İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2014: sömürülen ve yeni ciddi CVE kayıtları

63 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2012-6636
    40Planlayın

    The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arb

    OrtaCVSS 6,8SilahlaştırılmışEPSS %38

    google · android api3 Mar 2014

  • CVE-2013-4710
    50Planlayın

    Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView c

    KritikCVSS 9,3SilahlaştırılmışEPSS %43

    google · android3 Mar 2014

  • CVE-2014-1881
    33İzleyin

    Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to bypass intended device-resource restrictions

    YüksekCVSS 7,5İstismar yokEPSS %11

    apache · cordova3 Mar 2014

  • CVE-2014-1882
    34İzleyin

    Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to bypass intended device-resource restrictions

    YüksekCVSS 7,5İstismar yokEPSS %11

    adobe · phonegap3 Mar 2014

  • CVE-2013-4977
    45Planlayın

    Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other de

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    hikvision · ds-2cd7153-e firmware3 Mar 2014

  • CVE-2014-2013
    34İzleyin

    Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    artifex · mupdf3 Mar 2014

  • CVE-2014-2206
    58Planlayın

    Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a deni

    KritikCVSS 10,0SilahlaştırılmışEPSS %61

    getgosoft · getgo download manager5 Mar 2014

  • CVE-2014-2238
    40Planlayın

    SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 allows remote authent

    OrtaCVSS 6,5SilahlaştırılmışEPSS %11

    mantisbt · mantisbt5 Mar 2014

  • CVE-2013-6719
    32İzleyin

    delivery.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2, and 8.8 before FP2

    OrtaCVSS 6,0Kavram kanıtıEPSS %26

    ibm · tealeaf cx6 Mar 2014

  • CVE-2013-6720
    31İzleyin

    Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.

    OrtaCVSS 5,5Kavram kanıtıEPSS %29

    ibm · tealeaf cx6 Mar 2014

  • CVE-2014-0683
    43Planlayın

    The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    cisco · rv110w firmware6 Mar 2014

  • CVE-2014-1907
    28İzleyin

    Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote

    OrtaCVSS 6,4Kavram kanıtıEPSS %11

    videowhisper · live streaming integration plugin6 Mar 2014

  • CVE-2014-0092
    32İzleyin

    lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certifica

    OrtaCVSS 5,8İstismar yokEPSS %29

    gnu · gnutls6 Mar 2014

  • CVE-2014-2314
    40Planlayın

    Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers to create arbitrary f

    OrtaCVSS 4,3SilahlaştırılmışEPSS %26

    atlassian · jira9 Mar 2014

  • CVE-2014-0094
    50Planlayın

    The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter,

    OrtaCVSS 5,0SilahlaştırılmışEPSS %99

    apache · struts11 Mar 2014

  • CVE-2013-6031
    40Planlayın

    The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to chang

    OrtaCVSS 4,3SilahlaştırılmışEPSS %6

    huawei · e355 firmware11 Mar 2014

  • CVE-2014-2299
    51Planlayın

    Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 all

    KritikCVSS 9,3SilahlaştırılmışEPSS %47

    wireshark · wireshark11 Mar 2014

  • CVE-2014-2321
    58Planlayın

    web_shell_cmd.gch on ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests, as demonst

    KritikCVSS 10,0Kavram kanıtıEPSS %59

    zte · f46011 Mar 2014

  • CVE-2013-3928
    48Planlayın

    Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arb

    KritikCVSS 9,3SilahlaştırılmışEPSS %37

    jpchacha · chasys draw ies11 Mar 2014

  • CVE-2013-4467
    40Planlayın

    Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and

    OrtaCVSS 6,5SilahlaştırılmışEPSS %31

    vicidial · vicidial11 Mar 2014

  • CVE-2014-0297
    43Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0298
    41Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0299
    43Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0301
    41Planlayın

    Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Window

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · windows 712 Mar 2014

  • CVE-2014-0302
    43Planlayın

    Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0303
    43Planlayın

    Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0304
    43Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0305
    41Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0306
    41Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0307
    58Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service

    KritikCVSS 9,3SilahlaştırılmışEPSS %69

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0308
    41Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0309
    43Planlayın

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0311
    41Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0312
    43Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0313
    44Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0314
    43Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0317
    24İzleyin

    The Security Account Manager Remote (SAMR) protocol implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis

