İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2014: sömürülen ve yeni ciddi CVE kayıtları

68 kayıt · 3 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2014-0972
    28İzleyin

    The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and ot

    YüksekCVSS 7,2İstismar yokEPSS %0

    codeaurora · android-msm1 Ağu 2014

  • CVE-2014-5160
    35İzleyin

    Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create ar

    OrtaCVSS 6,4İstismar yokEPSS %34

    hp · data protector1 Ağu 2014

  • CVE-2013-5758
    40Planlayın

    cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system m

    KritikCVSS 9,0Kavram kanıtıEPSS %11

    yealink · sip-t38g3 Ağu 2014

  • CVE-2014-3560
    48Planlayın

    NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code v

    YüksekCVSS 7,9İstismar yokEPSS %56

    samba · samba6 Ağu 2014

  • CVE-2014-3459
    30İzleyin

    Heap-based buffer overflow in SolarWinds Network Configuration Manager (NCM) before 7.3 allows remote attackers to execute arbitrary code vi

    OrtaCVSS 6,8İstismar yokEPSS %11

    solarwinds · network configuration manager7 Ağu 2014

  • CVE-2014-3914
    62Bu hafta

    Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    rocketsoftware · rocket servergraph7 Ağu 2014

  • CVE-2014-2630
    19İzleyin

    Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors.

    OrtaCVSS 4,4SilahlaştırılmışEPSS %7

    hp · operations agent12 Ağu 2014

  • CVE-2014-0316
    33İzleyin

    Memory leak in the Local RPC (LRPC) server implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Wi

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · windows 712 Ağu 2014

  • CVE-2014-0546
    76Bu hafta

    Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, an

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %22

    adobe · acrobat12 Ağu 2014

  • CVE-2014-1820
    21İzleyin

    Cross-site scripting (XSS) vulnerability in Master Data Services (MDS) in Microsoft SQL Server 2012 SP1 and 2014 on 64-bit platforms allows

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · sql server12 Ağu 2014

  • CVE-2014-2774
    42Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2784
    42Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2796
    42Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2808
    42Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2810
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2811
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2815
    48Planlayın

    Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executa

    YüksekCVSS 8,8Kavram kanıtıEPSS %43

    microsoft · onenote12 Ağu 2014

  • CVE-2014-2816
    42Planlayın

    Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privilege

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · sharepoint foundation12 Ağu 2014

  • CVE-2014-2817
    73Bu hafta

    Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %26

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2818
    42Planlayın

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2819
    31İzleyin

    Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation

    OrtaCVSS 6,8İstismar yokEPSS %11

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2820
    42Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2821
    42Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2822
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2823
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2824
    42Planlayın

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2825
    42Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2826
    42Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-2827
    42Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-4050
    42Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-4051
    42Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-4052
    42Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-4055
    42Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-4056
    42Planlayın

    Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-4057
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-4058
    42Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-4060
    34İzleyin

    Use-after-free vulnerability in MCPlayer.dll in Microsoft Windows Media Center TV Pack for Windows Vista, Windows 7 SP1, and Windows Media C

    OrtaCVSS 6,8İstismar yokEPSS %23

    microsoft · windows media center12 Ağu 2014

  • CVE-2014-4061
    35İzleyin

    Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch command

    OrtaCVSS 6,8İstismar yokEPSS %26

    microsoft · sql server12 Ağu 2014

  • CVE-2014-4062
    21İzleyin

    Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, and 3.5.1 does not properly implement the ASLR protection mechanism, which allows r

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · .net framework12 Ağu 2014

  • CVE-2014-4063
    44Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-4067
    42Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · internet explorer12 Ağu 2014

