İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2013: sömürülen ve yeni ciddi CVE kayıtları

69 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2013-2171
    40Planlayın

    The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not proper

    OrtaCVSS 6,9SilahlaştırılmışEPSS %6

    freebsd · freebsd1 Tem 2013

  • CVE-2013-2343
    59Planlayın

    Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitr

    KritikCVSS 10,0SilahlaştırılmışEPSS %61

    hp · lefthand p4000 virtual san appliance2 Tem 2013

  • CVE-2013-1960
    41Planlayın

    Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause

    KritikCVSS 9,3İstismar yokEPSS %11

    remotesensing · libtiff3 Tem 2013

  • CVE-2013-3563
    45Planlayın

    Stack-based buffer overflow in db_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote attackers to cause a denial of service (dae

    YüksekCVSS 7,5SilahlaştırılmışEPSS %49

    lianja · lianja sql server4 Tem 2013

  • CVE-2013-2340
    43Planlayın

    Unspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF###B, JF###C, JG###A, 658250-B21, and 658247-

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · 3com baseline plus switch6 Tem 2013

  • CVE-2013-0235
    40Planlayın

    The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attack

    OrtaCVSS 6,4SilahlaştırılmışEPSS %29

    wordpress · wordpress8 Tem 2013

  • CVE-2013-4782
    48Planlayın

    The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite

    KritikCVSS 10,0SilahlaştırılmışEPSS %26

    supermicro · bmc8 Tem 2013

  • CVE-2013-4784
    55Planlayın

    The HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands b

    KritikCVSS 10,0Kavram kanıtıEPSS %49

    hp · integrated lights-out bmc8 Tem 2013

  • CVE-2013-4786
    60Bu hafta

    The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain

    YüksekCVSS 7,5SilahlaştırılmışEPSS %78

    oracle · fujitsu m10 firmware8 Tem 2013

  • CVE-2013-1362
    50Planlayın

    Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute ar

    YüksekCVSS 7,5SilahlaştırılmışEPSS %65

    nagios · remote plug in executor9 Tem 2013

  • CVE-2013-4787
    41Planlayın

    Android 1.6 Donut through 4.2 Jelly Bean does not properly check cryptographic signatures for applications, which allows attackers to execut

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    google · android9 Tem 2013

  • CVE-2013-1300
    40Planlayın

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S

    YüksekCVSS 7,2SilahlaştırılmışEPSS %12

    microsoft · windows 79 Tem 2013

  • CVE-2013-3115
    45Planlayın

    Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3Kavram kanıtıEPSS %25

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3127
    44Planlayın

    The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Forma

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · windows media format runtime9 Tem 2013

  • CVE-2013-3129
    41Planlayın

    Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+,

    YüksekCVSS 7,8İstismar yokEPSS %32

    microsoft · .net framework9 Tem 2013

  • CVE-2013-3131
    44Planlayın

    Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · .net framework9 Tem 2013

  • CVE-2013-3132
    44Planlayın

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use refle

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · .net framework9 Tem 2013

  • CVE-2013-3133
    43Planlayın

    Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allow

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · .net framework9 Tem 2013

  • CVE-2013-3134
    43Planlayın

    The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 on 64-bit platforms does not properly allocate

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · .net framework9 Tem 2013

  • CVE-2013-3143
    47Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3Kavram kanıtıEPSS %32

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3144
    44Planlayın

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3Kavram kanıtıEPSS %22

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3145
    45Planlayın

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3Kavram kanıtıEPSS %25

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3146
    44Planlayın

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3Kavram kanıtıEPSS %23

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3147
    45Planlayın

    Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v

    KritikCVSS 9,3Kavram kanıtıEPSS %25

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3148
    45Planlayın

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3Kavram kanıtıEPSS %25

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3149
    45Planlayın

    Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3Kavram kanıtıEPSS %25

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3150
    45Planlayın

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3Kavram kanıtıEPSS %25

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3151
    44Planlayın

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3Kavram kanıtıEPSS %22

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3152
    44Planlayın

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3Kavram kanıtıEPSS %23

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3153
    45Planlayın

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3Kavram kanıtıEPSS %25

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3161
    45Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3Kavram kanıtıEPSS %25

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3162
    45Planlayın

    Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3Kavram kanıtıEPSS %25

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3163
    86Hemen

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %70

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3164
    44Planlayın

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3Kavram kanıtıEPSS %23

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3166
    22İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script

    OrtaCVSS 4,3Kavram kanıtıEPSS %16

    microsoft · internet explorer9 Tem 2013

  • CVE-2013-3171
    43Planlayın

    The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · .net framework9 Tem 2013

  • CVE-2013-3174
    47Planlayın

    DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP

    KritikCVSS 9,3Kavram kanıtıEPSS %31

    microsoft · windows 79 Tem 2013

  • CVE-2013-3178
    47Planlayın

    Microsoft Silverlight 5 before 5.1.20513.0 does not properly initialize arrays, which allows remote attackers to execute arbitrary code or c