    OrtaCVSS 5,4İstismar yokEPSS %10

    microsoft · windows server 200312 Mar 2014

  • CVE-2014-0321
    41Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %12

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0324
    43Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · internet explorer12 Mar 2014

  • CVE-2014-0781
    45Planlayın

    Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow

    KritikCVSS 9,3SilahlaştırılmışEPSS %25

    yokogawa · centum cs 300014 Mar 2014

  • CVE-2014-0783
    56Planlayın

    Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

    KritikCVSS 9,0SilahlaştırılmışEPSS %67

    yokogawa · centum cs 300014 Mar 2014

  • CVE-2014-0784
    44Planlayın

    Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

    YüksekCVSS 8,3SilahlaştırılmışEPSS %35

    yokogawa · centum cs 300014 Mar 2014

  • CVE-2014-2323
    58Planlayın

    SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the

    KritikCVSS 9,8Kavram kanıtıEPSS %62

    lighttpd · lighttpd14 Mar 2014

  • CVE-2014-2324
    29İzleyin

    Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to

    OrtaCVSS 5,0Kavram kanıtıEPSS %29

    lighttpd · lighttpd14 Mar 2014

  • CVE-2013-6438
    28İzleyin

    The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespa

    OrtaCVSS 5,0İstismar yokEPSS %27

    apache · http server18 Mar 2014

  • CVE-2014-0098
    28İzleyin

    The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to c

    OrtaCVSS 5,0İstismar yokEPSS %26

    apache · http server18 Mar 2014

  • CVE-2014-2533
    40Planlayın

    /sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name

    YüksekCVSS 7,2SilahlaştırılmışEPSS %2

    blackberry · qnx neutrino rtos18 Mar 2014

  • CVE-2013-2641
    41Planlayın

    Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via

    OrtaCVSS 5,0SilahlaştırılmışEPSS %70

    sophos · web appliance firmware18 Mar 2014

  • CVE-2014-2087
    42Planlayın

    Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in Downloads_Deleted.cpp in Free Download Manager 3.9.3 build

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    freedownloadmanager · free download manager18 Mar 2014

  • CVE-2014-2120
    61Bu hafta

    Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attacker

    OrtaCVSS 6,1KEVSilahlaştırılmışEPSS %22

    cisco · adaptive security appliance software18 Mar 2014

  • CVE-2014-1510
    64Bu hafta

    The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25

    KritikCVSS 9,8SilahlaştırılmışEPSS %82

    mozilla · firefox19 Mar 2014

  • CVE-2014-1511
    64Bu hafta

    Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypa

    KritikCVSS 9,8SilahlaştırılmışEPSS %83

    mozilla · firefox19 Mar 2014

  • CVE-2014-1512
    49Planlayın

    Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,

    KritikCVSS 10,0İstismar yokEPSS %29

    mozilla · firefox19 Mar 2014

  • CVE-2014-0002
    38İzleyin

    The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have

    YüksekCVSS 7,5İstismar yokEPSS %27

    apache · camel21 Mar 2014

  • CVE-2014-2497
    23İzleyin

    The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of servi

    OrtaCVSS 4,3İstismar yokEPSS %20

    php · php21 Mar 2014

  • CVE-2014-2523
    43Planlayın

    net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attac

    KritikCVSS 10,0İstismar yokEPSS %10

    linux · linux kernel24 Mar 2014

  • CVE-2012-4886
    45Planlayın

    Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to execute arbitrary code v

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    kingsoft · office 201224 Mar 2014

  • CVE-2014-1761
    84Hemen

    Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Wor

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %77

    microsoft · office25 Mar 2014

  • CVE-2013-1605
    34İzleyin

    Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitrary code via a long f

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    maygion · ip camera firmware25 Mar 2014

  • CVE-2014-1303
    50Planlayın

    Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism

    KritikCVSS 10,0Kavram kanıtıEPSS %34

    apple · safari26 Mar 2014

  • CVE-2014-2668
    27İzleyin

    Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter t

    OrtaCVSS 5,0Kavram kanıtıEPSS %22

    apache · couchdb28 Mar 2014

  • CVE-2014-0983
    40Planlayın

    Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py in

    OrtaCVSS 6,9SilahlaştırılmışEPSS %8

    oracle · vm virtualbox31 Mar 2014

  • CVE-2014-2671
    41Planlayın

    Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly hav

    OrtaCVSS 6,8Kavram kanıtıEPSS %46

    microsoft · windows media player31 Mar 2014