzleyin

    The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allo

    OrtaCVSS 5,0İstismar yokEPSS %19

    microsoft · .net framework14 May 2013

  • CVE-2013-1337
    36İzleyin

    Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (WCF) endpoint authent

    YüksekCVSS 7,5İstismar yokEPSS %20

    microsoft · .net framework14 May 2013

  • CVE-2013-1346
    40Planlayın

    mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or

    KritikCVSS 9,3İstismar yokEPSS %11

    microsoft · malware protection engine15 May 2013

  • CVE-2013-1670
    20İzleyin

    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, an

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    mozilla · firefox16 May 2013

  • CVE-2013-1675
    60Bu hafta

    Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not proper

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %6

    mozilla · firefox16 May 2013

  • CVE-2013-2729
    89Hemen

    Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbit

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %66

    adobe · acrobat16 May 2013

  • CVE-2013-2730
    64Bu hafta

    Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitr

    KritikCVSS 10,0SilahlaştırılmışEPSS %78

    adobe · acrobat reader16 May 2013

  • CVE-2013-2842
    34İzleyin

    Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unsp

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    google · chrome22 May 2013

  • CVE-2012-6554
    40Planlayın

    functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code

    OrtaCVSS 6,5SilahlaştırılmışEPSS %16

    a51dev · activecollab chat module23 May 2013

  • CVE-2011-4518
    28İzleyin

    Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to read

    OrtaCVSS 5,0Kavram kanıtıEPSS %26

    microsys · promotic23 May 2013

  • CVE-2013-1017
    47Planlayın

    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application

    KritikCVSS 9,3SilahlaştırılmışEPSS %32

    apple · quicktime24 May 2013

  • CVE-2013-3660
    73Bu hafta

    The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %39

    microsoft · windows 724 May 2013