İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2014: sömürülen ve yeni ciddi CVE kayıtları

61 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2013-3662
    47Planlayın

    Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute arbitrary code via a crafted color pale

    KritikCVSS 9,3İstismar yokEPSS %31

    google · sketchup1 Tem 2014

  • CVE-2013-3664
    46Planlayın

    Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color pa

    KritikCVSS 9,3Kavram kanıtıEPSS %29

    google · sketchup1 Tem 2014

  • CVE-2013-7388
    41Planlayın

    Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attack

    KritikCVSS 9,3İstismar yokEPSS %13

    google · sketchup1 Tem 2014

  • CVE-2014-0325
    42Planlayın

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer3 Tem 2014

  • CVE-2014-3538
    24İzleyin

    file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial o

    OrtaCVSS 5,0İstismar yokEPSS %11

    christos zoulas · file3 Tem 2014

  • CVE-2013-3993
    57Planlayın

    IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access un

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %4

    ibm · infosphere biginsights7 Tem 2014

  • CVE-2014-2617
    44Planlayın

    Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive informa

    KritikCVSS 10,0İstismar yokEPSS %12

    hp · universal configuration management database7 Tem 2014

  • CVE-2014-3300
    40Planlayın

    The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 d

    YüksekCVSS 7,5SilahlaştırılmışEPSS %21

    cisco · unified cdm application software7 Tem 2014

  • CVE-2013-7389
    40Planlayın

    Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev.

    OrtaCVSS 4,3SilahlaştırılmışEPSS %27

    dlink · dir-645 firmware7 Tem 2014

  • CVE-2014-1767
    32İzleyin

    Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2,

    YüksekCVSS 7,2Kavram kanıtıEPSS %12

    microsoft · windows 78 Tem 2014

  • CVE-2014-1824
    43Planlayın

    Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · windows 78 Tem 2014

  • CVE-2014-2785
    42Planlayın

    Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2786
    42Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2787
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2788
    42Planlayın

    Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2789
    42Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2790
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2791
    42Planlayın

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2792
    42Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2794
    42Planlayın

    Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2795
    42Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2797
    42Planlayın

    Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2798
    42Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2800
    42Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2801
    44Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2802
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2803
    42Planlayın

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2804
    44Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2806
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2807
    42Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2809
    42Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2813
    42Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer8 Tem 2014

  • CVE-2014-2814
    21İzleyin

    Microsoft Service Bus 1.1 on Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a d

    OrtaCVSS 4,0İstismar yokEPSS %18

    microsoft · service bus8 Tem 2014

  • CVE-2014-4671
    40Planlayın

    Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.

    OrtaCVSS 4,3SilahlaştırılmışEPSS %22

    adobe · flash player9 Tem 2014

  • CVE-2014-0207
    31İzleyin

    The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5

    OrtaCVSS 6,5İstismar yokEPSS %16

    php · php9 Tem 2014

  • CVE-2014-3478
    31İzleyin

    Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.

    OrtaCVSS 6,5İstismar yokEPSS %15

    php · php9 Tem 2014

  • CVE-2014-3479
    21İzleyin

    The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5

    OrtaCVSS 4,3İstismar yokEPSS %14

    php · php9 Tem 2014

  • CVE-2014-3480
    29İzleyin

    The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, d

    OrtaCVSS 6,5İstismar yokEPSS %11

    php · php9 Tem 2014

  • CVE-2014-3487
    21İzleyin

    The cdf_read_property_info function in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, doe

    OrtaCVSS 4,3İstismar yokEPSS %14

    php · php9 Tem 2014

  • CVE-2014-3515
    39İzleyin

    The SPL component in PHP before 5.4.30 and 5.5.x before 5.5.14 incorrectly anticipates that certain data structures will have the array data

