İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2013: sömürülen ve yeni ciddi CVE kayıtları

30 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2013-1616
    36İzleyin

    The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by inj

    YüksekCVSS 8,3Kavram kanıtıEPSS %10

    symantec · web gateway1 Ağu 2013

  • CVE-2013-3724
    24İzleyin

    The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash an

    OrtaCVSS 5,0Kavram kanıtıEPSS %13

    monkey-project · monkey1 Ağu 2013

  • CVE-2013-4124
    41Planlayın

    Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4

    OrtaCVSS 5,0SilahlaştırılmışEPSS %69

    samba · samba5 Ağu 2013

  • CVE-2013-1710
    52Planlayın

    The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbi

    KritikCVSS 10,0SilahlaştırılmışEPSS %40

    mozilla · seamonkey6 Ağu 2013

  • CVE-2013-2577
    41Planlayın

    Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    xnview · xnview9 Ağu 2013

  • CVE-2013-4625
    20İzleyin

    Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPress allows remote at

    OrtaCVSS 4,3Kavram kanıtıEPSS %11

    wordpress · wordpress9 Ağu 2013

  • CVE-2013-4115
    43Planlayın

    Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to

    YüksekCVSS 7,5İstismar yokEPSS %43

    opensuse · opensuse9 Ağu 2013

  • CVE-2013-3175
    48Planlayın

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,

    KritikCVSS 10,0İstismar yokEPSS %28

    microsoft · windows 714 Ağu 2013

  • CVE-2013-3181
    43Planlayın

    usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remote attackers to execut

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows server 200314 Ağu 2013

  • CVE-2013-3182
    59Planlayın

    The Windows NAT Driver (aka winnat) service in Microsoft Windows Server 2012 does not properly validate memory addresses during the processi

    YüksekCVSS 7,8İstismar yokEPSS %94

    microsoft · windows server 201214 Ağu 2013

  • CVE-2013-3183
    54Planlayın

    The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012,

    YüksekCVSS 7,8İstismar yokEPSS %78

    microsoft · windows 714 Ağu 2013

  • CVE-2013-3184
    54Planlayın

    Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3SilahlaştırılmışEPSS %58

    microsoft · internet explorer14 Ağu 2013

  • CVE-2013-3185
    32İzleyin

    Microsoft Active Directory Federation Services (AD FS) 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, an

    OrtaCVSS 5,0İstismar yokEPSS %40

    microsoft · active directory federation services14 Ağu 2013

  • CVE-2013-3186
    33İzleyin

    The Protected Mode feature in Microsoft Internet Explorer 7 through 10 on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 S

    YüksekCVSS 7,6İstismar yokEPSS %10

    microsoft · internet explorer14 Ağu 2013

  • CVE-2013-3187
    43Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer14 Ağu 2013

  • CVE-2013-3188
    45Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %27

    microsoft · internet explorer14 Ağu 2013

  • CVE-2013-3189
    43Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer14 Ağu 2013

  • CVE-2013-3190
    43Planlayın

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer14 Ağu 2013

  • CVE-2013-3191
    43Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer14 Ağu 2013

  • CVE-2013-3192
    20İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · internet explorer14 Ağu 2013

  • CVE-2013-3193
    43Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer14 Ağu 2013

  • CVE-2013-3194
    43Planlayın

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer14 Ağu 2013

  • CVE-2013-3199
    43Planlayın

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer14 Ağu 2013

  • CVE-2013-2250
    44Planlayın

    Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to e

    KritikCVSS 10,0İstismar yokEPSS %12

    apache · ofbiz15 Ağu 2013

  • CVE-2013-3319
    40Planlayın

    The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a

    OrtaCVSS 5,0SilahlaştırılmışEPSS %20

    sap · netweaver16 Ağu 2013

  • CVE-2013-2160
    30İzleyin

    The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a de

    OrtaCVSS 5,0Kavram kanıtıEPSS %32

    apache · cxf19 Ağu 2013

  • CVE-2013-1662
    40Planlayın

    vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to

    OrtaCVSS 6,9SilahlaştırılmışEPSS %4

    vmware · workstation23 Ağu 2013

  • CVE-2013-3585
    27İzleyin

    Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to obtain sensitive inf

    OrtaCVSS 5,0Kavram kanıtıEPSS %23

    samsung · smart viewer28 Ağu 2013

  • CVE-2013-3586
    33İzleyin

    Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie.

    YüksekCVSS 7,6Kavram kanıtıEPSS %11

    samsung · smart viewer28 Ağu 2013

  • CVE-2013-3346
    93Hemen

    Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %78

    adobe · acrobat30 Ağu 2013