İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2013: sömürülen ve yeni ciddi CVE kayıtları

43 kayıt · 1 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2013-6935
    47Planlayın

    Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the S

    KritikCVSS 9,3SilahlaştırılmışEPSS %32

    videocharge · watermark master4 Ara 2013

  • CVE-2013-6414
    40Planlayın

    actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers

    OrtaCVSS 5,0SilahlaştırılmışEPSS %20

    rubyonrails · rails6 Ara 2013

  • CVE-2013-4212
    51Planlayın

    Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expre

    OrtaCVSS 6,8SilahlaştırılmışEPSS %81

    apache · roller7 Ara 2013

  • CVE-2013-6397
    34İzleyin

    Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a ..

    OrtaCVSS 4,3İstismar yokEPSS %56

    apache · solr7 Ara 2013

  • CVE-2013-6407
    28İzleyin

    The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an

    OrtaCVSS 6,4İstismar yokEPSS %11

    apache · solr7 Ara 2013

  • CVE-2013-6408
    28İzleyin

    The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers

    OrtaCVSS 6,4İstismar yokEPSS %11

    apache · solr7 Ara 2013

  • CVE-2012-6612
    33İzleyin

    The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified i

    YüksekCVSS 7,5İstismar yokEPSS %10

    apache · solr7 Ara 2013

  • CVE-2013-1349
    40Planlayın

    Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname pa

    YüksekCVSS 7,5SilahlaştırılmışEPSS %22

    os4ed · opensis9 Ara 2013

  • CVE-2013-5447
    40Planlayın

    Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code

    OrtaCVSS 6,8SilahlaştırılmışEPSS %34

    ibm · forms viewer10 Ara 2013

  • CVE-2013-3623
    62Bu hafta

    Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) w

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    supermicro · intelligent platform management firmware10 Ara 2013

  • CVE-2013-5042
    21İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foun

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · asp.net signalr10 Ara 2013

  • CVE-2013-5045
    40Planlayın

    Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges

    OrtaCVSS 6,2SilahlaştırılmışEPSS %17

    microsoft · internet explorer10 Ara 2013

  • CVE-2013-5047
    41Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · internet explorer10 Ara 2013

  • CVE-2013-5048
    41Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · internet explorer10 Ara 2013

  • CVE-2013-5049
    43Planlayın

    Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer10 Ara 2013

  • CVE-2013-5051
    41Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · internet explorer10 Ara 2013

  • CVE-2013-5052
    41Planlayın

    Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · internet explorer10 Ara 2013

  • CVE-2013-5054
    21İzleyin

    Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request fo

    OrtaCVSS 4,3İstismar yokEPSS %12

    microsoft · office10 Ara 2013

  • CVE-2013-5056
    43Planlayın

    Use-after-free vulnerability in the Scripting Runtime Object Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 710 Ara 2013

  • CVE-2013-5059
    31İzleyin

    Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via craft

    OrtaCVSS 6,8İstismar yokEPSS %14

    microsoft · office web apps10 Ara 2013

  • CVE-2013-3900
    65Bu hafta

    WinVerifyTrust Signature Validation Vulnerability

    OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %44

    microsoft · windows 10 150711 Ara 2013

  • CVE-2013-5331
    59Planlayın

    Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, A

    KritikCVSS 9,3SilahlaştırılmışEPSS %72

    adobe · flash player11 Ara 2013

  • CVE-2013-5618
    42Planlayın

    Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla

    KritikCVSS 9,8İstismar yokEPSS %10

    mozilla · firefox11 Ara 2013

  • CVE-2013-6671
    42Planlayın

    The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonk

    KritikCVSS 9,8İstismar yokEPSS %11

    mozilla · firefox11 Ara 2013

  • CVE-2013-6810
    45Planlayın

    The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE), HP B-series SAN Ne

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    emc · connectrix manager12 Ara 2013

  • CVE-2011-4971
    40Planlayın

    Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) pro

    OrtaCVSS 5,0SilahlaştırılmışEPSS %22

    memcached · memcached12 Ara 2013

  • CVE-2013-2751
    61Bu hafta

    Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4

    KritikCVSS 10,0SilahlaştırılmışEPSS %71

    netgear · raidiator12 Ara 2013

  • CVE-2013-4988
    57Planlayın

    Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDI

    KritikCVSS 9,3SilahlaştırılmışEPSS %66

    icofx · icofx13 Ara 2013

  • CVE-2013-7091
    46Planlayın

    Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2

    OrtaCVSS 5,0SilahlaştırılmışEPSS %86

    synacor · zimbra collaboration suite13 Ara 2013

  • CVE-2013-6271
    40Planlayın

    Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invok

    YüksekCVSS 8,8SilahlaştırılmışEPSS %8

    google · android14 Ara 2013

  • CVE-2013-3140
    44Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer16 Ara 2013

  • CVE-2013-6420
    41Planlayın

    The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properl

    YüksekCVSS 7,5Kavram kanıtıEPSS %35

    php · php17 Ara 2013

  • CVE-2013-4775
    35İzleyin

    NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS

    YüksekCVSS 7,8Kavram kanıtıEPSS %14

    netgear · prosafe firmware19 Ara 2013

  • CVE-2013-6877
    40Planlayın

    Heap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allows remote atta

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    realnetworks · realplayer19 Ara 2013

  • CVE-2013-7186
    40Planlayın

    Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long string in a .m3u fil

    KritikCVSS 9,3Kavram kanıtıEPSS %11

    steinberg · mymp3pro20 Ara 2013

  • CVE-2013-6449
    23İzleyin

    The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, w

    OrtaCVSS 4,3İstismar yokEPSS %21

    openssl · openssl23 Ara 2013

  • CVE-2013-7102
    40Planlayın

    Multiple unrestricted file upload vulnerabilities in (1) media-upload.php, (2) media-upload-lncthumb.php, and (3) media-upload-sq_button.php

    OrtaCVSS 6,8SilahlaştırılmışEPSS %14

    optimizepress · optimizepress23 Ara 2013

  • CVE-2013-3846
    44Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of

    KritikCVSS 9,3Kavram kanıtıEPSS %21

    microsoft · internet explorer29 Ara 2013

  • CVE-2013-6189
    45Planlayın

    Unspecified vulnerability in the Archive Query Server in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3, 6.4

    KritikCVSS 10,0İstismar yokEPSS %16

    hp · application information optimizer29 Ara 2013

  • CVE-2013-4858
    21İzleyin

    Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3 allows remote attackers to cause a denial of service (application crash) via a cr

    OrtaCVSS 4,3Kavram kanıtıEPSS %13

    microsoft · windows movie maker30 Ara 2013

  • CVE-2013-6987
    34İzleyin

    Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before 4.3-3810 Update 3 al

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    synology · diskstation manager31 Ara 2013

  • CVE-2012-0261
    62Bu hafta

    license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary command

    KritikCVSS 10,0SilahlaştırılmışEPSS %73

    op5 · monitor31 Ara 2013

  • CVE-2012-0262
    62Bu hafta

    op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrar

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    op5 · monitor31 Ara 2013