    YüksekCVSS 7,5İstismar yokEPSS %30

    php · php9 Tem 2014

  • CVE-2014-3888
    52Planlayın

    Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earli

    YüksekCVSS 8,3SilahlaştırılmışEPSS %62

    yokogawa · exaopc10 Tem 2014

  • CVE-2013-6117
    51Planlayın

    Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user cre

    YüksekCVSS 7,5SilahlaştırılmışEPSS %69

    dahuasecurity · dvr firmware11 Tem 2014

  • CVE-2014-4940
    26İzleyin

    Multiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for WordPress allow remote attackers to read arbitrary

    OrtaCVSS 5,0Kavram kanıtıEPSS %19

    tera charts plugin project · tera-charts11 Tem 2014

  • CVE-2014-4977
    48Planlayın

    Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL comman

    OrtaCVSS 6,5SilahlaştırılmışEPSS %74

    sonicwall · scrutinizer16 Tem 2014

  • CVE-2014-2477
    40Planlayın

    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, a

    DüşükCVSS 3,6SilahlaştırılmışEPSS %7

    oracle · vm virtualbox17 Tem 2014

  • CVE-2014-4210
    31İzleyin

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers

    OrtaCVSS 5,0Kavram kanıtıEPSS %38

    oracle · fusion middleware17 Tem 2014

  • CVE-2014-2623
    67Bu hafta

    Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.

    KritikCVSS 10,0SilahlaştırılmışEPSS %90

    hp · storage data protector17 Tem 2014

  • CVE-2014-2364
    48Planlayın

    Advantech WebAccess Stack-Based Buffer Overflow

    YüksekCVSS 7,5SilahlaştırılmışEPSS %61

    advantech · advantech webaccess19 Tem 2014

  • CVE-2013-4352
    20İzleyin

    The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forwa

    OrtaCVSS 4,3İstismar yokEPSS %11

    apache · http server20 Tem 2014

  • CVE-2014-0117
    28İzleyin

    The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a deni

    OrtaCVSS 4,3İstismar yokEPSS %35

    apache · http server20 Tem 2014

  • CVE-2014-0118
    28İzleyin

    The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompr

    OrtaCVSS 4,3İstismar yokEPSS %37

    apache · http server20 Tem 2014

  • CVE-2014-0226
    53Planlayın

    Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-b

    OrtaCVSS 6,8Kavram kanıtıEPSS %85

    apache · http server20 Tem 2014

  • CVE-2014-0231
    33İzleyin

    The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a deni

    OrtaCVSS 5,0İstismar yokEPSS %43

    apache · http server20 Tem 2014

  • CVE-2014-3523
    25İzleyin

    Memory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the Apache HTTP Server 2.4.x before 2.4.10 on Windo

    OrtaCVSS 5,0İstismar yokEPSS %16

    apache · http server20 Tem 2014

  • CVE-2014-4511
    55Planlayın

    Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request

    YüksekCVSS 7,5SilahlaştırılmışEPSS %82

    gitlist · gitlist22 Tem 2014

  • CVE-2014-4927
    34İzleyin

    Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote atta

    YüksekCVSS 7,8Kavram kanıtıEPSS %11

    acme · micro httpd24 Tem 2014

  • CVE-2014-2626
    43Planlayın

    Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows

    KritikCVSS 9,4İstismar yokEPSS %19

    hp · network virtualization26 Tem 2014

  • CVE-2014-4971
    40Planlayın

    Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary me

    YüksekCVSS 7,2SilahlaştırılmışEPSS %23

    microsoft · windows xp26 Tem 2014

  • CVE-2014-4725
    48Planlayın

    The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute

    YüksekCVSS 7,5SilahlaştırılmışEPSS %60

    mailpoet · mailpoet newsletters27 Tem 2014

  • CVE-2014-5111
    26İzleyin

    Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %21

    netfortris · trixbox28 Tem 2014

  • CVE-2014-3120
    89Hemen

    The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL exp

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %88

    elastic · elasticsearch28 Tem 2014