İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2013: sömürülen ve yeni ciddi CVE kayıtları

57 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2013-5642
    23İzleyin

    The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11.x before 11.5.1; Cer

    OrtaCVSS 5,0İstismar yokEPSS %11

    digium · asterisk9 Eyl 2013

  • CVE-2013-4983
    67Bu hafta

    The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to

    KritikCVSS 10,0SilahlaştırılmışEPSS %90

    sophos · web appliance firmware10 Eyl 2013

  • CVE-2013-4984
    40Planlayın

    The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local user

    YüksekCVSS 7,2SilahlaştırılmışEPSS %8

    sophos · web appliance10 Eyl 2013

  • CVE-2013-0081
    43Planlayın

    Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned wo

    OrtaCVSS 5,0İstismar yokEPSS %76

    microsoft · sharepoint foundation11 Eyl 2013

  • CVE-2013-0810
    60Bu hafta

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute

    YüksekCVSS 8,1SilahlaştırılmışEPSS %59

    microsoft · windows server 200311 Eyl 2013

  • CVE-2013-1315
    46Planlayın

    Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, an

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · excel11 Eyl 2013

  • CVE-2013-1330
    49Planlayın

    The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Ap

    KritikCVSS 10,0İstismar yokEPSS %30

    microsoft · sharepoint foundation11 Eyl 2013

  • CVE-2013-3137
    26İzleyin

    Microsoft FrontPage 2003 SP3 does not properly parse DTDs, which allows remote attackers to obtain sensitive information via crafted XML dat

    OrtaCVSS 4,3İstismar yokEPSS %29

    microsoft · frontpage11 Eyl 2013

  • CVE-2013-3155
    43Planlayın

    Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denia

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · access11 Eyl 2013

  • CVE-2013-3156
    43Planlayın

    Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denia

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · access11 Eyl 2013

  • CVE-2013-3157
    43Planlayın

    Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denia

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · access11 Eyl 2013

  • CVE-2013-3158
    43Planlayın

    Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · excel11 Eyl 2013

  • CVE-2013-3159
    22İzleyin

    Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers t

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · excel11 Eyl 2013

  • CVE-2013-3160
    27İzleyin

    Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, and Word Viewer allow remote attackers to read arbitrary files via an XM

    OrtaCVSS 5,0İstismar yokEPSS %22

    microsoft · office11 Eyl 2013

  • CVE-2013-3179
    24İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remote attackers to inje

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microsoft · sharepoint foundation11 Eyl 2013

  • CVE-2013-3180
    37İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrar

    OrtaCVSS 4,3İstismar yokEPSS %65

    microsoft · sharepoint foundation11 Eyl 2013

  • CVE-2013-3201
    43Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Eyl 2013

  • CVE-2013-3202
    43Planlayın

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Eyl 2013

  • CVE-2013-3203
    44Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer11 Eyl 2013

  • CVE-2013-3204
    43Planlayın

    Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Eyl 2013

  • CVE-2013-3205
    57Planlayın

    Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v

    KritikCVSS 9,3SilahlaştırılmışEPSS %66

    microsoft · internet explorer11 Eyl 2013

  • CVE-2013-3206
    43Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Eyl 2013

  • CVE-2013-3207
    43Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Eyl 2013

  • CVE-2013-3208
    43Planlayın

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Eyl 2013

  • CVE-2013-3209
    43Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Eyl 2013

  • CVE-2013-3845
    43Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Eyl 2013

  • CVE-2013-3847
    43Planlayın

    Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · sharepoint foundation11 Eyl 2013

  • CVE-2013-3848
    43Planlayın

    Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · office web apps11 Eyl 2013

  • CVE-2013-3849
    43Planlayın

    Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · office compatibility pack11 Eyl 2013

  • CVE-2013-3850
    43Planlayın

    Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute ar

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office compatibility pack11 Eyl 2013

  • CVE-2013-3851
    43Planlayın

    Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office compatibility pack11 Eyl 2013

  • CVE-2013-3852
    43Planlayın

    Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office compatibility pack11 Eyl 2013