  • CVE-2014-3505
    34İzleyin

    Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0

    OrtaCVSS 5,0İstismar yokEPSS %46

    openssl · openssl13 Ağu 2014

  • CVE-2014-3506
    34İzleyin

    d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers t

    OrtaCVSS 5,0İstismar yokEPSS %46

    openssl · openssl13 Ağu 2014

  • CVE-2014-3507
    36İzleyin

    Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows rem

    OrtaCVSS 5,0Kavram kanıtıEPSS %54

    openssl · openssl13 Ağu 2014

  • CVE-2014-3508
    24İzleyin

    The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pre

    OrtaCVSS 4,3İstismar yokEPSS %23

    openssl · openssl13 Ağu 2014

  • CVE-2014-3509
    31İzleyin

    Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multith

    OrtaCVSS 6,8İstismar yokEPSS %13

    openssl · openssl13 Ağu 2014

  • CVE-2014-3510
    22İzleyin

    The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows

    OrtaCVSS 4,3İstismar yokEPSS %17

    openssl · openssl13 Ağu 2014

  • CVE-2014-3511
    21İzleyin

    The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS

    OrtaCVSS 4,3İstismar yokEPSS %14

    openssl · openssl13 Ağu 2014

  • CVE-2014-3512
    51Planlayın

    Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a

    YüksekCVSS 7,5İstismar yokEPSS %68

    openssl · openssl13 Ağu 2014

  • CVE-2014-5139
    22İzleyin

    The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NULL

    OrtaCVSS 4,3Kavram kanıtıEPSS %16

    openssl · openssl13 Ağu 2014

  • CVE-2012-0938
    28İzleyin

    Multiple SQL injection vulnerabilities in TestLink 1.9.3, 1.8.5b, and earlier allow remote authenticated users with certain permissions to e

    OrtaCVSS 6,5SilahlaştırılmışEPSS %5

    testlink · testlink14 Ağu 2014

  • CVE-2014-5266
    27İzleyin

    The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the numb

    OrtaCVSS 5,0SilahlaştırılmışEPSS %24

    wordpress · wordpress18 Ağu 2014

  • CVE-2014-5350
    39İzleyin

    Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via

    OrtaCVSS 5,0Kavram kanıtıEPSS %63

    bitdefender · gravityzone19 Ağu 2014

  • CVE-2014-5210
    44Planlayın

    The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    alienvault · open source security information management21 Ağu 2014

  • CVE-2014-5383
    32İzleyin

    SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspeci

    OrtaCVSS 6,5SilahlaştırılmışEPSS %21

    alienvault · open source security information management21 Ağu 2014

  • CVE-2014-5246
    44Planlayın

    The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication and gain administra

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    tenda · a5s firmware22 Ağu 2014

  • CVE-2014-5261
    33İzleyin

    The graph settings script (graph_settings.php) in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary commands via shell m

    YüksekCVSS 7,5İstismar yokEPSS %10

    cacti · cacti22 Ağu 2014

  • CVE-2014-5368
    26İzleyin

    Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-sourc

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    wp content source control project · wp content source control22 Ağu 2014

  • CVE-2014-3587
    23İzleyin

    Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.3

    OrtaCVSS 4,3İstismar yokEPSS %20

    php · php22 Ağu 2014

  • CVE-2014-3597
    32İzleyin

    Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS se

    OrtaCVSS 6,8İstismar yokEPSS %15

    php · php22 Ağu 2014

  • CVE-2014-5120
    30İzleyin

    gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which mig

    OrtaCVSS 6,4İstismar yokEPSS %16

    php · php22 Ağu 2014

  • CVE-2014-2632
    44Planlayın

    Unspecified vulnerability in the WebTier component in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to execute ar

    KritikCVSS 10,0İstismar yokEPSS %13

    hp · service manager23 Ağu 2014

  • CVE-2014-3524
    41Planlayın

    Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafte

    KritikCVSS 9,3İstismar yokEPSS %14

    apache · openoffice26 Ağu 2014

  • CVE-2014-3575
    20İzleyin

    The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data i

    OrtaCVSS 4,3İstismar yokEPSS %11

    apache · openoffice26 Ağu 2014

  • CVE-2014-5337
    25İzleyin

    The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remo

    OrtaCVSS 5,0SilahlaştırılmışEPSS %16

    wordpress mobile pack project · wordpress mobile pack29 Ağu 2014

  • CVE-2014-5073
    53Planlayın

    vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharac

    YüksekCVSS 7,5SilahlaştırılmışEPSS %76

    vmturbo · operations manager29 Ağu 2014

  • CVE-2014-5119
    35İzleyin

    Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to c

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    gnu · glibc29 Ağu 2014

  • CVE-2013-2597
    63Bu hafta

    Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used

    YüksekCVSS 8,4KEVSilahlaştırılmışEPSS %1

    codeaurora · android-msm31 Ağu 2014