    KritikCVSS 9,3İstismar yokEPSS %32

    microsoft · silverlight9 Tem 2013

  • CVE-2013-1868
    40Planlayın

    Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and exe

    KritikCVSS 9,3Kavram kanıtıEPSS %10

    videolan · vlc media player10 Tem 2013

  • CVE-2013-1965
    65Bu hafta

    Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code

    KritikCVSS 9,3Kavram kanıtıEPSS %93

    apache · struts10 Tem 2013

  • CVE-2013-1966
    59Planlayın

    Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled wh

    KritikCVSS 9,3SilahlaştırılmışEPSS %73

    apache · struts10 Tem 2013

  • CVE-2013-2115
    60Bu hafta

    Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled wh

    YüksekCVSS 8,1SilahlaştırılmışEPSS %74

    apache · struts10 Tem 2013

  • CVE-2013-1896
    26İzleyin

    mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attacker

    OrtaCVSS 4,3İstismar yokEPSS %29

    apache · http server10 Tem 2013

  • CVE-2013-2765
    24İzleyin

    The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NULL pointer dereferenc

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    apache · http server15 Tem 2013

  • CVE-2013-4117
    21İzleyin

    Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for WordPress allows rem

    OrtaCVSS 4,3Kavram kanıtıEPSS %12

    wordpress · wordpress16 Tem 2013

  • CVE-2013-2134
    58Planlayın

    Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not

    KritikCVSS 9,3Kavram kanıtıEPSS %70

    apache · struts16 Tem 2013

  • CVE-2013-2135
    41Planlayın

    Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both

    KritikCVSS 9,3İstismar yokEPSS %13

    apache · struts16 Tem 2013

  • CVE-2013-3763
    40Planlayın

    Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated us

    OrtaCVSS 5,5SilahlaştırılmışEPSS %59

    oracle · fusion middleware17 Tem 2013

  • CVE-2013-1606
    37İzleyin

    Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers t

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    ui · airvision firmware18 Tem 2013

  • CVE-2013-4011
    40Planlayın

    Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to

    YüksekCVSS 7,2SilahlaştırılmışEPSS %2

    ibm · aix18 Tem 2013

  • CVE-2013-4878
    39İzleyin

    The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAli

    YüksekCVSS 7,5Kavram kanıtıEPSS %31

    parallels · parallels plesk panel18 Tem 2013

  • CVE-2013-2028
    56Planlayın

    The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of servi

    YüksekCVSS 7,5SilahlaştırılmışEPSS %87

    f5 · nginx19 Tem 2013

  • CVE-2013-2070
    27İzleyin

    http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP serve

    OrtaCVSS 5,8İstismar yokEPSS %11

    f5 · nginx19 Tem 2013

  • CVE-2013-2248
    51Planlayın

    Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites

    OrtaCVSS 5,8Kavram kanıtıEPSS %94

    apache · struts19 Tem 2013

  • CVE-2013-2251
    99Hemen

    Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:,

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · archiva19 Tem 2013

  • CVE-2013-2165
    34İzleyin

    ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    redhat · jboss enterprise application platform23 Tem 2013

  • CVE-2013-4002
    35İzleyin

    XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-F

    YüksekCVSS 7,1Kavram kanıtıEPSS %24

    ibm · java23 Tem 2013

  • CVE-2013-2249
    34İzleyin

    mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without c

    YüksekCVSS 7,5İstismar yokEPSS %14

    apache · http server23 Tem 2013

  • CVE-2013-3429
    34İzleyin

    Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system fi

    YüksekCVSS 7,8Kavram kanıtıEPSS %10

    cisco · video surveillance manager25 Tem 2013

  • CVE-2013-2370
    49Planlayın

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1

    YüksekCVSS 7,5SilahlaştırılmışEPSS %61

    hp · loadrunner29 Tem 2013

  • CVE-2013-4798
    60Bu hafta

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1

    KritikCVSS 10,0SilahlaştırılmışEPSS %66

    hp · loadrunner29 Tem 2013

  • CVE-2013-4800
    49Planlayın

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1

    KritikCVSS 9,3SilahlaştırılmışEPSS %39

    hp · loadrunner29 Tem 2013

  • CVE-2013-4854
    41Planlayın

    The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco B

    YüksekCVSS 7,8İstismar yokEPSS %34

    isc · bind29 Tem 2013

  • CVE-2013-2367
    61Bu hafta

    Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code vi

    KritikCVSS 10,0SilahlaştırılmışEPSS %68

    hp · sitescope31 Tem 2013

  • CVE-2013-2088
    37İzleyin

    contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute a

    YüksekCVSS 7,1Kavram kanıtıEPSS %31

    apache · subversion31 Tem 2013

  • CVE-2013-2113
    40Planlayın

    The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to c

    OrtaCVSS 6,0SilahlaştırılmışEPSS %20

    redhat · openstack31 Tem 2013

  • CVE-2013-2121
    40Planlayın

    Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users

    OrtaCVSS 6,0SilahlaştırılmışEPSS %24

    redhat · openstack31 Tem 2013

  • CVE-2013-3956
    40Planlayın

    The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista an

    YüksekCVSS 7,2SilahlaştırılmışEPSS %7

    novell · client31 Tem 2013

  • CVE-2013-5019
    59Planlayın

    Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP r

    KritikCVSS 10,0SilahlaştırılmışEPSS %63

    vector · ultra mini httpd31 Tem 2013