İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2014: sömürülen ve yeni ciddi CVE kayıtları

48 kayıt · 4 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2014-0497
    99Hemen

    Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 1

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    adobe · flash player5 Şub 2014

  • CVE-2013-4449
    20İzleyin

    The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial

    OrtaCVSS 4,3İstismar yokEPSS %10

    openldap · openldap5 Şub 2014

  • CVE-2013-6490
    44Planlayın

    The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Lengt

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    pidgin · pidgin6 Şub 2014

  • CVE-2014-0038
    40Planlayın

    The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to ga

    OrtaCVSS 6,9SilahlaştırılmışEPSS %35

    linux · linux kernel6 Şub 2014

  • CVE-2014-0980
    49Planlayın

    Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file.

    KritikCVSS 9,3SilahlaştırılmışEPSS %40

    poster software · publish it11 Şub 2014

  • CVE-2014-0253
    32İzleyin

    Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine TCP connection states, which allows rem

    OrtaCVSS 5,0İstismar yokEPSS %38

    microsoft · .net framework12 Şub 2014

  • CVE-2014-0254
    41Planlayın

    The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote

    YüksekCVSS 7,8İstismar yokEPSS %32

    microsoft · windows 812 Şub 2014

  • CVE-2014-0257
    58Planlayın

    Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute

    KritikCVSS 9,3SilahlaştırılmışEPSS %69

    microsoft · .net framework12 Şub 2014

  • CVE-2014-0263
    43Planlayın

    The Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2,

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · windows 712 Şub 2014

  • CVE-2014-0266
    34İzleyin

    The XMLHTTP ActiveX controls in XML Core Services 3.0 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windo

    YüksekCVSS 7,1İstismar yokEPSS %19

    microsoft · windows 712 Şub 2014

  • CVE-2014-0267
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0268
    24İzleyin

    Microsoft Internet Explorer 8 through 11 does not properly restrict file installation and registry-key creation, which allows remote attacke

    OrtaCVSS 4,3İstismar yokEPSS %22

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0269
    42Planlayın

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0270
    45Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0271
    49Planlayın

    The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary

    KritikCVSS 9,3İstismar yokEPSS %38

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0272
    42Planlayın

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0273
    44Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0274
    44Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0275
    44Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0276
    44Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0277
    45Planlayın

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0278
    42Planlayın

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0279
    44Planlayın

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %22

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0280
    42Planlayın

    Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0281
    45Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0283
    45Planlayın

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0284
    44Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0285
    44Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0286
    45Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0287
    45Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0288
    45Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0289
    46Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %28

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0290
    44Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0293
    22İzleyin

    Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web s

    OrtaCVSS 4,3İstismar yokEPSS %17

    microsoft · internet explorer12 Şub 2014

  • CVE-2014-0294
    46Planlayın

    Microsoft Forefront Protection 2010 for Exchange Server does not properly parse e-mail content, which might allow remote attackers to execut

    KritikCVSS 10,0İstismar yokEPSS %20

    microsoft · microsoft forefront protection 201012 Şub 2014

  • CVE-2014-0295
    21İzleyin

    VsaVb7rt.dll in Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not implement the ASLR protection mechanism, which makes it easier for remot

    OrtaCVSS 4,3İstismar yokEPSS %13

    microsoft · .net framework12 Şub 2014

  • CVE-2013-5014
    50Planlayın

    The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symante

    YüksekCVSS 7,5SilahlaştırılmışEPSS %67

    symantec · endpoint protection manager14 Şub 2014

  • CVE-2013-5015
    40Planlayın

    SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 bef

    OrtaCVSS 6,5SilahlaştırılmışEPSS %28

    symantec · endpoint protection manager14 Şub 2014

  • CVE-2014-0032
    20İzleyin

    The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParent

    OrtaCVSS 4,3İstismar yokEPSS %11

    apache · subversion14 Şub 2014

  • CVE-2014-0322
    91Hemen

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %85

    microsoft · internet explorer14 Şub 2014

  • CVE-2012-0270
    46Planlayın

    Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted (1) hetro file

    YüksekCVSS 7,5SilahlaştırılmışEPSS %54

    csounds · csound17 Şub 2014

  • CVE-2014-1903
    46Planlayın

    admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22

    YüksekCVSS 7,5SilahlaştırılmışEPSS %51

    freepbx · freepbx18 Şub 2014

  • CVE-2014-0502
    72Bu hafta

    Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and b

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %24

    adobe · flash player21 Şub 2014

  • CVE-2013-4841
    43Planlayın

    Unspecified vulnerability in dbd_manager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software (formerly LeftHand

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · lefthand26 Şub 2014

  • CVE-2013-7331
    71Bu hafta

    The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathna

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %50

    microsoft · internet explorer26 Şub 2014

  • CVE-2013-7332
    24İzleyin

    The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier does not properly detect recursion during entity expansion, which

    OrtaCVSS 5,0İstismar yokEPSS %13

    microsoft · windows 826 Şub 2014

  • CVE-2013-4286
    28İzleyin

    Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly

    OrtaCVSS 5,8İstismar yokEPSS %16

    apache · tomcat26 Şub 2014

  • CVE-2014-1912
    38İzleyin

    Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x befor

    YüksekCVSS 7,5Kavram kanıtıEPSS %28

    python · python28 Şub 2014