  • CVE-2013-3853
    43Planlayın

    Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office11 Eyl 2013

  • CVE-2013-3854
    43Planlayın

    Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office11 Eyl 2013

  • CVE-2013-3855
    43Planlayın

    Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cau

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office compatibility pack11 Eyl 2013

  • CVE-2013-3856
    43Planlayın

    Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · word11 Eyl 2013

  • CVE-2013-3857
    43Planlayın

    Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 S

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · sharepoint server11 Eyl 2013

  • CVE-2013-3858
    43Planlayın

    Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · office compatibility pack11 Eyl 2013

  • CVE-2013-3863
    43Planlayın

    Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via a crafted OLE object in a file, ak

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · windows xp11 Eyl 2013

  • CVE-2013-3868
    31İzleyin

    Microsoft Active Directory Lightweight Directory Service (AD LDS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, a

    OrtaCVSS 5,0İstismar yokEPSS %36

    microsoft · active directory lightweight directory service11 Eyl 2013

  • CVE-2013-3870
    43Planlayın

    Double free vulnerability in Microsoft Outlook 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to execute arbitrary code by including

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · outlook11 Eyl 2013

  • CVE-2013-3351
    45Planlayın

    Multiple stack-based buffer overflows in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attack

    KritikCVSS 10,0İstismar yokEPSS %16

    adobe · acrobat reader12 Eyl 2013

  • CVE-2013-3357
    44Planlayın

    Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbit

    KritikCVSS 10,0İstismar yokEPSS %12

    adobe · acrobat12 Eyl 2013

  • CVE-2013-3358
    44Planlayın

    Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbit

    KritikCVSS 10,0İstismar yokEPSS %12

    adobe · acrobat12 Eyl 2013

  • CVE-2013-4810
    93Hemen

    HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow rem

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %79

    hp · application lifecycle management16 Eyl 2013

  • CVE-2013-4811
    61Bu hafta

    UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Dri

    KritikCVSS 10,0SilahlaştırılmışEPSS %71

    hp · identity driven manager16 Eyl 2013

  • CVE-2013-4812
    56Planlayın

    UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven

    KritikCVSS 10,0SilahlaştırılmışEPSS %51

    hp · identity driven manager16 Eyl 2013

  • CVE-2013-4341
    40Planlayın

    Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2

    OrtaCVSS 4,3SilahlaştırılmışEPSS %21

    moodle · moodle16 Eyl 2013

  • CVE-2013-4123
    44Planlayın

    client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafte

    OrtaCVSS 5,0Kavram kanıtıEPSS %80

    squid-cache · squid16 Eyl 2013

  • CVE-2013-3612
    43Planlayın

    Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    dahuasecurity · dvr0404hd-a17 Eyl 2013

  • CVE-2013-3893
    91Hemen

    Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote a

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %87

    microsoft · internet explorer18 Eyl 2013

  • CVE-2013-5696
    40Planlayın

    inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installation is completed, whi

    OrtaCVSS 6,8SilahlaştırılmışEPSS %7

    glpi-project · glpi22 Eyl 2013

  • CVE-2013-5486
    63Bu hafta

    Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1)

    KritikCVSS 10,0SilahlaştırılmışEPSS %75

    cisco · prime data center network manager23 Eyl 2013

  • CVE-2013-5093
    40Planlayın

    The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, whi

    OrtaCVSS 6,8SilahlaştırılmışEPSS %38

    graphite project · graphite27 Eyl 2013

  • CVE-2013-2068
    55Planlayın

    Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to cr

    KritikCVSS 9,4SilahlaştırılmışEPSS %58

    redhat · cloudforms management engine28 Eyl 2013

  • CVE-2013-5962
    24İzleyin

    Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPres

    OrtaCVSS 5,1Kavram kanıtıEPSS %14

    envato · complete gallery manager plugin30 Eyl 2013

  • CVE-2013-1839
    36İzleyin

    The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a den

    YüksekCVSS 7,8İstismar yokEPSS %18

    squid-cache · squid30 Eyl 2013