İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2013: sömürülen ve yeni ciddi CVE kayıtları

54 kayıt · 3 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2013-0136
    46Planlayın

    Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticate

    YüksekCVSS 8,5SilahlaştırılmışEPSS %40

    mutiny · mutiny1 Haz 2013

  • CVE-2012-3544
    23İzleyin

    Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows rem

    OrtaCVSS 5,0İstismar yokEPSS %11

    apache · tomcat1 Haz 2013

  • CVE-2013-0984
    41Planlayın

    Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon cr

    KritikCVSS 9,3Kavram kanıtıEPSS %14

    apple · mac os x5 Haz 2013

  • CVE-2013-2324
    52Planlayın

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0İstismar yokEPSS %39

    hp · storage data protector6 Haz 2013

  • CVE-2013-2325
    58Planlayın

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0İstismar yokEPSS %61

    hp · storage data protector6 Haz 2013

  • CVE-2013-2326
    58Planlayın

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0İstismar yokEPSS %61

    hp · storage data protector6 Haz 2013

  • CVE-2013-2327
    58Planlayın

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0İstismar yokEPSS %61

    hp · storage data protector6 Haz 2013

  • CVE-2013-2328
    58Planlayın

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0İstismar yokEPSS %61

    hp · storage data protector6 Haz 2013

  • CVE-2013-2329
    58Planlayın

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0İstismar yokEPSS %61

    hp · storage data protector6 Haz 2013

  • CVE-2013-2330
    58Planlayın

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0İstismar yokEPSS %61

    hp · storage data protector6 Haz 2013

  • CVE-2013-2331
    58Planlayın

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0İstismar yokEPSS %61

    hp · storage data protector6 Haz 2013

  • CVE-2013-2332
    58Planlayın

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0İstismar yokEPSS %61

    hp · storage data protector6 Haz 2013

  • CVE-2013-2333
    67Bu hafta

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0SilahlaştırılmışEPSS %89

    hp · storage data protector6 Haz 2013

  • CVE-2013-2334
    54Planlayın

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0İstismar yokEPSS %47

    hp · storage data protector6 Haz 2013

  • CVE-2013-2335
    58Planlayın

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0İstismar yokEPSS %61

    hp · storage data protector6 Haz 2013

  • CVE-2013-4074
    40Planlayın

    The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x befor

    OrtaCVSS 5,0SilahlaştırılmışEPSS %60

    wireshark · wireshark9 Haz 2013

  • CVE-2013-1862
    27İzleyin

    mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-print

    OrtaCVSS 5,1İstismar yokEPSS %24

    apache · http server10 Haz 2013

  • Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %79

    microsoft · office11 Haz 2013

  • CVE-2013-1339
    43Planlayın

    The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Win

    KritikCVSS 9,0İstismar yokEPSS %23

    microsoft · windows 711 Haz 2013

  • CVE-2013-3110
    43Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3111
    47Planlayın

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3Kavram kanıtıEPSS %33

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3112
    43Planlayın

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3113
    43Planlayın

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3114
    43Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3116
    43Planlayın

    Microsoft Internet Explorer 7 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3117
    43Planlayın

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3118
    45Planlayın

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3119
    43Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3120
    46Planlayın

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3Kavram kanıtıEPSS %31

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3121
    43Planlayın

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3122
    43Planlayın

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3123
    45Planlayın

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3124
    43Planlayın

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3125
    43Planlayın

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3126
    41Planlayın

    Microsoft Internet Explorer 9 and 10, when script debugging is enabled, does not properly handle objects in memory during the processing of

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3138
    46Planlayın

    Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows

    YüksekCVSS 7,1İstismar yokEPSS %59

    microsoft · windows 711 Haz 2013

  • CVE-2013-3139
    43Planlayın

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3141
    43Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3142
    43Planlayın

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Haz 2013

  • CVE-2013-3576
    56Planlayın

    ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacte

    KritikCVSS 9,0SilahlaştırılmışEPSS %66

    hp · system management homepage14 Haz 2013

  • CVE-2013-2338
    43Planlayın

    Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware befo

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · integrated lights-out 3 firmware14 Haz 2013

  • CVE-2013-3520
    47Planlayın

    VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary

    YüksekCVSS 7,5SilahlaştırılmışEPSS %55

    vmware · vcenter chargeback manager16 Haz 2013

  • CVE-2013-1571
    37İzleyin

    Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and

    OrtaCVSS 4,3İstismar yokEPSS %66

    oracle · jdk18 Haz 2013

  • CVE-2013-2460
    58Planlayın

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows r

    KritikCVSS 9,3SilahlaştırılmışEPSS %70

    oracle · jre18 Haz 2013

  • CVE-2013-2463
    43Planlayın

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier

    KritikCVSS 10,0İstismar yokEPSS %10

    oracle · jre18 Haz 2013

  • Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    oracle · jre18 Haz 2013

  • CVE-2013-2470
    47Planlayın

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier

    KritikCVSS 10,0Kavram kanıtıEPSS %22

    oracle · jre18 Haz 2013

  • CVE-2013-2471
    45Planlayın

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier

    KritikCVSS 10,0İstismar yokEPSS %15

    oracle · jre18 Haz 2013

  • CVE-2013-2472
    47Planlayın

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier

    KritikCVSS 10,0Kavram kanıtıEPSS %22

    oracle · jre18 Haz 2013

  • CVE-2013-4614
    40Planlayın

    English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows th

    DüşükCVSS 2,1SilahlaştırılmışEPSS %2

    canon · mg3100 printer21 Haz 2013

  • CVE-2013-4615
    40Planlayın

    The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service

    OrtaCVSS 5,0SilahlaştırılmışEPSS %15

    canon · mg3100 printer21 Haz 2013

  • Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not proper

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %69

    mozilla · firefox25 Haz 2013

  • CVE-2013-4660
    40Planlayın

    The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote atta

    OrtaCVSS 6,8SilahlaştırılmışEPSS %17

    nodeca · js-yaml28 Haz 2013

  • CVE-2013-0137
    44Planlayın

    The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device bef

    KritikCVSS 10,0İstismar yokEPSS %13

    digital alert systems · dasdec eas30 Haz 2013